Searching functionality software vulnerabilities

The file preview functionality in Sketch 0.6.12

functionality | preview | Sketch | file |

The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated Postscript (EPS) file.


SQL injection vulnerability in the Call Detail

vulnerability | injection | Detail | Record | Call | SQL |

SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string.


The TCP reassembly functionality in libnids bef

functionality | reassembly | libnids | before | TCP |

The TCP reassembly functionality in libnids before 1.18 allows remote attackers to cause "memory corruption" and possibly execute arbitrary code via "overlarge TCP packets."


The PKI functionality in Mac OS X 10.2.8 and 10

functionality | Mac | PKI |

The PKI functionality in Mac OS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (service crash) via malformed ASN.1 sequences.


A "potential" buffer overflow exists in the pan

"potential" | overflow | exists | buffer |

A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic.


Unknown vulnerability in the SG_IO functionalit

functionality | vulnerability | unauthorized | operations | read-only | Unknown | perform | access | bypass | ide-cd | allows | erase | write | SG_IO | local | users |

Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations.


The binfmt functionality in the Linux kernel, w

functionality | overcommit" | enabled | service | "memory | allows | denial | kernel | binfmt | cause | Linux | local | users |

The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malformed a.out binary.


phpMyAdmin before 2.6.1, when configured with U

phpMyAdmin | before |

phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sql_localfile parameter.


Multiple buffer overflows in the digest authent

authentication | functionality | attackers | arbitrary | overflows | Multiple | earlier | execute | 0928-r2 | digest | remote | buffer | allow | Pavuk | code |

Multiple buffer overflows in the digest authentication functionality in Pavuk 0.9.28-r2 and earlier allow remote attackers to execute arbitrary code.


The web mail functionality in Usermin 1.x and W

metacharacters | functionality | attackers | arbitrary | commands | execute | message | Usermin | Webmin | e-mail | remote | allows | shell | mail | via | web |

The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message.


Unknown vulnerability in phpGroupWare before 0.

vulnerability | phpGroupWare | Unknown | before |

Unknown vulnerability in phpGroupWare before 0.9.14.002 has unknown attack vectors and impact, related to a "security hole" in the Setup/Config functionality.


BNC 2.9.0 only grants access when an incorrect

BNC |

BNC 2.9.0 only grants access when an incorrect password is provided, which allows remote attackers to use the functionality intended for authorized users.


Unknown vulnerability in the LIST functionality

functionality | vulnerability | CommuniGate | attackers | service | Unknown | remote | denial | allows | before | cause | LIST | 43c3 | Pro |

Unknown vulnerability in the LIST functionality in CommuniGate Pro before 4.3c3 allows remote attackers to cause a denial of service (server crash) via certain multipart messages.


The __VIEWSTATE functionality in Microsoft ASP.

cryptographically | functionality | __VIEWSTATE | attackers | Microsoft | service | remote | denial | ASPNET | signed | allows | cause | not |

The __VIEWSTATE functionality in Microsoft ASP.NET 1.x, when not cryptographically signed, allows remote attackers to cause a denial of service (CPU consumption) via deeply nested markup.


The passthrough functionality in phpThumb.php i

functionality | phpThumbphp | passthrough |

The passthrough functionality in phpThumb.php in phpThumb() before 1.5.4 allows remote attackers to read files that are not images.


Unspecified vulnerability in the Trackback func

functionality | vulnerability | Unspecified | Trackback | DotClear |

Unspecified vulnerability in the Trackback functionality in DotClear 1.2.1 has unknown impact and attack vectors.


Unspecified vulnerability in the "Remember Me l

functionality" | vulnerability | Unspecified | "Remember | Joomla | login |

Unspecified vulnerability in the "Remember Me login functionality" in Joomla! 1.0.7 and earlier has unknown impact and attack vectors.


Unspecified vulnerability in the session extens

functionality | vulnerability | Unspecified | extension | session | before | PHP |

Unspecified vulnerability in the session extension functionality in PHP before 5.1.3 has unknown impact and attack vectors related to heap corruption.


Joomla! before 1.0.11 does not limit access to

before | Joomla |

Joomla! before 1.0.11 does not limit access to the Admin Popups functionality, which has unknown impact and attack vectors.


Unspecified vulnerability in the search functio

functionality | vulnerability | SilverStripe | Unspecified | search |

Unspecified vulnerability in the search functionality in SilverStripe 2.0.0 has unknown impact and attack vectors.


Software vulnerabilities results 1 to 20 of 189     
Page: 12345...10►