 |
|
|
|
Real player media player multiple buffer overflow
updated since 11.11.2005 | | Published: |  | 14.11.2005 | | Source: |  | BUGTRAQ | | SecurityVulns ID: |  | 5443 | | Type: |  | client | | Level: |  | 6/10 | | Description: |  | Buffer overflows on parsing .rm streams and skin files. |
VERITAS Cluster Server for UNIX buffer overflow
updated since 10.11.2005 | | Published: | | 14.11.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5435 | | Type: | | local | | Level: | | 6/10 | | Description: | | Buffer overflow in 'ha' suid utility on environment variables parsing. |
Web applications security vulnerabilities (PHP, ASP, CGI, Perl, etc)
updated since 14.11.2005 | | Published: | | 20.11.2005 | | Source: | | | | SecurityVulns ID: | | 5446 | | Type: | | remote | | Level: | | 5/10 | | Description: | | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. |
| Original document |  | group_(at)_soulblack.com.ar, [Full-disclosure] ExoPHPDesk is helpdesk written in PHP/SQL. (20.11.2005) |
| | | tk_(at)_trapkit.de, [TKADV2005-11-004] Multiple Cross Site Scripting vulnerabilities in phpMyFAQ (20.11.2005) |
| | | r0t, phpComasy "id" SQL Injection Vulnerability (20.11.2005) |
| | | SECUNIA, [SA17614] Unclassified NewsBoard "DateFrom" SQL Injection Vulnerability (18.11.2005) |
| | | SECUNIA, [SA17602] VP-ASP Shopping Cart "UserName" Cross-Site Scripting Vulnerability (18.11.2005) |
| | | SECUNIA, [Full-disclosure] Secunia Research: Winmail Server Multiple Vulnerabilities (18.11.2005) |
| | | r0t, eazyCMS "page_id" SQL Injection Vulnerability (18.11.2005) |
| | | SECUNIA, [SA17625] Uresk Links Missing Administration Authentication (18.11.2005) |
| | | SECUNIA, [SA17627] Arki-DB "catid" SQL Injection Vulnerability (18.11.2005) |
| | | alireza hassani, [KAPDA::#13] - XMB HTML Injection & Path Disclosure. (18.11.2005) |
| | | SECUNIA, [SA17585] Interspire ArticleLive NX "Query" SQL Injection Vulnerability (17.11.2005) |
| | | r0t, class-1 Poll Software Multiple SQL Injection Vulnerabilities. (17.11.2005) |
| | | r0t, Multiple SQL Injection Vulnerabilities in class-1 Forum Software (v 0.24.4) (17.11.2005) |
| | | Agna Zilchi, [Full-disclosure] WMH AutoPilot: Unauthorized hosting account cancellation request (17.11.2005) |
| | | SECUNIA, [SA17580] Help Center Live "file" Local File Inclusion Vulnerability (16.11.2005) |
| | | SECUNIA, [SA17582] AudienceView "TSerrorMessage" Cross-Site Scripting Vulnerability (16.11.2005) |
| | | SECUNIA, [SA17560] PHP GEN Cross-Site Scripting Vulnerabilities (16.11.2005) |
| | | bad boy, [Full-disclosure] mambo remote code sexecution (16.11.2005) |
| | | sp3x_(at)_securityreason.com, Critical SQL Injection PHPNuke <= 7.8 (16.11.2005) |
| | | r.verton_(at)_gmail.com, Affiliate Network Pro v7.2 SQL Injections, Arbitrary code execution, XSS (16.11.2005) |
| | | r.verton_(at)_gmail.com, Template Seller Pro 3.25 (16.11.2005) |
| | | Steve, PHPWCMS - Directory traversal vulnerability,CSS attack (16.11.2005) |
| | | SECUNIA, [SA17552] ACID Cross-Site Scripting and SQL Injection Vulnerabilities (15.11.2005) |
| | | Toni Koivunen, [Full-disclosure] [FS-05-02] Multiple vulnerabilities in phpMyAdmin (15.11.2005) |
| | | bhs_team_(at)_yahoo.com, 1-2-All Broadcast E-mail Software vulnerable to a classic SQL admin (15.11.2005) |
| | | s2b_(at)_hotmail.com, Multible Sql injections in Wizz Forum (15.11.2005) |
| | | sinneR, Walla TeleSite Multiple Vulnerabilities (15.11.2005) |
| | | s2b_(at)_hotmail.com, Cyphor (Release: 0.19) Sql injection (15.11.2005) |
| | | crazy frog, Midicart sql injection (15.11.2005) |
| | | Preben Nylokken, [KAPDA::#12] - ekinboard XSS and HTML Injection (15.11.2005) |
| | | Preben Nylokken, fipsCMS light - vulnerable to script injection. (15.11.2005) |
| | | retrogod_(at)_aliceposta.it, XOOPS 2.2.3 Final arbitrary local inclusion / XOOPS WF-Downloads module v 2.05 SQL Injection (15.11.2005) |
| | | r.verton_(at)_gmail.com, PHPCalendar (and some more codegrrl.com products) arbitrary code execution (15.11.2005) |
| | | stormhacker_(at)_hotmail.com, PollVote Remote File Inclusion (15.11.2005) |
| | | August Christopher, Multiple Bugs in MyBB 1.0 PR2 Rev 686(Updated Nov 1, 2005) (15.11.2005) |
| | | A.1.M_(at)_Hotmail.com, SQL injection in phpWebThing 1.4.4 (15.11.2005) |
| | | Sieg Fried, ZRCSA-200502 - phpAdsNew SQL Injection Vulnerabilities (15.11.2005) |
| | | SECUNIA, [SA17542] CodeGrrl Products "siteurl" File Inclusion Vulnerability (14.11.2005) |
| | | SECUNIA, [SA17468] Horde Error Messages Cross-Site Scripting Vulnerability (14.11.2005) |
| | | Christopher Kunz, [Full-disclosure] Advisory 22/2005: Multiple vulnerabilities in phpSysInfo (14.11.2005) |
| | | r0t, iCMS Remote File Include Vulnerability (14.11.2005) |
| | | r0t, PEEL 2.x sql injection (14.11.2005) |
| | | r0t, Sql injection in 3CFR (14.11.2005) |
Multiple OSs, routers and firewalls IPSec ISAKMP IKE DoS
updated since 14.11.2005 | | Published: | | 11.12.2005 | | Source: | | FULL-DISCLOSURE | | SecurityVulns ID: | | 5447 | | Type: | | remote | | Level: | | 6/10 | | Description: | | Multiple vulnerabilities detected with PROTOS IPSec security scanner. |
| Original document | | mkuch_(at)_apani.com, Apani Network Response to ISAKMP cert-fi:7710 Alert (11.12.2005) |
| | | SCO, [Full-disclosure] SCOSA-2005.52 OpenServer 6.0.0 : KAME Racoon Daemon Denial of Service Vulnerability (28.11.2005) |
| | | SECUNIA, [SA17663] Clavister Products ISAKMP IKE Message Processing Denial of Service (24.11.2005) |
| | | SECUNIA, [SA17668] IPsec-Tools ISAKMP IKE Message Processing Denial of Service (23.11.2005) |
| | | SECUNIA, [SA17684] Symantec Firewall/VPN/Gateway ISAKMP Message Processing Denial of Service (23.11.2005) |
| | | SECUNIA, [SA17621] Check Point Firewall/VPN ISAKMP IKE Message Processing Denial of Service (17.11.2005) |
| | | HP, [security bulletin] SSRT5979 - HP Jetdirect 635n IPv6/IPsec Print Server (J7961A) Remote Denial of Service (DoS) (17.11.2005) |
| | | HP, [security bulletin] SSRT5979 - HP-UX Running IPSec Remote Denial of Service (DoS) (17.11.2005) |
| | | SECUNIA, [SA17608] Nortel Switched Firewall ISAKMP IKE Message Processing Denial of Service (16.11.2005) |
| | | SECUNIA, [SA17554] Sun Solaris in.iked ISAKMP IKE Message Processing Denial of Service (15.11.2005) |
| | | SECUNIA, [SA17581] Openswan ISAKMP IKE Message Processing Denial of Service (15.11.2005) |
| | | SECUNIA, [SA17566] StoneGate Firewall and VPN ISAKMP IKE Message Processing Denial of Service (15.11.2005) |
| | | SECUNIA, [SA17568] Juniper JUNOS/JUNOSe ISAKMP IKE Message Processing Denial of Service (15.11.2005) |
| | | SECUNIA, [SA17567] Secgo Crypto IP Gateway/Client ISAKMP IKE Message Processing Vulnerability (15.11.2005) |
| | | SECUNIA, [SA17553] Cisco ISAKMP IKE Message Processing Denial of Service (15.11.2005) |
| | | CISCO, [Full-disclosure] Cisco Security Advisory: Multiple Vulnerabilities Found by PROTOS IPSec Test Suite (14.11.2005) |
mailman mailing lists processor DoS
updated since 14.11.2005 | | Published: | | 16.01.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 5448 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Scrubber.py fails to process attachment with UTF-8 character in the name and messages with large numbers in dates. |
|
|
|
|
|
|
|
|
