Searching text software vulnerabilities


FTPPro allows local users to read sensitive inf


FTPPro allows local users to read sensitive information, which is stored in plain text.


Microsoft Windows 2000 Encrypted File System do


Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files.


Buffer overflow in CDE Print Viewer (dtprintinf


Buffer overflow in CDE Print Viewer (dtprintinfo) allows local users to execute arbitrary code by copying text from the clipboard into the Help window.


Internet Explorer 5.0, and possibly other versi


Internet Explorer 5.0, and possibly other versions, may allow remote attackers (malicious web pages) to read known text files from a client's hard drive via a SCRIPT tag with a SRC value that points to the text file.


Outlook Express 6.00 allows remote attackers to


Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain messages will not run script.


WinMySQLadmin 1.1 stores the MySQL password in


WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database.


Buffer overflow in the text editor functionalit


Buffer overflow in the text editor functionality in HP-UX 10.01 through 11.04 on HP9000 Series 700 and Series 800 allows local users to cause a denial of service ("system availability") via text editors such as (1) e, (2) ex, (3) vi, (4) edit, (5) view, and (6) vedit.


CGIScript.net csNews.cgi allows remote authenti


CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability.


Perlbot 1.9.2 allows remote attackers to execut


Perlbot 1.9.2 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $text variable in SpelCheck.pm or (2) the $filename variable in HTMLPlog.pm.


Format string vulnerability in Kreed 1.05 and e


Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format specifiers in (1) a nickname or (2) message text.


Buffer overflow in the expandtabs function in 2


Buffer overflow in the expandtabs function in 2fax 3.04 allows remote attackers to execute arbitrary code via a text file that is converted to TIFF.


Stack-based buffer overflow in Oracle 9i and 10


Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.


Cross-site scripting (XSS) vulnerability in hel


Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary HTML and web script via the text parameter.


CRLF injection vulnerability in YaBB 1 Gold bef


CRLF injection vulnerability in YaBB 1 Gold before 1.3.2 allows remote attackers to modify text file contents via the subject variable.


The print-from-email feature in the Canon Image


The print-from-email feature in the Canon ImageRUNNER (iR) 5000i and C3200 digital printer, when not using IP address range filtering, allows remote attackers to print arbitrary text without authentication via a text/plain email to TCP port 25.


Cross-site scripting (XSS) vulnerability in DUw


Cross-site scripting (XSS) vulnerability in DUware DUclassified 4.0 allows remote attackers to inject arbitrary web script or HTML via the message text.


Unknown vulnerability in Moodle before 1.2 has


Unknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to improper filtering of text.


Cross-site scripting (XSS) vulnerability in net


Cross-site scripting (XSS) vulnerability in network.cgi in mailreader before 2.3.29 earlier allows remote attackers to inject arbitrary web script or HTML via MIME text/enriched or text/richtext messages.


Multiple cross-site scripting (XSS) vulnerabili


Multiple cross-site scripting (XSS) vulnerabilities in phpSysInfo 2.3, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) sensor_program parameter to index.php, (2) text[language], (3) text[template], or (4) hide_picklist parameter to system_footer.php.


Integer overflow in Mozilla Thunderbird before


Integer overflow in Mozilla Thunderbird before 1.5.0.10 and SeaMonkey before 1.0.8 allows remote attackers to trigger a buffer overflow and possibly execute arbitrary code via a text/enhanced or text/richtext e-mail message with an extremely long line.


Software vulnerabilities results 1 to 20 of 188     
Page: 12345...10