KLA10048 DoS vulnerability in AOL AIM

An integer underflow vulnerability was found in AIM. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited from the network at a point related to the GIF parser via a specially designed buddy icon. Original advisories vulnerability...

[SA15078] Mnemo Parent Frame Page Title Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Mnemo Parent Frame Page Title Cross-Site Scripting...

[SA14321] Ulog-php SQL Injection Vulnerabilities

TITLE: Ulog-php SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA14321 VERIFY ADVISORY: http://secunia.com/advisories/14321/ CRITICAL: Less critical IMPACT: Manipulation of data WHERE: From local network SOFTWARE: Ulog-php 0.x http://secunia.com/product/4684/ DESCRIPTION: Some vulnerabilities...

[SA13981] uim Environment Variable Trust Privilege Escalation

TITLE: uim Environment Variable Trust Privilege Escalation SECUNIA ADVISORY ID: SA13981 VERIFY ADVISORY: http://secunia.com/advisories/13981/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: uim 0.x http://secunia.com/product/4680/ DESCRIPTION: Takumi Asaki has...

[SECURITY] [DSA 686-1] New gftp packages fix directory traversal vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 686-1 [email protected] http://www.debian.org/security/ Martin Schulze February 17th, 2005 http://www.debian.org/security/faq -...

DSA-666-1 python2.2 - design flaw

Bulletin has no description...

vBulletin BB Tag XSS

According to its banner, the remote version of vBulletin is earlier than 2.3.6 / 3.0.6. Such versions are reportedly affected by a cross-site scripting issue involving its BB code parsing. As a result of this vulnerability, it is possible for a remote attacker to create a malicious link containin...

[ GLSA 200501-35 ] Evolution: Integer overflow in camel-lock-helper

Gentoo Linux Security Advisory GLSA 200501-35 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[SA13935] Help Desk Reloaded Unspecified Login Vulnerability

TITLE: Help Desk Reloaded Unspecified Login Vulnerability SECUNIA ADVISORY ID: SA13935 VERIFY ADVISORY: http://secunia.com/advisories/13935/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: Help Desk Reloaded 3.x http://secunia.com/product/4545/ DESCRIPTION: A...

[SECURITY] [DSA 649-1] New xtrlock packages fix authentication bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 649-1 [email protected] http://www.debian.org/security/ Martin Schulze January 20th, 2005 http://www.debian.org/security/faq -...

DSA-639-1 mc - several

Bulletin has no description...

DSA-629-1 krb5 - buffer overflow

Bulletin has no description...

[SA13654] Linux Kernel SACF Instruction Privilege Escalation Vulnerability

TITLE: Linux Kernel SACF Instruction Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA13654 VERIFY ADVISORY: http://secunia.com/advisories/13654/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: Linux Kernel 2.6.x http://secunia.com/product/2719/...

Important: Red Hat Security Advisory: acroread security update

An updated Adobe Acrobat Reader package that fixes a security issue is now available. The Adobe Acrobat Reader browser allows for the viewing, distributing, and printing of documents in portable document format PDF. iDEFENSE has reported that Adobe Acrobat Reader 5.0.9 contains a buffer overflow...

Sybase ASE 12.5.2 vulnerabilities

Sherief Hammad of NGSSoftware has discovered three high risk security vulnerabilities in Sybase Adaptive Server Enterprise 12.5.2. Sybase ASE versions 12.5.2 and older are vulnerable to these issues. These vulnerabilities have now been fixed by Sybase in the Sybase ASE 12.5.3 interim release whic...

[SA13600] Namazu "namazu.cgi" Cross-Site Scripting Vulnerability

TITLE: Namazu "namazu.cgi" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA13600 VERIFY ADVISORY: http://secunia.com/advisories/13600/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Namazu 2.x http://secunia.com/product/4441/ DESCRIPTION: A vulnerabili...

[SA13556] Email Sanitizer Unspecified MIME Denial of Service Vulnerability

TITLE: Email Sanitizer Unspecified MIME Denial of Service Vulnerability SECUNIA ADVISORY ID: SA13556 VERIFY ADVISORY: http://secunia.com/advisories/13556/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: Email Sanitizer 1.x http://secunia.com/product/4436/ DESCRIPTION: A...

phpMyAdmin: Multiple vulnerabilities

Background phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL databases from a web-browser. Description Nicolas Gregoire exaprobe.com has discovered two vulnerabilities that exist only on a webserver where PHP safemode is off. These vulnerabilities could lead to...

[SA13413] IlohaMail Unspecified Vulnerability

TITLE: IlohaMail Unspecified Vulnerability SECUNIA ADVISORY ID: SA13413 VERIFY ADVISORY: http://secunia.com/advisories/13413/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: IlohaMail 0.8.x http://secunia.com/product/1039/ DESCRIPTION: A vulnerability with an unknown...

[SA12856] Ansel "image" SQL Injection and Script Insertion Vulnerabilities

TITLE: Ansel "image" SQL Injection and Script Insertion Vulnerabilities SECUNIA ADVISORY ID: SA12856 VERIFY ADVISORY: http://secunia.com/advisories/12856/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Ansel 2.x...