Searching mercury software vulnerabilities

SQL injection vulnerability in index.cfm in Mer

vulnerability | arbitrary | attackers | injection | parameter | commands | indexcfm | execute | Mercury | earlier | allows | remote | page | SQL | CMS | via |

SQL injection vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter.


Cross-site scripting (XSS) vulnerability in ind

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) content and (2) criteria parameters.


Buffer overflow in Mercury Mail Transport Syste

arbitrary | Transport | attackers | overflow | request | execute | Mercury | remote | System | Buffer | allows | long | port | Mail | 401b | code | via | TCP |

Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long request to TCP port 105.


Mercury Messenger, possibly 1.7.1.1 and other v

Messenger | possibly | Mercury |

Mercury Messenger, possibly 1.7.1.1 and other versions, when running on a multi-user Mac OS X platform, stores chat logs with world-readable permissions within the /Users directory, which allows local users to read the chat logs from other users.


Multiple cross-site scripting (XSS) vulnerabili

cross-site | scripting | Multiple |

Multiple cross-site scripting (XSS) vulnerabilities in Mercury SiteScope 8.2 (8.1.2.0) allow remote authenticated users to inject arbitrary web script or HTML via (1) "any field create name field" except "create new group name" or (2) any description field.


Mercury SiteScope 8.2 (8.1.2.0) allows remote a

SiteScope | Mercury |

Mercury SiteScope 8.2 (8.1.2.0) allows remote authenticated users to cause a denial of service (loss of connectivity to the classic interface) via attempted HTML injection into the "new monitor description" field.


Buffer overflow in Mercury Mail Transport Syste

originally | VulnDisco | Transport | reported | overflow | Windows | unknown | Mercury | vectors | attack | impact | System | Buffer | GLEG | Mail | 401b | pack | has |

Buffer overflow in Mercury Mail Transport System 4.01b for Windows has unknown impact and attack vectors, as originally reported in a GLEG VulnDisco pack. NOTE: the provenance of this information is unknown; the details are obtained from third party information. The original researcher is reliable.


Stack-based buffer overflow in magentproc.exe f

Hewlett-Packard | server_ip_name | magentprocexe | Performance | Stack-based | LoadRunner | arbitrary | attackers | Firewall | overflow | execute | Mercury | Monitor | Center | buffer | packet | allows | remote | Agent | field | code | port | over | long | via | TCP |

Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1, and Monitor over Firewall 8.1 allows remote attackers to execute arbitrary code via a packet with a long server_ip_name field to TCP port 54345, which triggers the overflow in mchan.dll.


Stack-based buffer overflow in Mercury/32 (aka

Stack-based | Mercury/32 | overflow | buffer |

Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers to execute arbitrary code via a long LOGIN command. NOTE: this might be the same issue as CVE-2006-5961.


Stack-based buffer overflow in the SPIDERLib.Lo

SPIDERLibLoader | Stack-based | overflow | control | ActiveX | buffer |

Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property.


qcbin/servlet/tdservlet/TDAPI_GeneralWebTreatme

qcbin/servlet/tdservlet/TDAPI_GeneralWebTreatment | Quality | Mercury | Center | build |

qcbin/servlet/tdservlet/TDAPI_GeneralWebTreatment in HP Mercury Quality Center 9.0 build 9.1.0.4352 allows remote authenticated users to execute arbitrary SQL commands via the RunQuery method.


Stack-based buffer overflow in the MercuryS SMT

Stack-based | Transport | MercuryS | possibly | overflow | Mercury | System | buffer | server | Mail | SMTP |

Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers to execute arbitrary code via a long AUTH CRAM-MD5 string. NOTE: this might overlap CVE-2006-5961.


Software vulnerabilities results 1 to 13 of 13     
Page: 1