Searching searches software vulnerabilities

VMware before 4.5.2.8848-r5 searches for gdk-pi

world-writable | gdk-pixbuf | 4528848-r5 | arbitrary | libraries | temporary | directory | includes | rrdharan | searches | execute | before | allows | shared | VMware | users | local | using | which | code | path |

VMware before 4.5.2.8848-r5 searches for gdk-pixbuf shared libraries using a path that includes the rrdharan world-writable temporary directory, which allows local users to execute arbitrary code.


Qt before 3.3.4 searches the BUILD_PREFIX direc

before |

Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PATH environment variable, which allows local users to execute arbitrary programs.


Cheetah 0.9.15 and 0.9.16 searches the /tmp dir

Cheetah |

Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/.


gdb before 6.3 searches the current working dir

configuration | directory | arbitrary | commands | searches | gdbinit | execute | current | working | running | before | allows | which | users | local | user | load | file | gdb |

gdb before 6.3 searches the current working directory to load the .gdbinit configuration file, which allows local users to execute arbitrary commands as the user running gdb.


SQL injection vulnerability in search.php in Pu

vulnerability | searchphp | injection | PunBB | SQL |

SQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote attackers to execute arbitrary SQL commands via the old_searches parameter.


Cross-site scripting (XSS) vulnerability in the

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in the show_recent_searches function in cgi-lib/user-lib/search.pl in web-app.net WebAPP before Saturday, September 09, 2006 allows remote attackers to inject arbitrary web script or HTML via the srch variable.


Buffer overflow in the Advanced Search (Finder.

Advanced | overflow | Search | Buffer |

Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches (OSS) file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."


The Find feature in Palm OS Treo smart phones o

information | attackers | sensitive | operates | password | physical | despite | feature | allows | access | obtain | phones | system | smart | which | Find | lock | Treo | Palm |

The Find feature in Palm OS Treo smart phones operates despite the system password lock, which allows attackers with physical access to obtain sensitive information (memory contents) by doing (1) text searches or (2) paste operations after pressing certain keyboard shortcut keys.


WebAPP before 0.9.9.5 allows remote authenticat

before | WebAPP |

WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via (1) the Forum Archive feature and (2) Recent Searches.


Multiple cross-site scripting (XSS) vulnerabili

cross-site | scripting | Multiple |

Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/cgi-lib/search.pl in web-app.org WebAPP before 0.9.9.7 allow remote attackers to inject arbitrary web script or HTML via a search string, which is not sanitized when an HREF attribute is printed by the (1) process_search or (2) show_recent_searches function.


Software vulnerabilities results 1 to 11 of 11     
Page: 1