OSVDB: Open Sourced Vulnerability Database

Browse Database

Browsing Vulnerabilities Alphabetically

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 0 1 2 3 4 5 6 7 8 9 @

« Previous 1 2 3 4 5 6 7 8 9 … 91 92 Next »

OSVDB ID	Disclosure Date	Title
32995 [CLOSE] OSVDB ID : 32995 - Disclosed: 2007-01-19 Description: (Description Provided by CVE) : T-Com Speedport 500V routers with firmware 1.31 allow remote attackers to bypass authentication and reconfigure the device via a LOGINKEY=TECOM cookie value.	2007-01-19	T-Com Speedport 500V Series LOGINKEY=TECOM Cookie Value Authentication Bypass
36011 [CLOSE] OSVDB ID : 36011 - Disclosed: 2007-05-11 Description: (Description Provided by CVE) : Deutsche Telekom (T-com) Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script, which allows remote attackers to bypass the delays and conduct brute-force attacks via direct calls to the authentication CGI script.	2007-05-11	T-Com Speedport W 700v Login Brute Force Weakness
85469 [CLOSE] OSVDB ID : 85469 - Disclosed: 2012-08-17 Description: T-dah WebMai contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate "almost every field" (though only 'name' was specified) when creating a new contact. This may allow a user to create a specially crafted request that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.	2012-08-17	T-dah WebMail addressbook.php Multiple Field XSS
85504 [CLOSE] OSVDB ID : 85504 - Disclosed: 2012-08-20 Description: T-dah WebMail contains a flaw that allows a remote Cross-site Request Forgery (CSRF / XSRF) attack. The flaw exists because the application does not require multiple steps or explicit confirmation for sensitive transactions for the addressbook.php script. By using a crafted URL (e.g., a crafted GET request inside an "img" tag), an attacker may trick the victim into clicking on the image to take advantage of the trust relationship between the authenticated victim and the application. Such an attack could trick the victim into creating a new contact in the context of their session with the application, without further prompting or verification.	2012-08-20	T-dah WebMail addressbook.php New Contact Creation CSRF
85468 [CLOSE] OSVDB ID : 85468 - Disclosed: 2012-08-17 Description: T-dah WebMail contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate the 'message' field in new events in the calendar before returning it to the user. This may allow a user to create a specially crafted request that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.	2012-08-17	T-dah WebMail Calendar Event Message Field XSS
84694 [CLOSE] OSVDB ID : 84694 - Disclosed: 2012-08-08 Description: T-dah WebMail contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate input passed via an the message body of an email before returning it to the user. This may allow a user to create a specially crafted request that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.	2012-08-08	T-dah WebMail Email Message Body XSS
58452 [CLOSE] OSVDB ID : 58452 - Disclosed: 2009-09-10 Description: T-HTB Manager contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'index.php' script not properly sanitizing user-supplied input to the 'id' and 'name' parameters. This may allow an attacker to inject or manipulate SQL queries in the back-end database.	2009-09-10	T-HTB Manager index.php Multiple Parameter SQL Injection
34986 [CLOSE] OSVDB ID : 34986 - Disclosed: 2007-01-30 Description: (Description Provided by CVE) : T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification (CNID, aka Caller ID).	2007-01-30	T-Mobile Voice Mail Calling Number Identification (CNID) Spoofing Arbitrary Mailbox Manipulation
61235 [CLOSE] OSVDB ID : 61235 - Disclosed: 2009-12-20 Description: (Description Provided by CVE) : Unspecified vulnerability in t-prot (TOFU Protection) before 2.8 allows remote attackers to cause a denial of service via unspecified vectors related to the "--maxlines" option and a crafted email message. NOTE: some of these details are obtained from third party information.	2009-12-20	t-prot (TOFU Protection) for Mutt --max-lines Unspecified DoS
61293 [CLOSE] OSVDB ID : 61293 - Disclosed: 2003-06-24 Description: Unknown / Incomplete	2003-06-24	t-prot (TOFU Protection) for Mutt Crafted Multipart Message Handling DoS
61292 [CLOSE] OSVDB ID : 61292 - Disclosed: 2002-10-31 Description: Unknown / Incomplete	2002-10-31	t-prot (TOFU Protection) for Mutt Symlink Arbitrary File Overwrite
33966 [CLOSE] OSVDB ID : 33966 - Disclosed: 2006-10-31 Description: (Description Provided by CVE) : SQL injection vulnerability in logout.php in T.G.S. CMS 0.1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the myauthorid cookie.	2006-10-31	T.G.S. CMS logout.php myauthorid Cookie SQL Injection
74334 [CLOSE] OSVDB ID : 74334 - Disclosed: 2011-04-05 Description: WPtouch Plugin for WordPress has a compromised download which contains a trojaned backdoor with may allow an attacker to conduct XSS attacks or have other unspecified impact.	2011-04-05	t00ls.org c100 Shell Trojaned Distribution
87691 [CLOSE] OSVDB ID : 87691 - Disclosed: 2011-03-04 Description: t1lib contains a flaw that is triggered when a buffer overflow occurs in the token() and linetoken() functions in backend/dvi/mdvi-lib/afmparse.c during the handling of a specially crafted AFM file. This will allow a context-dependent attacker to cause an off-by-one error, which may allow the attacker to potentially cause a denial of service or execute arbitrary code.	2011-03-04	t1lib backend/dvi/mdvi-lib/afmparse.c Multiple Function AFM File Handling Off-by-one Arbitrary Code Execution
70302 [CLOSE] OSVDB ID : 70302 - Disclosed: 2010-12-07 Description: t1lib is prone to an overflow condition. The 'token()' function in 'backend/dvi/mdvi-lib/afmparse.c' fails to properly sanitize user-supplied input resulting in a heap-based buffer overflow. With a specially crafted DVI file, a context-dependent attacker can potentially execute arbitrary code.	2010-12-07	t1lib backend/dvi/mdvi-lib/afmparse.c token() Function Overflow
74729 [CLOSE] OSVDB ID : 74729 - Disclosed: 2011-02-24 Description: (Description Provided by CVE) : Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.	2011-02-24	t1lib lib/t1lib/parseAFM.c inetoken() Function DVI File AFM Font Parsing Overflow
38698 [CLOSE] OSVDB ID : 38698 - Disclosed: 2007-07-27 Description: (Description Provided by CVE) : Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in php_gd2.dll in the gd (PHP_GD2) extension in PHP 5.2.3.	2007-07-27	t1lib lib/t1lib/t1env.c intT1_EnvGetCompletePath() Function Overflow
74527 [CLOSE] OSVDB ID : 74527 - Disclosed: 2011-03-21 Description: (Description Provided by CVE) : t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.	2011-03-21	t1lib PDF Type 1 Font Handling Invalid Memory Location DoS
74528 [CLOSE] OSVDB ID : 74528 - Disclosed: 2011-03-21 Description: (Description Provided by CVE) : Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764.	2011-03-21	t1lib PDF Type 1 Font Handling Invalid Memory Write Use-after-free DoS
72302 [CLOSE] OSVDB ID : 72302 - Disclosed: 2011-03-23 Description: A memory corruption flaw exists in t1lib. The font handling function fails to sanitize user-supplied input using Type 1 fonts resulting in memory corruption. With a specially crafted PDF file, a context-dependent attacker can execute arbitrary code.	2011-03-23	t1lib PDF Type 1 Font Handling Invalid Pointer Code Execution
74526 [CLOSE] OSVDB ID : 74526 - Disclosed: 2011-03-21 Description: (Description Provided by CVE) : Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer overflow, and invalid pointer dereference, a different vulnerability than CVE-2011-0764.	2011-03-21	t1lib PDF Type 1 Font Handling Off-by-one Overflow DoS
23193 [CLOSE] OSVDB ID : 23193 - Disclosed: 2004-12-30 Description: Unknown / Incomplete	2004-12-30	T2 binutils/ld-glob.patch Unspecified Memory Corruption Issue
23194 [CLOSE] OSVDB ID : 23194 - Disclosed: 2004-12-31 Description: Unknown / Incomplete	2004-12-31	T2 Build-Pkg /bin/cat List Argument Local Overflow
23196 [CLOSE] OSVDB ID : 23196 - Disclosed: 2005-12-30 Description: Unknown / Incomplete	2005-12-30	T2 extend_initrd Unspecified Path Disclosure
23195 [CLOSE] OSVDB ID : 23195 - Disclosed: 2005-08-11 Description: Unknown / Incomplete	2005-08-11	T2 gnomesu/feature.patch Local Password Disclosure
23192 [CLOSE] OSVDB ID : 23192 - Disclosed: 2004-04-18 Description: Unknown / Incomplete	2004-04-18	T2 linux24benh Kernel Unspecified Issues
89129 [CLOSE] OSVDB ID : 89129 - Disclosed: 2013-01-11 Description: T3 jQuery (t3jquery) Extension for TYPO3 contains a flaw that is triggered when an error occurs during an unserialize() function call. This may allow a remote attacker to execute arbitrary PHP code.	2013-01-11	T3 jQuery (t3jquery) Extension for TYPO3 unserialize() Call Remote PHP Code Execution
89130 [CLOSE] OSVDB ID : 89130 - Disclosed: 2013-01-11 Description: T3 Mootools (t3mootools) Extension for TYPO3 contains a flaw that is triggered when an error occurs during an unserialize() function call. This may allow a remote attacker to execute arbitrary PHP code.	2013-01-11	T3 Mootools (t3mootools) Extension for TYPO3 unserialize() Call Remote PHP Code Execution
75943 [CLOSE] OSVDB ID : 75943 - Disclosed: 2011-09-27 Description: Unknown / Incomplete	2011-09-27	T3BLOG Extension for TYPO3 Comment Parent Title Unspecified XSS
62074 [CLOSE] OSVDB ID : 62074 - Disclosed: 2010-02-01 Description: T3BLOG Extension for TYPO3 contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to an unspecified script not properly sanitizing user-supplied input. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.	2010-02-01	T3BLOG Extension for TYPO3 Unspecified SQL Injection

« Previous 1 2 3 4 5 6 7 8 9 … 91 92 Next »

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.