 |
|
|
|
Microsoft WINS server memory corruption
updated since 29.11.2004 | | Published: |  | 15.12.2004 | | Source: |  | BUGTRAQ | | SecurityVulns ID: |  | 4224 | | Type: |  | remote | | Level: |  | 6/10 | | Description: |  | Bug in replication protocol handling allows code execution. |
| Microsoft WordPad buffer overflow | | Published: | | 15.12.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4262 | | Type: | | local | | Level: | | 6/10 | | Description: | | Buffer overflow during Word 95/6.0 documents conversion. |
| HyperTerminal buffer overflow | | Published: | | 15.12.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4263 | | Type: | | client | | Level: | | 5/10 | | Description: | | Buffer overflow on .ht files parsing. |
| xzgv integer overflow | | Published: | | 15.12.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4255 | | Type: | | client | | Level: | | 5/10 | | Description: | | read_prf_file() integer overflow |
| Multiple WinAmp memory corruptions | | Published: | | 15.12.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4256 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Multiple memory corruptions. |
| Symantec LiveUpdate privilege escalation | | Published: | | 15.12.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4257 | | Type: | | local | | Level: | | 6/10 |
| Multiple linux kernel IGMP processing bugs | | Published: | | 15.12.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4258 | | Type: | | remote | | Level: | | 6/10 | | Description: | | DoS, kernel memory access. |
| Linux kernel __scm_send DoS | | Published: | | 15.12.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4259 | | Type: | | local | | Level: | | 5/10 | | Description: | | Race conditions leading to deadlock. |
| Adobe Acrobat Readed buffer overflow | | Published: | | 15.12.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4260 | | Type: | | client | | Level: | | 6/10 | | Description: | | Buffer overflow in mailListIsPdf() function. |
| Multiple Microsoft Windows NT 4.0 DHCP bugs | | Published: | | 15.12.2004 | | Source: | | MICROSOFT | | SecurityVulns ID: | | 4265 | | Type: | | remote | | Level: | | 6/10 | | Description: | | DoS, buffer overflow. |
Opera 7 multiple bugs
updated since 04.02.2003 | | Published: | | 15.12.2004 | | Source: | | NTBUGTRAQ | | SecurityVulns ID: | | 2571 | | Type: | | client | | Level: | | 7/10 | | Description: | | Crossite scripting (including local zone), local files access, mail access, user activity tracking, etc. Buffer overflow. Directory traversal. Files overwriting. Local files access with Location overwriting. Multiple Java bugs. |
| Original document |  | Giovanni Delvecchio, [ZH2004-19SA] Possible execution of remote shell commands in Opera with kfmclien (15.12.2004) |
| | | Marc Schönefeld, Java Vulnerabilities in Opera 7.54 (22.11.2004) |
| | | GreyMagic Software, Opera Local File/Directory Detection (GM#009-OP) (19.08.2004) |
| | | GreyMagic Software, Opera: Location, Location, Location (06.08.2004) |
| | | GreyMagic Software, Opera: Location, Location, Location (06.08.2004) |
| | | Jakob Balle, Re: [Full-Disclosure] iDEFENSE Security Advisory 05.12.04: Opera Telnet URI Handler File Creation/Truncation Vulnerability (13.05.2004) |
| | | IDEFENSE, [Full-Disclosure] iDEFENSE Security Advisory 05.12.04: Opera Telnet URI Handler File Creation/Truncation Vulnerability (13.05.2004) |
| | | nesumin, [Opera 7] Arbitrary File Delete Vulnerability (24.12.2003) |
| | | nesumin, [Opera 7] Arbitrary File Delete Vulnerability (15.12.2003) |
| | | nesumin, [Opera 7] Arbitrary File Auto-Saved Vulnerability. (24.11.2003) |
| | | Jouko Pynnonen, [Full-Disclosure] Opera directory traversal and buffer overflow (22.11.2003) |
| | | S G Masood, Opera Directory Traversal in Internal URI Protocol (Advisory) (13.11.2003) |
| | | S G Masood, Opera Skinned & Opera Directory Traversal (Additional Details & a Simple Exploit) (13.11.2003) |
| | | S G Masood, Opera Skinned : Arbitrary File Dropping And Execution (Advisory) (13.11.2003) |
| | | L0PHT, Opera HREF escaped server name overflow (23.10.2003) |
| | | nesumin, [Opera 7] Five DoS codes on general web sites (01.07.2003) |
| | | Breakp0int, Buffer overflow (15.05.2003) |
| | | Jakob Balle, Secunia Research: Opera browser filename extension buffer overflows (13.05.2003) |
| | | nesumin, [Opera 7] Yet Another Story of "Phantom of the Opera" (29.04.2003) |
| | | nesumin, [Opera 7/6] Long File Extension Heap Buffer Overrun Vulnerability in Download. (29.04.2003) |
| | | David F.Madrid, Unchecked Buffer in Opera 7.02 (08.04.2003) |
| | | idoru_(at)_VIDEOSOFT.NET.UY, Using Java from Javascript (05.04.2003) |
| | | nesumin, [Opera 7/6] Long Filename Buffer Overflow Vulnerability in Download (12.03.2003) |
| | | Jakob Balle, Secunia Research: Opera browser Cross Site Scripting (26.02.2003) |
| | | nesumin, Opera Username Buffer Overflow Vulnerability (11.02.2003) |
| | | Marc Schönefeld, Java-Applet crashes Opera 6.05 and 7.01 (11.02.2003) |
| | | GreyMagic Software, Sniffing Opera's Tracks (GM#006-OP) (04.02.2003) |
| | | GreyMagic Software, Opera: What's Next (GM#005-OP) (04.02.2003) |
| | | GreyMagic Software, Opera Images (GM#004-OP) (04.02.2003) |
| | | GreyMagic Software, Phantom of the Opera (GM#003-OP) (04.02.2003) |
| | | GreyMagic Software, Opera's Security Model is Highly Vulnerable (GM#002-OP) (04.02.2003) |
CGI bugs
updated since 15.12.2004 | | Published: | | 18.12.2004 | | Source: | | | | SecurityVulns ID: | | 4254 | | Type: | | remote | | Level: | | 5/10 |
| Original document | | SECUNIA, [SA13504] 68 Designs Froogle Installation Security Issue (18.12.2004) |
| | | Jaroslaw Sajko, Gadu-Gadu, another two bugs (18.12.2004) |
| | | SECUNIA, [SA13485] iWebNegar "string" SQL Injection Vulnerability (17.12.2004) |
| | | SECUNIA, [SA13420] PHP Live! Unspecified Vulnerability (17.12.2004) |
| | | SECUNIA, [SA13438] Winmail Server Installation Path Disclosure Weakness (17.12.2004) |
| | | SECUNIA, [SA13422] PhpDig Unspecified Vulnerability (17.12.2004) |
| | | chewkeong_(at)_security.org.sg, [SIG^2 G-TEC] singapore Image Gallery Web Application v0.9.10 Multiple Vulnerabilities (17.12.2004) |
| | | gp, [Full-Disclosure] Multiple XSS Vulnerabilities in several UBB.Thread Versions (17.12.2004) |
| | | Thomas Waldegger, Multiple XSS Vulnerabilities in Wordpress 1.2.1 (16.12.2004) |
| | | Alexander Anisimov, [MaxPatrol] SQL-injection in Ikonboard 3.1.x (16.12.2004) |
| | | SSR Team, STG Security Advisory: [SSA-20041215-17] Vulnerability of uploading files with multiple extensions in JSBoard (16.12.2004) |
| | | SSR Team, STG Security Advisory: [SSA-20041215-15] Vulnerability of uploading files with multiple extensions in MoniWiki (16.12.2004) |
| | | shervin khaleghjou, iwebnegar is vulnerable to all kind of sql injections (16.12.2004) |
| | | SSR Team, STG Security Advisory: [SSA-20041214-14] GNUBoard PHP injection vulnerability (16.12.2004) |
| | | JeiAr, Multiple phpGroupWare Vulnerabilities [ phpGroupWare 0.9.16.003 && Earlier ] (15.12.2004) |
| | | shervin khaleghjou, ASP-rider is vulnerable to sql injection attack (15.12.2004) |
| | | SSR Team, STG Security Advisory: [SSA-20041209-13] UseModWiki XSS vulnerability (15.12.2004) |
| | | ali reza AcTiOnSpIdEr, ASP Calendar Vulnerability <www.ashiyane.com> (15.12.2004) |
| | | Paul Laudanski, phpBB Attachment Mod Directory Traversal HTTP POST Injection (15.12.2004) |
| | | Nicolas Gregoire, Multiple vulnerabilities in phpMyAdmin (15.12.2004) |
| | | Jaroslaw Sajko, Gadu-Gadu several vulnerabilities (15.12.2004) |
| | | Daniel Fabian, SugarSales Multiple Vulnerabilities (15.12.2004) |
Multiple Linux kernel bugs
updated since 15.12.2004 | | Published: | | 25.12.2004 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4261 | | Type: | | local | | Level: | | 7/10 | | Description: | | DoS, privilege escalation, buffer overflow on 32bit calls emulation under 64bit platforms. |
Multiple Microsoft Windows bugs
updated since 15.12.2004 | | Published: | | 11.01.2005 | | Source: | | MICROSOFT | | SecurityVulns ID: | | 4266 | | Type: | | local | | Level: | | 8/10 | | Description: | | Kernel buffer overflow LSASS privilege escalation. |
Microsoft Internet Explorer DHTML Edit and Help ActiveX crossite scripting
updated since 15.12.2004 | | Published: | | 09.02.2005 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 4264 | | Type: | | client | | Level: | | 9/10 | | Description: | | DHTML ActiveX and Help allows code injection into context of different server. By combining this vulnerability it's psosible to execute code in local machine zone. This vulnerability can potentially be used for silent spyware/adware installation. |
|
|
|
|
|
|
|
|
