Linux Kernel mprotect() Function Memory Permission Bypass
The Linux Kernel contains a flaw that may allow a malicious user to gain elevated access privileges to shared memory. The issue is triggered because a 'mprotect()' call can be used to set write access to a shared memory segment that was attached read-only, even when IPC would not give permission to do so. It is possible that the flaw may allow an attacker to gain write access to shared memory, resulting in a loss of integrity.. Read more.
IntelliLink Pro edit.cgi Multiple Variable XSS
Intellilink Pro contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'id', 'forgotid' and 'forgotpass' variables upon submission to the 'edit.cgi' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.. Read more.
IntelliLink Pro addlink_lwp.cgi url Variable XSS
Intellilink Pro contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'url' variable upon submission to the 'addlink_lwp.cgi' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.. Read more.
CommuniMail templates.cgi form_id Variable XSS
CommuniMail contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'form_id' variable upon submission to the 'templates.cgi' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.. Read more.
CommuniMail mailadmin.cgi list_id Variable XSS
CommuniMail contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'list_id' variable upon submission to the 'mailadmin.cgi' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.. Read more.
Thumbnail AutoIndex Unspecified include() Issue
Thumbnail AutoIndex contains a flaw that may allow an attacker to execute arbitrary PHP code on the server. The application makes use of the 'include' function to include the 'README.html' and 'HEADER.html'. This may become an issue for a provider that offers the application as a service but disallows users to create their own PHP scripts. The flaw will allow such a user to include PHP code in one of the files mentioned above, potentially causing a loss of integrity.. Read more.
phpWebFTP index.php port Variable XSS
phpWebFTP contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'port' variable upon submission to the index.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.. Read more.
Beagle External Helper Commandline Argument Injection
Beagle contains a flaw that may allow a malicious user to pass argbitrary arguments to helper applications. The issue is triggered when Beagle, during its indexing process, launches helper applications. It is possible that the flaw may allow arbitrary code exection, resulting in a loss of integrity.. Read more.
AngelineCMS loadkernel.php installPath Variable Remote File Inclusion
AngelineCMS contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to loadkernel.php not properly sanitizing user input supplied to the 'installPath' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.. Read more.
3Com Baseline Switch 2848-SFP Crafted DHCP Packet Remote DoS
3Com Baseline Switch 2848-SFP contains a flaw that may allow a remote denial of service. The issue is triggered when the switch receives a DHCP packet that exceeds 342 bytes in length, and will result in loss of availability for the platform.. Read more.
Vuln: Multiple Mozilla Products Memory Corruption/Code Injection/Access Restriction Bypass Vulnerabilities
Multiple Mozilla Products Memory Corruption/Code Injection/Access Restriction Bypass Vulnerabilities. Read more.
Vuln: Mozilla Suite, Firefox, SeaMonkey, and Thunderbird Multiple Remote Vulnerabilities
Mozilla Suite, Firefox, SeaMonkey, and Thunderbird Multiple Remote Vulnerabilities. Read more.
Vuln: Paul A. Rombouts PDNSD Unspecified Buffer Overflow Vulnerability
Paul A. Rombouts PDNSD Unspecified Buffer Overflow Vulnerability
. Read more.
