[CLOSE] OSVDB ID : 85099 - Disclosed: 2010-02-11

Description:

Websense Email Security contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when an error occurs in the personal email manager component, which will disclose potentially sensitive information on the JBoss status page via an unspecified specially crafted query..

[CLOSE] OSVDB ID : 62276 - Disclosed: 2010-02-11

Description:

(Description Provided by CVE) : Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos ChemView 1.9.5.1 allow remote attackers to execute arbitrary code via a large number of white space characters in the filename argument to the (1) SaveasMolFile and (2) ReadMolFile methods.

[CLOSE] OSVDB ID : 62291 - Disclosed: 2010-02-11

Description:

(Description Provided by CVE) : Unspecified vulnerability on the HP DreamScreen 100 and 130 with firmware before 1.6.0.0, when using a web-connected configuration, allows remote attackers to obtain sensitive information via unknown vectors.

[CLOSE] OSVDB ID : 62300 - Disclosed: 2010-02-11

Description:

An unspecified vulnerability makes it possible to bypass the cross-domain restrictions. This would allow an attacker to perform cross-domain requests in violation of the same-origin policy and might allow to obtain or modify information from a different domain.

[CLOSE] OSVDB ID : 62301 - Disclosed: 2010-02-11

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 62459 - Disclosed: 2010-02-11

Description:

Cisco Collaboration Server (CCS) contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the 'dest' parameter upon submission to the 'webline/html/admin/wcs/LoginPage.jhtml' script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 62460 - Disclosed: 2010-02-11

Description:

(Description Provided by CVE) : Cisco Collaboration Server (CCS) 5 allows remote attackers to read the source code of JHTML files via URL encoded characters in the filename extension, as demonstrated by (1) changing .jhtml to %2Ejhtml, (2) changing .jhtml to .jhtm%6C, (3) appending %00 after .jhtml, and (4) appending %c0%80 after .jhtml, related to the (a) doc/docindex.jhtml, (b) browserId/wizardForm.jhtml, (c) webline/html/forms/callback.jhtml, (d) webline/html/forms/callbackICM.jhtml, (e) webline/html/agent/AgentFrame.jhtml, (f) webline/html/agent/default/badlogin.jhtml, (g) callme/callForm.jhtml, (h) webline/html/multichatui/nowDefunctWindow.jhtml, (i) browserId/wizard.jhtml, (j) admin/CiscoAdmin.jhtml, (k) msccallme/mscCallForm.jhtml, and (l) webline/html/admin/wcs/LoginPage.jhtml components.

[CLOSE] OSVDB ID : 62528 - Disclosed: 2010-02-11

Description:

(Description Provided by CVE) : JAG (Just Another Guestbook) 1.14 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request for jag/database.sql.

[CLOSE] OSVDB ID : 64691 - Disclosed: 2010-02-11

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 64618 - Disclosed: 2010-02-11

Description:

apemCMS contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the index.php script not properly sanitizing user-supplied input to the 'id' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 79144 - Disclosed: 2010-02-11

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 79145 - Disclosed: 2010-02-11

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 79146 - Disclosed: 2010-02-11

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 79147 - Disclosed: 2010-02-11

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 91968 - Disclosed: 2010-02-11

Description:

irssi-otr contains a flaw that may lead to unauthorized disclosure of sensitive information. The issue is due emote functionality transmitting emotes unencrypted in cleartext across the network. This may allow a remote attacker to gain access to potentially sensitive information.

[CLOSE] OSVDB ID : 92240 - Disclosed: 2010-02-11

Description:

libytnef contains an overflow condition in the DecompressRTF() function of ytnef.c. The issue is triggered as user-supplied input is not properly validated during RTF decoding. This may allow a context-dependent attacker to cause a buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code.

[CLOSE] OSVDB ID : 73125 - Disclosed: 2010-02-10

Description:

RSLinx Classic contains an overflow condition in the Rockwell Automation Electronic Data Sheet (EDS) Hardware Installation Tool (RSEds.dll). The issue is triggered as e.g. overly long "DescText" entries are not properly validated when parsing EDS files. With a specially crafted file, a context-dependent attacker can cause a stack-based buffer overflow, resulting in a denial of service or potentially execution of arbitrary code.

[CLOSE] OSVDB ID : 62315 - Disclosed: 2010-02-10

Description:

(Description Provided by CVE) : Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which allows remote HTTP servers to obtain potentially sensitive information about the identity of a client user via standard HTTP logging, as demonstrated by a proxy server that was configured for the purpose of anonymity.

[CLOSE] OSVDB ID : 62316 - Disclosed: 2010-02-10

Description:

(Description Provided by CVE) : Multiple integer overflows in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.

[CLOSE] OSVDB ID : 62319 - Disclosed: 2010-02-10

Description:

(Description Provided by CVE) : browser/login/login_prompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication, as demonstrated by a URL in the SRC attribute of an IMG element.

[CLOSE] OSVDB ID : 62320 - Disclosed: 2010-02-10

Description:

(Description Provided by CVE) : Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscall_server.cc in Google Chrome before 4.0.249.89 allows attackers to leverage renderer access to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a malformed message, related to deserializing of sandbox messages.

[CLOSE] OSVDB ID : 62468 - Disclosed: 2010-02-10

Description:

(Description Provided by CVE) : Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to obtain potentially sensitive information about the identity of a client user via request logging, as demonstrated by a proxy server that was configured for the purpose of anonymity.

[CLOSE] OSVDB ID : 79374 - Disclosed: 2010-02-10

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 62262 - Disclosed: 2010-02-10

Description:

Limny contains a flaw that may allow a remote attacker to execute arbitrary PHP code. The issue is due to the 'uajax.php' script not properly validating uploaded files. This may allow an attacker to upload a PHP script with multiple extensions that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 62266 - Disclosed: 2010-02-10

Description:

ARWScripts contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the viewfile.php script not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied to the f parameter. This may allow an attacker to include a file from the targeted host that contains arbitrary commands or code that will be executed by the vulnerable script. Such attacks are limited due to the script only calling files already on the target host. In addition, this flaw can potentially be used to disclose the contents of any file on the system accessible by the web server.

[CLOSE] OSVDB ID : 62271 - Disclosed: 2010-02-10

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 62272 - Disclosed: 2010-02-10

Description:

eSmile contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'index.php' script not properly sanitizing user-supplied input to the 'cid' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 62274 - Disclosed: 2010-02-10

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 62275 - Disclosed: 2010-02-10

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 62285 - Disclosed: 2010-02-10

Description:

(Description Provided by CVE) : Unspecified vulnerability in the administrative interface in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to read arbitrary files via unknown vectors, aka IronPort Bug 65921.

[CLOSE] OSVDB ID : 62277 - Disclosed: 2010-02-10

Description:

Books/eBooks Rentals Script contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'index.php' script not properly sanitizing user-supplied input to the 'cat_id' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 62278 - Disclosed: 2010-02-10

Description:

CD Rentals Script contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'index.php' script not properly sanitizing user-supplied input to the 'cat_id' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 62286 - Disclosed: 2010-02-10

Description:

(Description Provided by CVE) : Unspecified vulnerability in the WebSafe DistributorServlet in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to read arbitrary files via unknown vectors, aka IronPort Bug 65922.

[CLOSE] OSVDB ID : 62287 - Disclosed: 2010-02-10

Description:

(Description Provided by CVE) : Unspecified vulnerability in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to execute arbitrary code via unknown vectors, aka IronPort Bug 65923.

[CLOSE] OSVDB ID : 62318 - Disclosed: 2010-02-10

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 62360 - Disclosed: 2010-02-10

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 62355 - Disclosed: 2010-02-10

Description:

SAP NetWeaver contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the unspecified input upon submission to the WebDynpro Runtime. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 62404 - Disclosed: 2010-02-10

Description:

Nikira Fraud Management System contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the 'message' parameter upon submission to the 'login/prompt' script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 64591 - Disclosed: 2010-02-10

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 62256 - Disclosed: 2010-02-09

Description:

The SMB server in Microsoft Windows is prone to an overflow condition. The service fails to properly sanitize user-supplied input when handling path names resulting in an overflow. With a specially crafted SMB request, an authenticated attacker can potentially cause execution of arbitrary code or a denial of service.