Searching tools software vulnerabilities

Buffer overflow in Adobe Acrobat 4.05, Reader,

overflow | Acrobat | Buffer | Adobe |

Buffer overflow in Adobe Acrobat 4.05, Reader, Business Tools, and Fill In products that handle PDF files allows attackers to execute arbitrary commands via a long /Registry or /Ordering specifier.


Support Tools Manager (STM) A.22.00 for HP-UX a

Manager | Support | Tools |

Support Tools Manager (STM) A.22.00 for HP-UX allows local users to overwrite arbitrary files via a symlink attack on the tool_stat.txt log file.


Unknown vulnerability in Compaq WEBES Service T

vulnerability | through | Service | Unknown | Compaq | Tools | WEBES |

Unknown vulnerability in Compaq WEBES Service Tools 2.0 through WEBES 4.0 (Service Pack 5) allows local users to read privileged files.


Directory traversal vulnerability in sqlfopenc

vulnerability | sqlfopenc | web-tools | Directory | traversal | before | SAP |

Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB before 7.4.03.30 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL.


web-tools in SAP DB before 7.4.03.30 allows rem

web-tools | before | SAP |

web-tools in SAP DB before 7.4.03.30 allows remote attackers to access the Web Agent Administration pages and modify configuration via a direct request to waadmin.wa.


Buffer overflow in Web Agent Administration ser

Administration | web-tools | overflow | service | before | Buffer | Agent | Web | SAP |

Buffer overflow in Web Agent Administration service in web-tools for SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a long Name parameter to waadmin.wa.


Buffer overflow in the WAECHO default service i

web-tools | overflow | service | default | before | Buffer | WAECHO | SAP |

Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a URL with a long requestURI.


The Web Database Manager in web-tools for SAP D

web-tools | Database | Manager | before | SAP | Web |

The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities.


MIMEDefang in MIME-tools 5.414 allows remote at

MIME-tools | MIMEDefang |

MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header.


The KAME racoon daemon in ipsec-tools before 0.

ipsec-tools | attackers | service | remote | denial | allows | racoon | daemon | before | cause | KAME |

The KAME racoon daemon in ipsec-tools before 0.5 allows remote attackers to cause a denial of service (crash) via malformed ISAKMP packets.


DHIS tools DNS package (dhis-tools-dns) before

package | tools | DHIS | DNS |

DHIS tools DNS package (dhis-tools-dns) before 5.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files created by (1) register-q.sh and (2) register-p.sh.


nettools.php in PHP Net Tools 2.7.1 allows remo

nettoolsphp | Tools | Net | PHP |

nettools.php in PHP Net Tools 2.7.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter.


PC Tools AntiVirus 2.1.0.51 uses insecure defau

AntiVirus | Tools |

PC Tools AntiVirus 2.1.0.51 uses insecure default permissions on the "PC Tools AntiVirus" directory, which allows local users to gain privileges and execute commands.


Unspecified vulnerability in JD Edwards HTML Se

EnterpriseOne | vulnerability | Unspecified | OneWorld | Edwards | Oracle | Server | Tools | HTML |

Unspecified vulnerability in JD Edwards HTML Server for Oracle OneWorld Tools EnterpriseOne Tools 8.95 and 8.96 has unknown impact and attack vectors, aka Oracle Vuln# JDE01.


tools/tellhim.php in PHP-Wyana allows remote at

tools/tellhimphp | information | sensitive | PHP-Wyana | attackers | parameter | reveals | invalid | message | remote | allows | obtain | error | which | lang | path | via |

tools/tellhim.php in PHP-Wyana allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the path in an error message.


Buffer overflow in the ActSoft DVD-Tools Active

DVD-Tools | overflow | control | ActiveX | ActSoft | Buffer |

Buffer overflow in the ActSoft DVD-Tools ActiveX control (dvdtools.ocx) allows remote attackers to execute arbitrary code via a long DVD_TOOLS.OpenDVD property value.


Multiple format string vulnerabilities in AFFLI

vulnerabilities | Multiple | AFFLIB | before | format | string |

Multiple format string vulnerabilities in AFFLIB before 2.2.6 allow remote attackers to execute arbitrary code via certain command line parameters, which are used in (1) warn and (2) err calls in (a) lib/s3.cpp, (b) tools/afconvert.cpp, (c) tools/afcopy.cpp, (d) tools/afinfo.cpp, (e) aimage/aimage.cpp, (f) aimage/imager.cpp, and (g) tools/afxml.cpp. NOTE: the aimage.cpp vector (e) has since been recalled from the researcher's original advisory, since the code is not called in any version of AFFLIB.


Multiple format string vulnerabilities in AFFLI

vulnerabilities | Multiple | AFFLIB | format | string |

Multiple format string vulnerabilities in AFFLIB 2.2.6 allow remote attackers to execute arbitrary code via certain command line parameters, which are used in (1) warn and (2) err calls, possibly involving (a) lib/s3.cpp, (b) tools/afconvert.cpp, (c) tools/afcopy.cpp, (d) tools/afinfo.cpp, (e) aimage/imager.cpp, and (f) tools/afxml.cpp. NOTE: this identifier is intended to address the vectors that were not fixed in CVE-2007-2054, but the unfixed vectors were not explicitly listed.


Cross-site scripting (XSS) vulnerability in ind

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in index.pl in OTRS (Open Ticket Request System) 2.0.x allows remote attackers to inject arbitrary web script or HTML via the Subaction parameter in an AgentTicketMailbox Action. NOTE: DEBIAN:DSA-1299 originally used this identifier for an ipsec-tools issue, but the proper identifier for the ipsec-tools issue is CVE-2007-1841.


Unspecified vulnerability in the PD tools compo

vulnerability | Application | Unspecified | WebSphere | component | Server | tools | IBM |

Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier has unknown impact and attack vectors.


Software vulnerabilities results 1 to 20 of 65     
Page: 1234►