net software vulnerabilities
vulnerabilities.aspcode.net
Searching net software vulnerabilities
Denial of service in Oracle TNSLSNR SQL*Net Lis
malformed
|
Listener
|
SQL*Net
|
service
|
TNSLSNR
|
Denial
|
string
|
Oracle
|
port
|
NERP
|
aka
|
via
|
Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP.
Buffer overflow in QPC QVT/Net Popd 4.20 in QVT
overflow
|
QVT/Net
|
Buffer
|
Popd
|
QPC
|
Buffer overflow in QPC QVT/Net Popd 4.20 in QVT/Net 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via (1) a long username, or (2) a long password.
Buffer overflow in ftpd in QPC QVT/Net 5.0 and
attacker
|
QVT/Term
|
overflow
|
service
|
QVT/Net
|
remote
|
denial
|
Buffer
|
allows
|
cause
|
long
|
ftpd
|
QPC
|
via
|
Buffer overflow in ftpd in QPC QVT/Net 5.0 and QVT/Term 5.0 allows a remote attacker to cause a denial of service via a long (1) username or (2) password.
orderdetails.aspx, as made available to Microso
wwwibuyspystorecom
|
orderdetailsaspx
|
demonstrated
|
developers
|
modifying
|
available
|
parameter
|
attackers
|
Microsoft
|
OrderID
|
example
|
orders
|
allows
|
remote
|
users
|
other
|
made
|
code
|
view
|
NET
|
orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.com, allows remote attackers to view the orders of other users by modifying the OrderID parameter.
Multiple cross-site scripting vulnerabilities i
vulnerabilities
|
cross-site
|
arbitrary
|
attackers
|
scripting
|
Multiple
|
earlier
|
execute
|
remote
|
allows
|
script
|
Voxel
|
other
|
users
|
CBMS
|
Net
|
Dot
|
Multiple cross-site scripting vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allows remote attackers to execute arbitrary script as other CBMS users.
Digi-Net Technologies DigiChat 3.5 allows chat
Technologies
|
addresses
|
parameter
|
"Showip"
|
Digi-Net
|
DigiChat
|
applet
|
allows
|
obtain
|
users
|
other
|
chat
|
via
|
Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a "Showip" parameter in the chat applet.
Buffer overflow in net_swapscore for typespeed
net_swapscore
|
typespeed
|
overflow
|
Buffer
|
Buffer overflow in net_swapscore for typespeed 0.4.1 and earlier allows remote attackers to execute arbitrary code.
Net-SNMP before 5.0.9 allows a user or communit
Net-SNMP
|
before
|
Net-SNMP before 5.0.9 allows a user or community to access data in MIB objects, even if that data is not allowed to be viewed.
The slip_down function in slip.c for the uml_ne
uml-utilities
|
slip_down
|
function
|
program
|
uml_net
|
slipc
|
The slip_down function in slip.c for the uml_net program in uml-utilities Wednesday, September 03, 2003, when uml_net is installed setuid root, does not verify whether the calling user has sufficient permission to disable an interface, which allows local users to cause a denial of service (network service disabled).
The fib_seq_start function in fib_hash.c in Lin
fib_seq_start
|
fib_hashc
|
function
|
service
|
denial
|
allows
|
kernel
|
Linux
|
cause
|
local
|
users
|
The fib_seq_start function in fib_hash.c in Linux kernel allows local users to cause a denial of service (system crash) via /proc/net/route.
Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.
Net-SNMP
|
before
|
50x
|
Net-SNMP 5.0.x before 5.0.10.2, 5.2.x before 5.2.1.2, and 5.1.3, when net-snmp is using stream sockets such as TCP, allows remote attackers to cause a denial of service (daemon hang and CPU consumption) via a TCP packet of length 1, which triggers an infinite loop.
Unknown vulnerability in the net-svc script on
authenticated
|
vulnerability
|
arbitrary
|
responses
|
execute
|
certain
|
net-svc
|
Unknown
|
Solaris
|
client
|
script
|
allows
|
remote
|
users
|
code
|
DHCP
|
via
|
Unknown vulnerability in the net-svc script on Solaris 10 allows remote authenticated users to execute arbitrary code on a DHCP client via certain DHCP responses.
nettools.php in PHP Net Tools 2.7.1 allows remo
nettoolsphp
|
Tools
|
Net
|
PHP
|
nettools.php in PHP Net Tools 2.7.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter.
Multiple buffer overflows in multiplay.cpp in U
multiplaycpp
|
overflows
|
Multiple
|
UFO2000
|
buffer
|
svn
|
Multiple buffer overflows in multiplay.cpp in UFO2000 svn 1057 allow remote attackers to execute arbitrary code via (1) a long unit name in Net::recv_add_unit,; (2) large values to Net::recv_rules, Net::recv_select_unit, Net::recv_options, and Net::recv_unit_data; and (3) a large mapdata GEODATA structure in Net::recv_map_data.
SQL injection vulnerability in MoreInfo.asp in
vulnerability
|
ASPired2Poll
|
MoreInfoasp
|
arbitrary
|
parameter
|
injection
|
attackers
|
commands
|
execute
|
earlier
|
allows
|
remote
|
Guys
|
SQL
|
via
|
Net
|
SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Unspecified vulnerability in Net-SNMP 5.3 befor
vulnerability
|
Unspecified
|
Net-SNMP
|
before
|
Unspecified vulnerability in Net-SNMP 5.3 before 5.3.0.1, when configured using the rocommunity or rouser snmpd.conf tokens, causes Net-SNMP to gran write access to users or communities that only have read-only access.
Unspecified vulnerability in the tab editor for
vulnerability
|
Unspecified
|
Personal
|
Portal
|
before
|
editor
|
tab
|
NET
|
Unspecified vulnerability in the tab editor for Personal .NET Portal before 2.0.0 has unknown impact and attack vectors related to a "Security leak."
The Just In Time (JIT) Compiler service in Micr
Time
|
Just
|
The Just In Time (JIT) Compiler service in Microsoft .NET Framework 2.0 through 2.0 SP2 for Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer," probably a buffer overflow, aka ".NET JIT Compiler Vulnerability".
PHP remote file inclusion vulnerability in inde
vulnerability
|
Management
|
inclusion
|
indexphp
|
Content
|
remote
|
System
|
Side
|
file
|
PHP
|
Net
|
PHP remote file inclusion vulnerability in index.php in Net Side Content Management System (Net-Side.net CMS) allows remote attackers to execute arbitrary PHP code via a URL in the cms parameter.
The connect method in lib/net/http.rb in the (1
lib/net/httprb
|
connect
|
method
|
The connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1.8.5 and 1.8.6 does not verify that the commonName (CN) field in a server certificate matches the domain name in an HTTPS request, which makes it easier for remote attackers to intercept SSL transmissions via a man-in-the-middle attack or spoofed web site.
Software vulnerabilities results 1 to 20 of 96
Page:
1
2
3
4
5
►