| OSVDB ID | Disclosure Date | Title |
|---|
|
44978
Description:
(Description Provided by CVE) : Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service (slapd crash) and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression.
|
2008-04-30
|
Red Hat Linux / Fedora Directory Server slapd LDAP Search Regular Expression Handler Overflow
|
|
45391
Description:
(Description Provided by CVE) : Unrestricted file upload vulnerability in src/yopy_upload.php in Project-Based Calendaring System (PBCS) 0.7.1 allows remote authenticated users to upload arbitrary files to tmp/uploads.
|
2008-04-30
|
Project-Based Calendaring System (PBCS) src/yopy_upload.php Unrestricted File Upload
|
|
45388
Description:
(Description Provided by CVE) : Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) CONFIG[LANGUAGE_CPATH] parameter to modules/forum/embedforum.php and the (2) CONFIG[BASE_PATH] parameter to modules/scorm/lib.inc.php, different vectors than CVE-2006-4448.
|
2008-04-30
|
Interact modules/forum/embedforum.php CONFIG[LANGUAGE_CPATH] Parameter Remote File Inclusion
|
|
45389
Description:
(Description Provided by CVE) : Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) CONFIG[LANGUAGE_CPATH] parameter to modules/forum/embedforum.php and the (2) CONFIG[BASE_PATH] parameter to modules/scorm/lib.inc.php, different vectors than CVE-2006-4448.
|
2008-04-30
|
Interact modules/scorm/lib.inc.php CONFIG[BASE_PATH] Parameter Remote File Inclusion
|
|
47003
Description:
(Description Provided by CVE) : Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13, when running in PHP before 4.2.0, does not properly seed the random number generator, which has unknown impact and attack vectors.
|
2008-04-30
|
Simple Machines Forum (SMF) RNG Weakness Unspecified Issue
|
|
47002
Description:
(Description Provided by CVE) : Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.x before 1.1.5 and 1.0.x before 1.0.13 has unknown impact and attack vectors, probably cross-site scripting (XSS), related to "use of the html-tag."
|
2008-04-30
|
Simple Machines Forum (SMF) Unspecified XSS
|
|
44855
Description:
(Description Provided by CVE) : Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to (1) eng.writeMsg.php, (2) eng.adCreate.php, (3) eng.adCreateSave.php, (4) eng.adDispByTypeOptions.php, (5) eng.createRoom.php, (6) eng.forward.php, (7) eng.pageLogout.php, (8) eng.resultMember.php, (9) eng.roomDeleteConfirm.php, (10) eng.saveNewRoom.php, and (11) eng.searchMember.php in src/.
|
2008-04-30
|
Harris Wap Chat eng.writeMsg.php sysFileDir Parameter Remote File Inclusion
|
|
44881
Description:
(Description Provided by CVE) : Buffer overflow in the Multimedia PC Client in Nortel Multimedia Communication Server (MCS) before Maintenance Release 3.5.8.3 and 4.0.25.3 allows remote attackers to cause a denial of service (crash) via a flood of "extraneous" messages, as demonstrated by the Nessus "Generic flood" denial of service plugin.
|
2008-04-30
|
Nortel Multimedia Communication Server PC Client Overflow Remote DoS
|
|
44885
Description:
(Description Provided by CVE) : Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long community string in an SNMP TRAP packet.
|
2008-04-30
|
SNMPc Network Manager SNMP TRAP Crafted UDP Packet Handling Overflow
|
|
44886
Description:
(Description Provided by CVE) : Multiple directory traversal vulnerabilities in Project-Based Calendaring System (PBCS) 0.7.1-1 allow remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter to (1) src/yopy_sync.php and (2) system-logger/print_logs.php.
|
2008-04-30
|
Project-Based Calendaring System (PBCS) src/yopy_sync.php filename Variable Traversal Local File Access
|
|
44882
Description:
(Description Provided by CVE) : The Akamai Download Manager (aka DLM or dlmanager) ActiveX control (DownloadManagerV2.ocx) before 2.2.3.5 allows remote attackers to force the download and execution of arbitrary code via unspecified "undocumented object parameters."
|
2008-04-30
|
Akamai Download Manager ActiveX (DownloadManagerV2.ocx) Undocumented Object Parameters Arbitrary Code Execution
|
|
44856
Description:
(Description Provided by CVE) : Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to (1) eng.writeMsg.php, (2) eng.adCreate.php, (3) eng.adCreateSave.php, (4) eng.adDispByTypeOptions.php, (5) eng.createRoom.php, (6) eng.forward.php, (7) eng.pageLogout.php, (8) eng.resultMember.php, (9) eng.roomDeleteConfirm.php, (10) eng.saveNewRoom.php, and (11) eng.searchMember.php in src/.
|
2008-04-30
|
Harris Wap Chat eng.adCreate.php sysFileDir Parameter Remote File Inclusion
|
|
44857
Description:
(Description Provided by CVE) : Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to (1) eng.writeMsg.php, (2) eng.adCreate.php, (3) eng.adCreateSave.php, (4) eng.adDispByTypeOptions.php, (5) eng.createRoom.php, (6) eng.forward.php, (7) eng.pageLogout.php, (8) eng.resultMember.php, (9) eng.roomDeleteConfirm.php, (10) eng.saveNewRoom.php, and (11) eng.searchMember.php in src/.
|
2008-04-30
|
Harris Wap Chat eng.adCreateSave.php sysFileDir Parameter Remote File Inclusion
|
|
44858
Description:
(Description Provided by CVE) : Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to (1) eng.writeMsg.php, (2) eng.adCreate.php, (3) eng.adCreateSave.php, (4) eng.adDispByTypeOptions.php, (5) eng.createRoom.php, (6) eng.forward.php, (7) eng.pageLogout.php, (8) eng.resultMember.php, (9) eng.roomDeleteConfirm.php, (10) eng.saveNewRoom.php, and (11) eng.searchMember.php in src/.
|
2008-04-30
|
Harris Wap Chat eng.adDispByTypeOptions.php sysFileDir Parameter Remote File Inclusion
|
|
44859
Description:
(Description Provided by CVE) : Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to (1) eng.writeMsg.php, (2) eng.adCreate.php, (3) eng.adCreateSave.php, (4) eng.adDispByTypeOptions.php, (5) eng.createRoom.php, (6) eng.forward.php, (7) eng.pageLogout.php, (8) eng.resultMember.php, (9) eng.roomDeleteConfirm.php, (10) eng.saveNewRoom.php, and (11) eng.searchMember.php in src/.
|
2008-04-30
|
Harris Wap Chat eng.createRoom.php sysFileDir Parameter Remote File Inclusion
|
|
44860
Description:
(Description Provided by CVE) : Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to (1) eng.writeMsg.php, (2) eng.adCreate.php, (3) eng.adCreateSave.php, (4) eng.adDispByTypeOptions.php, (5) eng.createRoom.php, (6) eng.forward.php, (7) eng.pageLogout.php, (8) eng.resultMember.php, (9) eng.roomDeleteConfirm.php, (10) eng.saveNewRoom.php, and (11) eng.searchMember.php in src/.
|
2008-04-30
|
Harris Wap Chat eng.forward.php sysFileDir Parameter Remote File Inclusion
|
|
44861
Description:
(Description Provided by CVE) : Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to (1) eng.writeMsg.php, (2) eng.adCreate.php, (3) eng.adCreateSave.php, (4) eng.adDispByTypeOptions.php, (5) eng.createRoom.php, (6) eng.forward.php, (7) eng.pageLogout.php, (8) eng.resultMember.php, (9) eng.roomDeleteConfirm.php, (10) eng.saveNewRoom.php, and (11) eng.searchMember.php in src/.
|
2008-04-30
|
Harris Wap Chat eng.pageLogout.php sysFileDir Parameter Remote File Inclusion
|
|
44862
Description:
(Description Provided by CVE) : Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to (1) eng.writeMsg.php, (2) eng.adCreate.php, (3) eng.adCreateSave.php, (4) eng.adDispByTypeOptions.php, (5) eng.createRoom.php, (6) eng.forward.php, (7) eng.pageLogout.php, (8) eng.resultMember.php, (9) eng.roomDeleteConfirm.php, (10) eng.saveNewRoom.php, and (11) eng.searchMember.php in src/.
|
2008-04-30
|
Harris Wap Chat eng.resultMember.php sysFileDir Parameter Remote File Inclusion
|
|
44863
Description:
(Description Provided by CVE) : Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to (1) eng.writeMsg.php, (2) eng.adCreate.php, (3) eng.adCreateSave.php, (4) eng.adDispByTypeOptions.php, (5) eng.createRoom.php, (6) eng.forward.php, (7) eng.pageLogout.php, (8) eng.resultMember.php, (9) eng.roomDeleteConfirm.php, (10) eng.saveNewRoom.php, and (11) eng.searchMember.php in src/.
|
2008-04-30
|
Harris Wap Chat eng.roomDeleteConfirm.php sysFileDir Parameter Remote File Inclusion
|
|
44864
Description:
(Description Provided by CVE) : Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to (1) eng.writeMsg.php, (2) eng.adCreate.php, (3) eng.adCreateSave.php, (4) eng.adDispByTypeOptions.php, (5) eng.createRoom.php, (6) eng.forward.php, (7) eng.pageLogout.php, (8) eng.resultMember.php, (9) eng.roomDeleteConfirm.php, (10) eng.saveNewRoom.php, and (11) eng.searchMember.php in src/.
|
2008-04-30
|
Harris Wap Chat eng.saveNewRoom.php sysFileDir Parameter Remote File Inclusion
|
|
44865
Description:
(Description Provided by CVE) : Multiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the sysFileDir parameter to (1) eng.writeMsg.php, (2) eng.adCreate.php, (3) eng.adCreateSave.php, (4) eng.adDispByTypeOptions.php, (5) eng.createRoom.php, (6) eng.forward.php, (7) eng.pageLogout.php, (8) eng.resultMember.php, (9) eng.roomDeleteConfirm.php, (10) eng.saveNewRoom.php, and (11) eng.searchMember.php in src/.
|
2008-04-30
|
Harris Wap Chat eng.searchMember.php sysFileDir Parameter Remote File Inclusion
|
|
44887
Description:
(Description Provided by CVE) : Multiple directory traversal vulnerabilities in Project-Based Calendaring System (PBCS) 0.7.1-1 allow remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter to (1) src/yopy_sync.php and (2) system-logger/print_logs.php.
|
2008-04-30
|
Project-Based Calendaring System (PBCS) plugins/system-logger/print_logs.php filename Variable Traversal Local File Access
|
|
53368
Description:
(Description Provided by CVE) : Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP code into oxyhistory.php via the oxymsg parameter.
|
2008-04-30
|
OxYBox edithistory.php oxymsg Parameter Arbitrary PHP Code Injection
|
|
45082
Description:
Unknown / Incomplete
|
2008-04-29
|
mrxvt X11 :0 Default Display Local Privilege Escalation
|
|
44927
Description:
(Description Provided by CVE) : The bdx_ioctl_priv function in the tehuti driver (tehuti.c) in Linux kernel 2.6.x before 2.6.25.1 does not properly check certain information related to register size, which has unspecified impact and local attack vectors, probably related to reading or writing kernel memory.
|
2008-04-29
|
Linux Kernel Tehuti Driver (tehuti.c) bdx_ioctl_priv Function Unspecified Local Issue
|
|
45084
Description:
Unknown / Incomplete
|
2008-04-29
|
wterm X11 :0 Default Display Local Privilege Escalation
|
|
45083
Description:
Unknown / Incomplete
|
2008-04-29
|
rxvt-unicode X11 :0 Default Display Local Privilege Escalation
|
|
45081
Description:
Unknown / Incomplete
|
2008-04-29
|
aterm X11 :0 Default Display Local Privilege Escalation
|
|
50229
Description:
Unknown / Incomplete
|
2008-04-29
|
LinPHA Maps Plugin Unspecified Local File Inclusion
|
|
44830
Description:
(Description Provided by CVE) : Unspecified vulnerability in Plain Black WebGUI 7.4.34 has unknown impact and attack vectors related to "data form list view."
|
2008-04-29
|
WebGUI Data Form List View Unspecified Security Issue
|
|
44924
Description:
(Description Provided by CVE) : Stack-based buffer overflow in the HTTP::getAuthUserPass function (core/common/http.cpp) in Peercast 0.1218 and gnome-peercast allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Basic Authentication string with a long (1) username or (2) password.
|
2008-04-29
|
PeerCast HTTP::getAuthUserPass() Function Basic Authentication String Remote Overflow DoS
|
|
44844
Description:
(Description Provided by CVE) : Cross-site scripting (XSS) vulnerability in index.php in Softpedia SiteXS CMS 0.1.1 Pre-Alpha allows remote attackers to inject arbitrary web script or HTML via the user parameter.
|
2008-04-29
|
SiteXS CMS index.php user Parameter XSS
|
|
49535
Description:
(Description Provided by CVE) : Directory traversal vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to delete arbitrary files via a .. (dot dot) in the delete parameter.
|
2008-04-29
|
LokiCMS admin.php delete Variable Traversal Arbitrary File Deletion
|
|
44942
Description:
(Description Provided by CVE) : Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service (crash) via malformed BGP packets, possibly BGP UPDATE packets that trigger session flapping.
|
2008-04-28
|
Hitachi GR Series Malformed BGP Update Message Remote DoS
|
|
44957
Description:
(Description Provided by CVE) : Unspecified vulnerability in the Java plugin in IBM WebSphere Application Server 5.0.2 allows untrusted applets to gain privileges via unknown attack vectors.
|
2008-04-28
|
IBM WebSphere Application Server (WAS) Java Plugin Untrusted Applet Privilege Escalation
|
|
44953
Description:
Unknown / Incomplete
|
2008-04-28
|
GraphicsMagick Insecure File Extension Handling Program Invocation
|
|
44681
Description:
(Description Provided by CVE) : ldm in Linux Terminal Server Project (LTSP) 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 (aka display :6).
|
2008-04-28
|
ldm X11 Forwarding LTSP Client Connection Restriction Bypass
|
|
50249
Description:
Unknown / Incomplete
|
2008-04-28
|
HTTP Time Protocol (htp) Multiple Unspecified Overflows
|
|
44605
Description:
(Description Provided by CVE) : ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL.
|
2008-04-28
|
ZoneMinder Multiple Unspecified Arbitrary Remote Code Execution
|
|
44608
Description:
VicFTPS contains a flaw that may allow a remote denial of service. The issue is triggered when a malformed LIST command is received, and will result in loss of availability for the service.
|
2008-04-28
|
VicFTPS Crafted LIST Command NULL Dereference Remote DoS
|
