Searching validity software vulnerabilities

saned in sane-backends 1.0.7 and earlier does n

sane-backends | saned |

saned in sane-backends 1.0.7 and earlier does not properly "check the validity of the RPC numbers it gets before getting the parameters," with unknown consequences.


The "Upload new image" command in the "Manage I

uploading | extension | attackers | arbitrary | eFiction | validity | executes | filename | contains | execute | Images" | members | "Manage | "Upload | command | allowed | images | image" | passes | header | allows | within | upload | remote | image | check | which | code | file | any | PHP | new | but | GIF |

The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows remote attackers to execute arbitrary PHP code by uploading a filename with a .php extension that contains a GIF header, which passes the image validity check but executes any PHP code within the file.


Unspecified vulnerability in portable OpenSSH b

"authentication | vulnerability | Unspecified | determine | attackers | involving | usernames | platforms | validity | portable | vectors | unknown | OpenSSH | running | GSSAPI | allows | remote | abort" | before | some | via |

Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."


my.activation.php3 in F5 FirePass 5.4 through 5

myactivationphp3 | FirePass | through |

my.activation.php3 in F5 FirePass 5.4 through 5.5.1 and 6.0 displays different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to confirm the validity of an LDAP account.


Software vulnerabilities results 1 to 5 of 5     
Page: 1