414831 matches found
CVE-2008-1146: Undefined Security Weakness
A certain pseudo-random number generator PRNG algorithm that uses XOR and 3-bit random hops aka "Algorithm X3", as used in OpenBSD 2.8 through 4.2, allows remote attackers to guess sensitive values such as DNS transaction IDs by observing a sequence of previously generated values. NOTE: this issu...
CVE-2008-0803: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the sysconfpathreal parameter to 1 modules\class\Table.php; 2 dbadmins.php, 3 dbalert.php, 4 dbdouble.php, 5 dbgames.php, 6 dbmatches.php, 7...
CVE-2008-0683: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in shiftthis-preview.php in the ShiftThis Newsletter stnewsletter plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter...
CVE-2007-6552: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in AuraCMS 2.2 allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the act parameter, possibly involving the news pilih component; as demonstrated by including admin/adminusers.php to bypass a protection...
CVE-2007-6465: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in ganglia-web in Ganglia before 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 c and 2 h parameters to a web/hostgmetrics.php; the 3 G, 4 me, 5 x, 6 n, 7 v, 8 l, 9 vl, and 10 st parameters to b web/graph.php; and th...
CVE-2007-4269: Undefined Security Weakness
Integer overflow in the Networking component in Apple Mac OS X 10.4 through 10.4.10 allows local users to execute arbitrary code via a crafted AppleTalk Session Protocol ASP message on an AppleTalk socket, which triggers a heap-based buffer overflow...
CVE-2007-5653: Improper Neutralization of Special Elements used in an OS Command
The Component Object Model COM functions in PHP 5.x on Windows do not follow safemode and disablefunctions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by executing objects with the kill bit set in the corresponding ActiveX control...
CVE-2007-5303: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in newspage.php in SnewsCMS Rus 2.1 allows remote attackers to inject arbitrary web script or HTML via the pageid parameter...
CVE-2004-2687: Undefined Security Weakness
distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks...
CVE-2007-4578: Undefined Security Weakness
Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the...
CVE-2007-4427: Undefined Security Weakness
Unspecified vulnerability in the login page redirection logic in the Cache' Server Page CSP implementation in InterSystems Cache' 2007.1.0.369.0 and 2007.1.1.420.0 allows remote authenticated users to modify data on a server, related to encoding of certain parameter values by this redirection...
CVE-2007-4184: Undefined Security Weakness
SQL injection vulnerability in administrator/popups/pollwindow.php in Joomla! 1.0.12 allows remote attackers to execute arbitrary SQL commands via the pollid parameter...
CVE-2007-1733: Undefined Security Weakness
Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute arbitrary code via a long 1 /cgi-bin/ or 2 /cgi/ pathname in an HTTP GET request, probably a different issue than CVE-2006-5112...
CVE-2007-0953: Undefined Security Weakness
Cross-site scripting XSS vulnerability in search.pl in @Mail 4.61 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...
CVE-2007-0890: Undefined Security Weakness
Cross-site scripting XSS vulnerability in scripts/passwdmysql in cPanel WebHost Manager WHM 11.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the password parameter...
CVE-2007-0699: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in includes/includes.php in Guernion Sylvain Portail Web Php aka Gsylvain35 Portail Web, PwP before 2.5.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...
CVE-2006-5610: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded phpBB phpbbfm 2021.4.40, allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-3559: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to execute arbitrary SQL commands and delete all shoutbox messages via the 1 name and 2 pesan parameters...
CVE-2006-2583: Undefined Security Weakness
PHP remote file inclusion vulnerability in nucleus/libs/PLUGINADMIN.php in Nucleus 3.22 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSDIRLIBS parameter...
CVE-2006-1844: Undefined Security Weakness
The Debian installer for the 1 shadow 4.0.14 and 2 base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges...
CVE-2006-1482: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in ConfTool 1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2006-1364: Uncontrolled Resource Consumption
Microsoft w3wp aka w3wp.exe does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service resource consumption or crash by repeatedly requesting each of several documents that refer to COM...
CVE-2006-0844: Undefined Security Weakness
Leif M. Wright's Blog 3.5 does not make a password comparison when authenticating an administrator via a cookie, which allows remote attackers to bypass login authentication, probably by setting the blogAdmin cookie...
CVE-2005-2619: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in kvarcve.dll in Autonomy formerly Verity KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a 1 ZIP, 2 UUE or 3 TAR archive that contains a .. dot dot in the filename, which is not properly...
CVE-2006-0137: Undefined Security Weakness
SQL injection vulnerability in linkcategory.php in Phanatic Softwares Chimera Web Portal System 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-0082: Use of Externally-Controlled Format String
Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name...
CVE-2005-3819: Undefined Security Weakness
Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary SQL commands and bypass authentication via the 1 username and 2 date parameter in the HelpDesk module...
CVE-2004-2482: Undefined Security Weakness
Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have a closing OBJECT tag, which causes Outlook to automatically download the URI in the data property ...
CVE-2005-2611: Undefined Security Weakness
VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write...
CVE-2003-1165: Undefined Security Weakness
Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP request with a long User-Agent header...
CVE-2004-2045: Undefined Security Weakness
The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to cause a denial of service device reboot via an HTTP request with a long username...
CVE-2005-1342: Undefined Security Weakness
The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands...
CVE-2000-1221: Undefined Security Weakness
The line printer daemon lpd in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by...
CVE-2002-1614: Undefined Security Weakness
Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at...
CVE-2004-1769: Undefined Security Weakness
The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass...
CVE-2002-0990: Undefined Security Weakness
The web proxy component in Symantec Enterprise Firewall SEF 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of service connection resource exhaustion via multiple connection requests to domains whose DNS server...
CVE-2002-1463: Undefined Security Weakness
Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers ISN, which allows remote attackers to spoof connections...
CVE-2003-0021: Undefined Security Weakness
The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence...
CVE-2004-0735: Undefined Security Weakness
Buffer overflow in Medal of Honor 1 Allied Assault 1.11v9 and earlier, 2 Breakthrough 2.40b and earlier, and 3 Spearhead 2.15 and earlier, when playing on a Local Area Network LAN, allows remote attackers to execute arbitrary code via vectors such as 1 the getinfo query, 2 the connect packet, and...
CVE-2004-0244: Improper Input Validation
Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 MSFC2 and a FlexWAN or OSM module allow local users to cause a denial of service hang or reset by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet...
CVE-2002-0068: Undefined Security Weakness
Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service core dump and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters...
CVE-2003-0048: Undefined Security Weakness
PuTTY 0.53b and earlier does not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials...
CVE-2001-1142: Undefined Security Weakness
ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privileges...
CVE-2001-0473: Undefined Security Weakness
Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands...
CVE-1999-1183: Undefined Security Weakness
System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse 1 runtask or 2 runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type...
CVE-1999-1113: Undefined Security Weakness
Buffer overflow in Eudora Internet Mail Server EIMS 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service via a long USER command to port 106...
CVE-2000-0145: Undefined Security Weakness
The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions...
CVE-1999-0226: Undefined Security Weakness
Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service...
CVE-1999-0414: Undefined Security Weakness
In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection...