785 matches found
CVE-2005-0567
Multiple PHP remote file inclusion vulnerabilities in phpMyAdmin 2.6.1 allow remote attackers to execute arbitrary PHP code by modifying the 1 theme parameter to phpmyadmin.css.php or 2 cfgServerextension parameter to databaseinterface.lib.php to reference a URL on a remote web server that contai...
CVE-2005-0432
BEA WebLogic Server 7.0 Service Pack 5 and earlier, and 8.1 Service Pack 3 and earlier, generates different login exceptions that suggest why an authentication attempt fails, which makes it easier for remote attackers to guess passwords via brute force attacks...
Mandrake Linux Security Advisory : openssh (MDKSA-2001:033-2)
There are several weaknesses in various implementations of the SSH Secure Shell protocols. When exploited, they let the attacker obtain sensitive information by passively monitoring encrypted SSH sessions. The information can later be used to speed up brute-force attacks on passwords, including t...
CVE-2004-2135
cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption...
ProductCart 1.x/2.x - 'Custva.asp?redirectUrl' Cross-Site Scripting
source: https://www.securityfocus.com/bid/9669/info EarlyImpact ProductCart is reportedly prone to multiple vulnerabilities. The specific issues include SQL injection, cross-site scripting and cryptographic weaknesses. These issues could expose sensitive data such as user credentials and allow fo...
ProductCart 1.x2.x - Custva.asp?redirectUrl Cross-Site Scripting
ProductCart 1.x2.x - Custva.asp?redirectUrl Cross-Site Scripting source: https://www.securityfocus.com/bid/9669/info EarlyImpact ProductCart is reportedly prone to multiple vulnerabilities. The specific issues include SQL injection, cross-site scripting and cryptographic weaknesses. These issues...
ProductCart 1.x2.x - advSearch_h.asp Multiple SQL Injections
ProductCart 1.x2.x - advSearchh.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/9669/info EarlyImpact ProductCart is reportedly prone to multiple vulnerabilities. The specific issues include SQL injection, cross-site scripting and cryptographic weaknesses. These issues could...
ProductCart 1.x2.x - Weak Cryptography
ProductCart 1.x2.x - Weak Cryptography source: https://www.securityfocus.com/bid/9669/info EarlyImpact ProductCart is reportedly prone to multiple vulnerabilities. The specific issues include SQL injection, cross-site scripting and cryptographic weaknesses. These issues could expose sensitive dat...
ProductCart 1.x/2.x - 'advSearch_h.asp' Multiple SQL Injections
source: https://www.securityfocus.com/bid/9669/info EarlyImpact ProductCart is reportedly prone to multiple vulnerabilities. The specific issues include SQL injection, cross-site scripting and cryptographic weaknesses. These issues could expose sensitive data such as user credentials and allow fo...
Microsoft Internet Explorer code execution
Web Folders feature allows to store file in known location. In conjunction with another weaknesses it makes it possible to save and execute code...
Kerberos 4 Realm Principle Impersonation
The remote host is running Kerberos IV. It has been demonstrated that the Kerberos IV protocol has inherent design flaws that make it insecure to use. C Tenable Network Security, Inc. Ref: Delivered-To: moderator for [email protected] To: [email protected] Subject:...
[SECURITY] [DSA 266-1] New krb5 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 266-1 [email protected] http://www.debian.org/security/ Martin Schulze March 17th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 266-1] New krb5 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 266-1 [email protected] http://www.debian.org/security/ Martin Schulze March 17th, 2003 http://www.debian.org/security/faq -...
CVE-2003-0139
Certain weaknesses in the implementation of version 4 of the Kerberos protocol krb4 in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."...
CVE-2003-0139
Certain weaknesses in the implementation of version 4 of the Kerberos protocol krb4 in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."...
Abyss WebServer Brute Force Vulnerability
Abyss WebServer Brute Force Vulnerability Package: Abyss WebServer Vendor Web Site: http://www.aprelium.com Versions: All versions = v1.1.2 Platforms: Linux, Windows Local: No Remote: Yes Fix Available: Nofix in progress Vendor Contacted: Sunday, February 09, 2003 6:12 PM Advisory Author: thomas...
Multiple Mambo Site Server sec-weaknesses
=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: Multiple Mambo Site Server sec-weaknesses product: Mambo Site Server 4.0.11 vendor: http://sourceforge.org/projects/mambo risk: high date: 12/12/2k2 discovered by: euronymous /F0KP /HACKRU Team advisory urls:...
Strange Attractors and TCP/IP Sequence Number Analysis - One Year Later
Hello, Over a year ago, I published a paper that attempted to analyze the randomness of PRNGs used in TCP/IP stacks on several operating systems. The approach I've chosen resulted in detecting some non-trivial dependencies in several generators, and some amusing 3D pictures. The original RAZOR...
CVE-2002-0167
Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service crash and possibly execute arbitrary code via certain weaknesses of NetPBM...