267 matches found
VPOPMail 0.9x vpopmail.php Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7063/info A vulnerability has been reported for VPOPMail that may allow attackers to execute arbitrary commands on a vulnerable system. The vulnerability exists due to insufficient sanitization of user-supplied input. As...
Sun ONE Starter Kit 2.0 / ASTAware SearchDisc 3.1 Search Engine Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5828/info A vulnerability has been reported for the Sun ONE Starter Kit 2.0 and ASTAware SearchDisc. The Starter Kit includes a search engine facility provided for easy information retrieval. The search engine included wi...
Laurent Adda Les Commentaires 2.0 PHP Script derniers_commentaires.php Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/9536/info It has been reported that Les Commentaires may be prone to a file include vulnerability in various modules, that may allow an attacker to include malicious external files containing arbitrary PHP code to be...
Srcpd 2.0 - Multiple Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/8467/info Several stack-based buffer overflow vulnerabilities exist in multiple srcpd commands that may allow an attacker to run arbitrary code on a vulnerable host. The vulnerability is due to the lack of boundary checki...
ArsDigita Community System 3.4.x Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22121/info ArsDigita Community System is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from...
Xeneo Web Server 2.2.9 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7398/info Xeneo web server has been reported prone to denial of service vulnerability. It has been reported that a specifically crafted HTTP GET request containing over 4096 bytes of data will trigger this vulnerability...
http commander 4.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8948/info It has been reported that HTTP Commander is prone a directory traversal issue allowing a remote attacker to traverse outside the server root directory by using '../' character sequences. Successful exploitation ...
CakePHP 1.1.7.3363 Vendors.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20150/info CakePHP is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable syst...
Microsoft WINS Service Memory Overwrite
No description provided by source. $Id: ms04045wins.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Siteframe 2.2.4 Download.php Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7143/info Siteframe has been reported vulnerable to an information disclosure vulnerability. When handling certain download requests Siteframe may be lead into an error condition. When these errors occur, the script will...
WebCalendar 0.9.x Multiple Module SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/8540/info It has been reported that WebCalendar may be prone to multiple SQL injection issues in the viewt.php, vieww.php, viewv.php, and login.php modules of the software. The problems arise from a lack of sufficient...
Microsoft Windows Media Player 7.0 .WMZ Arbitrary Java Applet Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2203/info A vulnerability has been reported in Microsoft Windows Media Player 7 which is exploitable through Internet Explorer and Java. Skins are downloadable files which change the appearance of a program's user...
Quick Classifieds 1.0 - controlpannel/setUp.php3 DOCUMENT_ROOT Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the applicati...
Microsoft Internet Explorer 6.0 - Local File Access Weakness
No description provided by source. source: http://www.securityfocus.com/bid/22621/info Microsoft Internet Explorer is reportedly prone to multiple local file-access weaknesses because the application fails to properly handle HTML tags. These issues are triggered when an attacker entices a victim...
APSIS Pound 1.5 - Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10267/info APSIS Pound has been found to be prone to a remote format string vulnerability. The problem presents itself when Pound handles certain requests containing embedded format string specifiers. Ultimately this...
Chameleon LE 1.203 Index.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19107/info Chameleon LE is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable...
Holtstraeter Rot 13 Enkrypt.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22997/info Holtstraeter Rot 13 is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve the contents of arbitrary...
FreeBSD-SA-14:05.nfsserver
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-14:05.nfsserver Security Advisory The FreeBSD Project Topic: Deadlock in the NFS server Category: core Module: nfsserver Announced: 2014-04-08 Credits: Rick...
Apple QuickTime Pictureviewer Arbitrary Code Execution Vulnerability (Dec 2013) - Windows
Apple QuickTime is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...
FreeBSD-SA-13:14.openssh
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-13:14.openssh Security Advisory The FreeBSD Project Topic: OpenSSH AES-GCM memory corruption vulnerability Category: contrib Module: openssh Announced:...