[CLOSE] OSVDB ID : 63176 - Disclosed: 2010-03-24

Description:

(Description Provided by CVE) : Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug ID CSCsz48614, the "SCCP Packet Processing Denial of Service Vulnerability."

[CLOSE] OSVDB ID : 63177 - Disclosed: 2010-03-24

Description:

Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) is enabled, contains a flaw that may allow a remote denial of service (e.g., device reload). The issue is triggered when the Cisco IOS device processes specific, malformed Skinny Call Control Protocol (SCCP) messages, and will result in loss of availability for the device.

[CLOSE] OSVDB ID : 63471 - Disclosed: 2010-03-24

Description:

WebKit contains a use-after-free error in the 'Node::notifyLocalNodeListsAttributeChanged' function in WebCore/dom/Node.cpp that is triggered when removing children of attribute nodes. With a specially crafted web page, a context-dependent attacker can dereference already freed memory and execute arbitrary code.

[CLOSE] OSVDB ID : 63166 - Disclosed: 2010-03-24

Description:

(Description Provided by CVE) : Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow (1) remote attackers to write to arbitrary files and execute arbitrary PHP code via vectors related to improper handling of login failures by includes/login.php; and allow remote authenticated users to write to arbitrary files and execute arbitrary PHP code via vectors involving the (2) filename and (3) block parameters to view.php.

[CLOSE] OSVDB ID : 63154 - Disclosed: 2010-03-24

Description:

SMEStorage Component for Joomla! contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'index.php' script not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied to the 'controller' parameter. This may allow an attacker to include a file from the targeted host that contains arbitrary commands or code that will be executed by the vulnerable script. Such attacks are limited due to the script only calling files already on the target host. In addition, this flaw can potentially be used to disclose the contents of any file on the system accessible by the web server.

[CLOSE] OSVDB ID : 63149 - Disclosed: 2010-03-24

Description:

Insky CMS contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'insky/modules/city.get/city.get.php' script not properly sanitizing user input supplied to the 'ROOT' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 63159 - Disclosed: 2010-03-24

Description:

Discuz! contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the "Referer" HTTP header upon submission to the 'register.php' and 'logging.php' scripts. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 63150 - Disclosed: 2010-03-24

Description:

Insky CMS contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'insky/modules/city.get/index.php' script not properly sanitizing user input supplied to the 'ROOT' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 63151 - Disclosed: 2010-03-24

Description:

Insky CMS contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'insky/modules/message2.send/message.send.php' script not properly sanitizing user input supplied to the 'ROOT' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 63152 - Disclosed: 2010-03-24

Description:

Insky CMS contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'insky/modules/message.send/message.send.php' script not properly sanitizing user input supplied to the 'ROOT'parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 63153 - Disclosed: 2010-03-24

Description:

Insky CMS contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'insky/modules/pages.add/pages.add.php' script not properly sanitizing user input supplied to the 'ROOT' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 63161 - Disclosed: 2010-03-24

Description:

Alkacon OpenCms contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate input passed via form fields when creating a comment. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 63175 - Disclosed: 2010-03-24

Description:

HP Project and Portfolio Management Center contains multiple flaws that allows remote cross site scripting (XSS) attacks. These flaws exists because the application does not sanitize input. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 63167 - Disclosed: 2010-03-24

Description:

Pulse CMS contains a flaw that allows a remote attacker to traverse outside of a restricted path. The issue is due to the script 'delete.php' not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied via the 'f' parameter. This directory traversal attack would allow the attacker to delete arbitrary files.

[CLOSE] OSVDB ID : 63168 - Disclosed: 2010-03-24

Description:

(Description Provided by CVE) : Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow (1) remote attackers to write to arbitrary files and execute arbitrary PHP code via vectors related to improper handling of login failures by includes/login.php; and allow remote authenticated users to write to arbitrary files and execute arbitrary PHP code via vectors involving the (2) filename and (3) block parameters to view.php.

[CLOSE] OSVDB ID : 63171 - Disclosed: 2010-03-24

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 63172 - Disclosed: 2010-03-24

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 63251 - Disclosed: 2010-03-24

Description:

vBulletin contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the input passed via the URL when creating a new blog post. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 63252 - Disclosed: 2010-03-24

Description:

vBulletin contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the unspecified input to the content type search widget. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 63253 - Disclosed: 2010-03-24

Description:

vBulletin contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the unspecified input upon submission CMS article previews on section pages. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 63254 - Disclosed: 2010-03-24

Description:

vBulletin contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the unspecified input upon submission to the CMS article editor. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 63286 - Disclosed: 2010-03-24

Description:

(Description Provided by CVE) : Chip Salzenberg Deliver does not properly associate a lockfile with the user who created the file, which allows local users to cause a denial of service (blockage of incoming e-mail) by creating lockfiles for arbitrary mailboxes.

[CLOSE] OSVDB ID : 63287 - Disclosed: 2010-03-24

Description:

(Description Provided by CVE) : Chip Salzenberg Deliver allows local users to cause a denial of service, obtain sensitive information, and possibly change the ownership of arbitrary files via a symlink attack on an unspecified file.

[CLOSE] OSVDB ID : 63299 - Disclosed: 2010-03-24

Description:

(Description Provided by CVE) : The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number. NOTE: some of these details are obtained from third party information.

[CLOSE] OSVDB ID : 63418 - Disclosed: 2010-03-24

Description:

(Description Provided by CVE) : Multiple format string vulnerabilities in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) 1.0.3, 0.9.5, and earlier and (2) iSCSI Enterprise Target (aka iscsitarget) 0.4.16 allow remote attackers to cause a denial of service (tgtd daemon crash) or possibly have unspecified other impact via vectors that involve the isns_attr_query and qry_rsp_handle functions, and are related to (a) client appearance and (b) client disappearance messages.

[CLOSE] OSVDB ID : 63457 - Disclosed: 2010-03-24

Description:

(Description Provided by CVE) : Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.

[CLOSE] OSVDB ID : 63469 - Disclosed: 2010-03-24

Description:

(Description Provided by CVE) : Heap-based buffer overflow in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to discover the base address of a Windows .dll file, and possibly have unspecified other impact, via unknown vectors, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.

[CLOSE] OSVDB ID : 63470 - Disclosed: 2010-03-24

Description:

(Description Provided by CVE) : Unspecified vulnerability in Internet Explorer 8 on Microsoft Windows 7 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a use-after-free issue, as demonstrated by Peter Vreugdenhil during a Pwn2Own competition at CanSecWest 2010.

[CLOSE] OSVDB ID : 63472 - Disclosed: 2010-03-24

Description:

(Description Provided by CVE) : Unspecified vulnerability in Safari 4 on Apple Mac OS X 10.6 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by Charlie Miller during a Pwn2Own competition at CanSecWest 2010.

[CLOSE] OSVDB ID : 64285 - Disclosed: 2010-03-24

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 63890 - Disclosed: 2010-03-24

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 63891 - Disclosed: 2010-03-24

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 64286 - Disclosed: 2010-03-24

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 89817 - Disclosed: 2010-03-24

Description:

By default, Multiple TAC Xenta Devices install with default user credentials (username/password combination). The 'root' account has a password of 'root', which is publicly known and documented. This allows remote attackers to trivially access the program or system and gain privileged access.

[CLOSE] OSVDB ID : 66208 - Disclosed: 2010-03-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 66209 - Disclosed: 2010-03-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 66210 - Disclosed: 2010-03-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 66211 - Disclosed: 2010-03-23

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 63144 - Disclosed: 2010-03-23

Description:

OpenPage contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'index.php' script not properly sanitizing user-supplied input to the 'id' parameter (when "pagina" is set to "news"). This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 63141 - Disclosed: 2010-03-23

Description:

RepairShop2 contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the 'Prod' parameter upon submission to the 'index.php' script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.