WebEvent versions 2.61 through 4.03 suffer from cross site scripting vulnerabilities.
79cf5563d520b9d6fcaec1c7eb584bbb4eceb600821d9559b2ed928da0520d04The BlueSkyCat ActiveX control suffers from a remote heap overflow vulnerability. Versions 8.1.2.0 and below of v2.ocx are affected.
c2cff68e757ac77cdbcf509659f36a4117f7c3ebe93b060cd54b2951c40818ffInterNIC's whois look-up suffers from a cross site scripting vulnerability.
633a6cd0d19f7f71c9206620c86ff1a916f6484969e2bbf201ca8bfef706b488Debian Security Advisory 1342-1 - It was discovered that a race condition in the init.d script of the X Font Server allows the modification of file permissions of arbitrary files if the local administrator can be tricked into restarting the X font server.
74f07a9a1e40524a44f01816569d7cd3125eb33ab433f9b3200ad7ccf0f74ee3wolioCMS suffers from a SQL injection and administrative bypass vulnerability.
76994001bb53177f84c17136934aa018600ec94b190431a7390cc844aa11d1c6iBON 2006 suffers from a memory corruption vulnerability.
cb34fdda96b4a929a750e0a61e96b50c9aeca9c874a46a50db35c0f7c1e03decAsterisk Project Security Advisory - The IAX2 channel driver in Asterisk is vulnerable to a denial of service attack when configured to allow unauthenticated calls.
a0b5106b8836479565cb2062ecc245c6c9ec7e134d97b1a2dc470e13cb1d6bc4Drupal security advisory - Drupal versions 4.7.x before version 4.7.7 and 5.x versions before version 5.2 suffer from cross site scripting vulnerabilities.
41a5f374d5205819d26273f6854b9a4c964586d0a41ed65fd13b71eb76688a3dDrupal security advisory - Several parts in Drupal core are not protected against cross site request forgeries due to improper use of the Forms API, or by taking action solely on GET requests. Malicious users are able to delete comments and content revisions and disable menu items by enticing a privileged users to visit certain URLs while the victim is logged-in to the targeted site. Drupal versions 5.x below 5.2 are affected.
46f0c7caa6742d83818685617d68d77ee84321da3ab65a8147df22b8fc719a1dTemplate Security has discovered a serious denial of service vulnerability in the BlueCat Networks Adonis DNS/DHCP Appliance. When XHA is configured to place two Adonis servers in an active-passive pair to provide high availability, a remote attacker can transmit a single UDP datagram to crash the heartbeat control process. This can be used for example to create an active/active condition in the cluster pair.
cc3a0e1f01e8c577869fec6643baaacbf4c0c356f0b25da7cd5cad08f003d024Whitepaper titled Binary JSON: Insecurity In Implementing Serialization.
792f11d34234d4001313b75a5f3a48df168da66310add61910d40a5b0d9c996fThis paper discusses potential security weaknesses that may be present in messaging systems either as a result of software flaws, application design or the misconfigurations of services. It focuses on TIBCO Rendezvous, as an example of a commonly used enterprise messaging system. Recommendations are then presented which mitigate these security issues.
30f5a8238e6edc015d11426f17a737139cb286ac98539e6c0c99d7c160fc1c83Joomla version 1.0.12 suffers from a SQL injection vulnerability.
75e5c84948819987bba630ec89b772f0cfdb342636f57b61ed9ede027582c45dGentoo Linux Security Advisory GLSA 200707-14 - mu-b from Digital Labs discovered that the return value of a snprintf() call is not properly checked before being used. This could lead to an integer overflow. Versions less than 3.9.5-r3 are affected.
1c8620801048b4006c81388bc623603e25ca3a79e200f500d41fd2852a2418deGentoo Linux Security Advisory GLSA 200707-13 - A vulnerability has been discovered in Fail2ban when parsing log files. Versions less than 0.8.0-r1 are affected.
1f005ed65f0c2acddd05ee750ef62cc0b7f613c74247a72c6e1994736140a290Gentoo Linux Security Advisory GLSA 200707-12 - David Thiel from iSEC Partners Inc. discovered format string errors in various plugins when parsing data. The affected plugins include Vorbis, Theora, CDDA and SAP. Versions less than 0.8.6c are affected.
ab25fee6aff2555965b79212b3bc5ededec6f819eb34df14ee98c3224473f5faDora Emlak Script version 1.0 suffers from an administrative bypass vulnerability.
4047997966d1b0e5e341c6d3a3eb210f599cbf3e3061b4719eb277c1aaff2925phpVoter version 0.6 suffers from a remote file inclusion vulnerability.
891a216a198bea7234e4c6503b996afacf3261cc3a42fb9d85d9d048f7adf21cPhorm version 3.0 suffers from a remote file upload vulnerability.
7f19c0ce66f7430f5cf648b101e53bc7c38e271a4df03ceca5644211925b1523Madoa Poll version 1.1 suffers from a remote file inclusion vulnerability.
6f21e22499ab922e6efab18b48f0374f27e6910f8ad19ba1f291ff50d1ab6e9aphpWebFileManager version 0.5 suffers from a remote file inclusion vulnerability.
bb0122786b4a6b5d59265313cd7d8caf05332d3860e0fa38b78b33f16b0647f3RIG Image Gallery suffers from a remote file inclusion vulnerability.
271b3c07806dd523a9f75b24270e9ed373670b763a14daebe776ad04f86d8a25phpCoupon appears to have a vulnerability that may allow for account privilege escalation.
ae116e9ac0913c469c1875b35fe96b9d982930f2dfca7137949a49acfeb70b58itcms version 0.2 suffers from a cross site scripting vulnerability.
8ba202e557b3186769c533b464f077957bda2c5366c666484fd3cbb7563cd710Commute Community is susceptible to a cross site scripting vulnerability.
ee91a129239c9ef7c5facf550e8d5dabc5984282e744e1db3d7129ea79a82514
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed