[CLOSE] OSVDB ID : 57452 - Disclosed: 2009-08-26

Description:

Cisco Unified Communication Manager contains a flaw that may allow a remote denial of service. The issue is triggered when malformed header in SIP occurs, and will result in loss of availability for the service.

[CLOSE] OSVDB ID : 57453 - Disclosed: 2009-08-26

Description:

(Description Provided by CVE) : Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), and 7.x before 7.1(2) allow remote attackers to cause a denial of service (device reload or voice-services outage) via a malformed SIP INVITE message that triggers an improper call to the sipSafeStrlen function, aka Bug IDs CSCsz40392 and CSCsz43987.

[CLOSE] OSVDB ID : 57454 - Disclosed: 2009-08-26

Description:

(Description Provided by CVE) : Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2), and 7.1 before 7.1(2); and Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4); allows remote attackers to cause a denial of service (TCP services outage) via a large number of TCP connections, related to "tracking of network connections," aka Bug IDs CSCsq22534 and CSCsw52371.

[CLOSE] OSVDB ID : 57455 - Disclosed: 2009-08-26

Description:

(Description Provided by CVE) : Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 before 7.1(2) allows remote attackers to cause a denial of service (file-descriptor exhaustion and SCCP outage) via a flood of TCP packets, aka Bug ID CSCsx32236.

[CLOSE] OSVDB ID : 57456 - Disclosed: 2009-08-26

Description:

(Description Provided by CVE) : Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 before 7.1(2a)su1 allows remote attackers to cause a denial of service (file-descriptor exhaustion and SIP outage) via a flood of TCP packets, aka Bug ID CSCsx23689.

[CLOSE] OSVDB ID : 58245 - Disclosed: 2009-08-26

Description:

PAD Site Scripts contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'list.php' script not properly sanitizing user-supplied input to the 'search' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 58246 - Disclosed: 2009-08-26

Description:

PAD Site Scripts contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'rss.php' script not properly sanitizing user-supplied input to the 'cat' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 58243 - Disclosed: 2009-08-26

Description:

PAD Site Scripts contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'cat' parameter upon submission to the 'rss.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 58244 - Disclosed: 2009-08-26

Description:

PAD Site Scripts contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'cat' parameter upon submission to the 'opml.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 57401 - Disclosed: 2009-08-26

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 57413 - Disclosed: 2009-08-26

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 57414 - Disclosed: 2009-08-26

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 57415 - Disclosed: 2009-08-26

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 57429 - Disclosed: 2009-08-26

Description:

(Description Provided by CVE) : Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2 before MR3; and Client Security 2.0 before MR7, 3.0, and 3.1 before MR8; when Internet Email Scanning is installed and enabled, allows remote attackers to cause a denial of service (CPU consumption and persistent connection loss) via unknown attack vectors.

[CLOSE] OSVDB ID : 57432 - Disclosed: 2009-08-26

Description:

(Description Provided by CVE) : common/snapshots.py in Back In Time (aka backintime) 0.9.26 changes certain permissions to 0777 before deleting the files in an old backup snapshot, which allows local users to obtain sensitive information by reading these files, or interfere with backup integrity by modifying files that are shared across snapshots.

[CLOSE] OSVDB ID : 57435 - Disclosed: 2009-08-26

Description:

(Description Provided by CVE) : The Ajax Table module 5.x for Drupal does not perform access control, which allows remote attackers to delete arbitrary users and nodes via unspecified vectors.

[CLOSE] OSVDB ID : 57436 - Disclosed: 2009-08-26

Description:

(Description Provided by CVE) : Cross-site scripting (XSS) vulnerability in the Ajax Table module 5.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

[CLOSE] OSVDB ID : 58178 - Disclosed: 2009-08-26

Description:

Crazy Star Plugin for Discuz! contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'plugin.php' script not properly sanitizing user-supplied input to the 'fmid' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 58401 - Disclosed: 2009-08-26

Description:

(Description Provided by CVE) : Mozilla Firefox 3.0.1 and earlier allows remote attackers to cause a denial of service (browser hang) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821.

[CLOSE] OSVDB ID : 58400 - Disclosed: 2009-08-26

Description:

(Description Provided by CVE) : Opera 9.52 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821.

[CLOSE] OSVDB ID : 58398 - Disclosed: 2009-08-26

Description:

(Description Provided by CVE) : Google Chrome 0.2.149.29 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821.

[CLOSE] OSVDB ID : 58397 - Disclosed: 2009-08-26

Description:

(Description Provided by CVE) : Microsoft Internet Explorer 6 through 6.0.2900.2180, and 7.0.6000.16711, allows remote attackers to cause a denial of service (CPU consumption) via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828.

[CLOSE] OSVDB ID : 58396 - Disclosed: 2009-08-26

Description:

(Description Provided by CVE) : Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828.

[CLOSE] OSVDB ID : 58395 - Disclosed: 2009-08-26

Description:

(Description Provided by CVE) : Opera 9.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a series of automatic submissions of a form containing a KEYGEN element, a related issue to CVE-2009-1828.

[CLOSE] OSVDB ID : 58399 - Disclosed: 2009-08-26

Description:

(Description Provided by CVE) : Microsoft Internet Explorer 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a "printing DoS attack," possibly a related issue to CVE-2009-0821.

[CLOSE] OSVDB ID : 58393 - Disclosed: 2009-08-26

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 58391 - Disclosed: 2009-08-26

Description:

(Description Provided by CVE) : Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, and XMLTooling before 1.2.2 as used in Internet2 Shibboleth Service Provider software 2.x before 2.2.1, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed encoded URL.

[CLOSE] OSVDB ID : 58426 - Disclosed: 2009-08-26

Description:

Moa Gallery contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'sources/_error_funcs.php' script not properly sanitizing user input supplied to the 'MOA_PATH' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 58427 - Disclosed: 2009-08-26

Description:

Moa Gallery contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'sources/_integrity_funcs.php' script not properly sanitizing user input supplied to the 'MOA_PATH' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 58428 - Disclosed: 2009-08-26

Description:

Moa Gallery contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'sources/_template_component_admin.php' script not properly sanitizing user input supplied to the 'MOA_PATH' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 58429 - Disclosed: 2009-08-26

Description:

Moa Gallery contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'sources/_template_component_gallery.php' script not properly sanitizing user input supplied to the 'MOA_PATH' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 58430 - Disclosed: 2009-08-26

Description:

Moa Gallery contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'sources/_template_parser.php' script not properly sanitizing user input supplied to the 'MOA_PATH' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 58431 - Disclosed: 2009-08-26

Description:

Moa Gallery contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'sources/mod_gallery_funcs.php' script not properly sanitizing user input supplied to the 'MOA_PATH' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 58432 - Disclosed: 2009-08-26

Description:

Moa Gallery contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'sources/mod_image_funcs.php' script not properly sanitizing user input supplied to the 'MOA_PATH' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 58433 - Disclosed: 2009-08-26

Description:

Moa Gallery contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'sources/mod_tag_funcs.php' script not properly sanitizing user input supplied to the 'MOA_PATH' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 58434 - Disclosed: 2009-08-26

Description:

Moa Gallery contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'sources/mod_tag_view.php' script not properly sanitizing user input supplied to the 'MOA_PATH' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 58435 - Disclosed: 2009-08-26

Description:

Moa Gallery contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'sources/mod_tag_view.php' script not properly sanitizing user input supplied to the 'MOA_PATH' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 58436 - Disclosed: 2009-08-26

Description:

Moa Gallery contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'sources/mod_user_funcs.php' script not properly sanitizing user input supplied to the 'MOA_PATH' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 58437 - Disclosed: 2009-08-26

Description:

Moa Gallery contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'sources/page_admin.php' script not properly sanitizing user input supplied to the 'MOA_PATH' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 58438 - Disclosed: 2009-08-26

Description:

Moa Gallery contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'sources/page_gallery_add.php' script not properly sanitizing user input supplied to the 'MOA_PATH' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.