1010 matches found
Symantec Norton Mobile Security for Android Security Bypass Vulnerability
Symantec Norton Mobile Security for Android is the United States Symantec Symantec, Inc. based on the Android platform for mobile devices to provide security features of the software. A security bypass vulnerability exists in versions of Symantec Norton Mobile Security for Android prior to 3.16. ...
Kerio Control Cross-Site Request Forgery Vulnerability
Kerio Control is a simple and fast unified threat management system. Cross-site request forgery vulnerabilities in Kerio Control version 9.1.3 can be exploited by an attacker to execute arbitrary script code in the context of an affected site, steal cookie-based authentication, disclose sensitive...
Fortinet FortiSwitch Weak Password Vulnerability
Fortinet FortiSwitch is a suite of secure switching platforms from Fortinet, Inc. designed for Ethernet infrastructure and current network edge configurations. A weak password vulnerability exists in Fortinet FortiSwitch versions prior to 3.4.1. An attacker could exploit the vulnerability to log ...
AZL-6953 CVE-2014-9639 affecting package vorbis-tools for versions less than 1.4.0-35
Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service crash via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access...
AZL-40745 CVE-2011-2501 affecting package syslinux for versions less than 6.04-11
The pngformatbuffer function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 allows remote attackers to cause a denial of service application crash via a crafted PNG image that triggers an out-of-bounds read during the copying of...
AZL-34843 CVE-2007-4998 affecting package kernel for versions less than 6.6.35.1-4
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination...
AZL-34672 CVE-2007-6109 affecting package emacs for versions less than 29.1-1
Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service application crash and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval...
AZL-6828 CVE-2007-4559 affecting package python3 for versions less than 3.9.19-1
Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267...
xoops-xfsection.txt
XOOPS Module XFsection Remote File Inclusion version: 1.07 source : http://prdownloads.sourceforge.net/xoops/xoops2-modxfsection-107.zip Discovered by SpLo1T from hTTp://hacking.3Xforum.Ro Bug : http://www.site.com/modules/xfsection/modify.php?dirmodule=evilcode.txt? Shoutz t0 :...
AZL-35079 CVE-2007-2768 affecting package openssh for versions less than 9.5p1-2
OpenSSH, when using OPIE One-Time Passwords in Everything for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords OTP, a similar issue to CVE-2007-2243...
Konversation IRC Client < 0.15.1 Multiple Remote Vulnerabilities
Binary data 2547.prm...
Owl < 0.74.0 Multiple Vulnerabilities
Binary data 2479.prm...
Moodle < 1.4.3 Glossary Module SQLi
Binary data 2388.prm...
Quicktime < 6.5.2
The remote Mac OS X host is running a version of Quicktime that is older than Quicktime 6.5.2. The remote version of this software reportedly fails to check bounds properly when decoding BMP images, leading to a heap overflow. If a remote attacker can trick a user into opening a maliciously craft...
WordPress < 1.2.1 'wp-login.php' HTTP Response Splitting
Binary data 2356.prm...
IBM DB2 < 8.2 Multiple Vulnerabilities (2) (deprecated)
Binary data 2349.prm...
Kerio MailServer < 6.0.3 Unspecified Vulnerability
The remote host is running a version of Kerio MailServer prior to 6.0.3. There is an undisclosed flaw in the remote version of this server that might allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid15404;...
Serv-U FTP Server < 5.2.0.1 'STOU' Command Remote DoS
Binary data 2275.prm...