767 matches found
Chora Remote Code Execution Vulnerability
The remote server is running at least one instance of Chora version 1.2.1 or earlier. Such versions have a flaw in the diff viewer that enables a remote attacker to run arbitrary code with the permissions of the web user. OpenVAS Vulnerability Test $Id: choraremotecodeexecution.nasl 7221 2017-09-...
[SECURITY] [DSA 763-1] New zlib packages fix buffer overflow
------------------------------------------------------------------------ Debian Security Advisory DSA 763-1 [email protected] http://www.debian.org/security/ Michael Stone July 20, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
PunBB < 1.2.2 Multiple Input Validation Vulnerabilities
The remote host is running a version of PunBB that fails to properly sanitize user-input to several scripts thereby enabling an attacker to launch various SQL injection attacks. In addition, the profile.php script enables anyone to call the changepass action while specifying the id of an existing...
[SA13635] Rpm Finder "web()" Buffer Overflow and Insecure File Creation
TITLE: Rpm Finder "web" Buffer Overflow and Insecure File Creation SECUNIA ADVISORY ID: SA13635 VERIFY ADVISORY: http://secunia.com/advisories/13635/ CRITICAL: Moderately critical IMPACT: Privilege escalation, System access WHERE: From remote SOFTWARE: Rosiello Rpm Finder rpf 1.x...
WordPress Core 1.2.1/1.2.2 - 'link-manager.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied data. The cross-site scripting and HTML injection issue...
PT-2004-1754 · Rsbac · Rsbac
Name of the Vulnerable Software and Affected Versions: RSBAC versions 1.2.2 through 1.2.3 Description: The issue allows local users to potentially gain elevated privileges due to access being granted to certain system calls, including sys creat, sys open, and sys mknod, even when inside jails...
PT-2004-1081 · Libpng · Libpng
Name of the Vulnerable Software and Affected Versions: libpng versions 1.0.15 and earlier libpng versions 1.0.6 and earlier libpng version 1.2.2 Description: The issue allows attackers to cause a denial of service via a malformed PNG image file, triggering an error that causes an out-of-bounds re...