5178 matches found
[SA13300] PHPNews "mid" Parameter SQL Injection Vulnerability
TITLE: PHPNews "mid" Parameter SQL Injection Vulnerability SECUNIA ADVISORY ID: SA13300 VERIFY ADVISORY: http://secunia.com/advisories/13300/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: PHPNews 1.x http://secunia.com/product/4313/ DESCRIPTION: A...
[SA13261] SecretSanta Security Bypass Vulnerability
TITLE: SecretSanta Security Bypass Vulnerability SECUNIA ADVISORY ID: SA13261 VERIFY ADVISORY: http://secunia.com/advisories/13261/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: SecretSanta 1.x http://secunia.com/product/4304/ DESCRIPTION: A vulnerability has been...
Firefox < 1.0.0 Multiple Vulnerabilities
The installed version of Firefox is earlier than 1.0.0. Such versions have multiple vulnerabilities that could result in a denial of service, local file disclosure, or password disclosure. These vulnerabilities are due to the fact that Firefox does handle the tag correctly. C Tenable Network...
[SA13135] SQLgrey Postfix greylisting service Unspecified SQL Injection
---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...
[SECURITY] [DSA 581-1] New xpdf packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 581-1 [email protected] http://www.debian.org/security/ Martin Schulze November 2nd, 2004 http://www.debian.org/security/faq -...
Mandrake Linux Security Advisory : squid (MDKSA-2004:112)
iDEFENSE discovered a Denial of Service vulnerability in squid version 2.5.STABLE6 and previous. The problem is due to an ASN1 parsing error where certain header length combinations can slip through the validations performed by the ASN1 parser, leading to the server assuming there is heap...
[SA12831] WeHelpBUS Arbitrary Command Execution Vulnerability
TITLE: WeHelpBUS Arbitrary Command Execution Vulnerability SECUNIA ADVISORY ID: SA12831 VERIFY ADVISORY: http://secunia.com/advisories/12831/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: WeHelpBUS 0.x http://secunia.com/product/4057/ DESCRIPTION: A vulnerability ha...
[SA12813] phpMyAdmin Unspecified Arbitrary Command Execution Vulnerability
TITLE: phpMyAdmin Unspecified Arbitrary Command Execution Vulnerability SECUNIA ADVISORY ID: SA12813 VERIFY ADVISORY: http://secunia.com/advisories/12813/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: phpMyAdmin 2.x http://secunia.com/product/1720/ DESCRIPTION: A...
[SA12789] IceWarp Web Mail Cross-Site Scripting Vulnerabilities
TITLE: IceWarp Web Mail Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA12789 VERIFY ADVISORY: http://secunia.com/advisories/12789/ CRITICAL: Moderately critical IMPACT: Unknown, Cross Site Scripting WHERE: From remote SOFTWARE: IceWarp Web Mail 5.x http://secunia.com/product/3775/...
DSA-560-1 lesstif1-1 - integer and stack overflows
Bulletin has no description...
[SA12720] Online Recruitment Agency Unspecified Vulnerabilities
TITLE: Online Recruitment Agency Unspecified Vulnerabilities SECUNIA ADVISORY ID: SA12720 VERIFY ADVISORY: http://secunia.com/advisories/12720/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: Online Recruitment Agency 1.x http://secunia.com/product/4000/ DESCRIPTION: So...
[SA12703] IBM Trading Partner Interchange Arbitrary File Access Vulnerability
TITLE: IBM Trading Partner Interchange Arbitrary File Access Vulnerability SECUNIA ADVISORY ID: SA12703 VERIFY ADVISORY: http://secunia.com/advisories/12703/ CRITICAL: Moderately critical IMPACT: Exposure of system information, Exposure of sensitive information WHERE: From remote SOFTWARE: IBM...
Debian DSA-323-1 : noweb - insecure temporary files
Jakob Lell discovered a bug in the 'noroff' script included in noweb whereby a temporary file was created insecurely. During a review, several other instances of this problem were found and fixed. Any of these bugs could be exploited by a local user to overwrite arbitrary files owned by the user...
Debian DSA-161-1 : mantis - privilege escalation
A problem with user privileges has been discovered in the Mantis package, a PHP based bug tracking system. The Mantis system didn't check whether a user is permitted to view a bug, but displays it right away if the user entered a valid bug id. Another bug in Mantis caused the 'View Bugs' page to...
Debian DSA-194-1 : masqmail - buffer overflows
A set of buffer overflows have been discovered in masqmail, a mail transport agent for hosts without permanent internet connection. In addition to this privileges were dropped only after reading a user-supplied configuration file. Together this could be exploited to gain unauthorized root access ...
Debian DSA-331-1 : imagemagick - insecure temporary file
imagemagick's libmagick library, under certain circumstances, creates temporary files without taking appropriate security precautions. This vulnerability could be exploited by a local user to create or overwrite files with the privileges of another user who is invoking a program using this librar...
Debian DSA-141-1 : mpack - buffer overflow
Eckehard Berns discovered a buffer overflow in the munpack program which is used for decoding respectively binary files in MIME Multipurpose Internet Mail Extensions format mail messages. If munpack is run on an appropriately malformed email or news article then it will crash, and perhaps can be...
Debian DSA-152-1 : l2tpd - missing random seed
Current versions of l2tpd, a layer 2 tunneling client/server program, forgot to initialize the random generator which made it vulnerable since all generated random number were 100% guessable. When dealing with the size of the value in an attribute value pair, too many bytes were able to be copied...
ADVISORY: http response splitting in snipsnap
ADVISORY Author: Maestro me! Date: 14-SEP-04 Vendor: SnipSnap www.snipsnap.org Product: SnipSnap 0.5.2a Product description from vendor website: SnipSnap is a free and easy to install weblog and wiki tool written in Java. Problem: Http response splitting web cache poisoning, xss, yadayadayada -...