[CLOSE] OSVDB ID : 63148 - Disclosed: 2010-03-22

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 63165 - Disclosed: 2010-03-22

Description:

(Description Provided by CVE) : The flood-protection feature in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain Lexmark laser and inkjet printers and MarkNet devices allows remote attackers to cause a denial of service (TCP outage) by making many passive FTP connections and then aborting these connections.

[CLOSE] OSVDB ID : 63164 - Disclosed: 2010-03-22

Description:

(Description Provided by CVE) : Stack-based buffer overflow in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain Lexmark laser printers and multi-function printers allows remote attackers to execute arbitrary code or cause a denial of service (device hang) via a long argument to a PJL INQUIRE command.

[CLOSE] OSVDB ID : 63170 - Disclosed: 2010-03-22

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 63322 - Disclosed: 2010-03-22

Description:

(Description Provided by CVE) : JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of service (application crash) via an HTML document composed of many successive occurrences of the <object> substring.

[CLOSE] OSVDB ID : 63633 - Disclosed: 2010-03-22

Description:

(Description Provided by CVE) : Linux kernel 2.6.18 through 2.6.33, and possibly other versions, allows remote attackers to cause a denial of service (memory corruption) via a large number of Bluetooth sockets, related to the size of sysfs files in (1) net/bluetooth/l2cap.c, (2) net/bluetooth/rfcomm/core.c, (3) net/bluetooth/rfcomm/sock.c, and (4) net/bluetooth/sco.c.

[CLOSE] OSVDB ID : 63634 - Disclosed: 2010-03-22

Description:

(Description Provided by CVE) : Linux kernel 2.6.18 through 2.6.33, and possibly other versions, allows remote attackers to cause a denial of service (memory corruption) via a large number of Bluetooth sockets, related to the size of sysfs files in (1) net/bluetooth/l2cap.c, (2) net/bluetooth/rfcomm/core.c, (3) net/bluetooth/rfcomm/sock.c, and (4) net/bluetooth/sco.c.

[CLOSE] OSVDB ID : 63635 - Disclosed: 2010-03-22

Description:

(Description Provided by CVE) : Linux kernel 2.6.18 through 2.6.33, and possibly other versions, allows remote attackers to cause a denial of service (memory corruption) via a large number of Bluetooth sockets, related to the size of sysfs files in (1) net/bluetooth/l2cap.c, (2) net/bluetooth/rfcomm/core.c, (3) net/bluetooth/rfcomm/sock.c, and (4) net/bluetooth/sco.c.

[CLOSE] OSVDB ID : 63636 - Disclosed: 2010-03-22

Description:

(Description Provided by CVE) : Linux kernel 2.6.18 through 2.6.33, and possibly other versions, allows remote attackers to cause a denial of service (memory corruption) via a large number of Bluetooth sockets, related to the size of sysfs files in (1) net/bluetooth/l2cap.c, (2) net/bluetooth/rfcomm/core.c, (3) net/bluetooth/rfcomm/sock.c, and (4) net/bluetooth/sco.c.

[CLOSE] OSVDB ID : 63670 - Disclosed: 2010-03-22

Description:

Teamsite Hack Plugin for WoltLab Burning Board contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate the 'userid' parameter upon submission to the 'ts_other.php' script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 63819 - Disclosed: 2010-03-22

Description:

(Description Provided by CVE) : Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached contents of other pages.

[CLOSE] OSVDB ID : 63887 - Disclosed: 2010-03-22

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 64548 - Disclosed: 2010-03-22

Description:

Pay Per Watch & Bid Auktions System contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate the 'id_auk' parameter upon submission to the 'auktion.php' script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 65492 - Disclosed: 2010-03-22

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 63118 - Disclosed: 2010-03-21

Description:

Heimdal contains a flaw that may allow a remote denial of service. The issue is triggered by an incorrect length check when decrypting connections, and will result in loss of availability for the service.

[CLOSE] OSVDB ID : 63119 - Disclosed: 2010-03-21

Description:

Heimdal contains a flaw that may allow a remote denial of service. The issue is triggered when the HMAC implementation clears too much memory, and will result in loss of availability for the service.

[CLOSE] OSVDB ID : 63122 - Disclosed: 2010-03-21

Description:

notsoPureEdit contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'templates/template.php' script not properly sanitizing user input supplied to the 'content' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 63126 - Disclosed: 2010-03-21

Description:

Teamsite Hack plugin for WoltLab Burning Board contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'ts_other.php' script not properly sanitizing user-supplied input to the 'userid' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 63623 - Disclosed: 2010-03-21

Description:

WebMaid CMS contains a flaw that allows a remote attacker to traverse outside of a restricted path. The issue is due to the 'cContactus.php' script not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied via the 'com' parameter. This directory traversal attack would allow the attacker to access arbitrary files.

[CLOSE] OSVDB ID : 63624 - Disclosed: 2010-03-21

Description:

WebMaid CMS contains a flaw that allows a remote attacker to traverse outside of a restricted path. The issue is due to the 'cGuestbook.php' script not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied via the 'com' parameter. This directory traversal attack would allow the attacker to access arbitrary files.

[CLOSE] OSVDB ID : 63625 - Disclosed: 2010-03-21

Description:

WebMaid CMS contains a flaw that allows a remote attacker to traverse outside of a restricted path. The issue is due to the 'cArticle.php' script not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied via the 'com' parameter. This directory traversal attack would allow the attacker to access arbitrary files.

[CLOSE] OSVDB ID : 63626 - Disclosed: 2010-03-21

Description:

WebMaid CMS contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'template/babyweb/index.php' script not properly sanitizing user input supplied to the 'template', 'menu', 'events', and 'SITEROOT' parameters. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 63627 - Disclosed: 2010-03-21

Description:

WebMaid CMS contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'template/calm/footer.php' script not properly sanitizing user input supplied to the 'modules' and 'copyright' parameters. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 63628 - Disclosed: 2010-03-21

Description:

WebMaid CMS contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'template/calm/top.php' script not properly sanitizing user input supplied to the 'menu' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 63629 - Disclosed: 2010-03-21

Description:

WebMaid CMS contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the template/wm025/footer.php script not properly sanitizing user input supplied to the 'modules', 'copyright' and 'menu' parameters. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 64831 - Disclosed: 2010-03-21

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 63473 - Disclosed: 2010-03-20

Description:

Microsoft Internet Explorer allows remote attackers to have an unspecified impact via a specially crafted XML document that references a crafted web site in the SRC attribute of an image element

[CLOSE] OSVDB ID : 63131 - Disclosed: 2010-03-20

Description:

Pay Per Watch & Bid Auktions System contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'auktion.php' script not properly sanitizing user-supplied input to the 'id_auk' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 63375 - Disclosed: 2010-03-20

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 64856 - Disclosed: 2010-03-20

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 64847 - Disclosed: 2010-03-20

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 65502 - Disclosed: 2010-03-20

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 63145 - Disclosed: 2010-03-19

Description:

vBulletin contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the 'query' parameter upon submission to the 'search.php' script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 63246 - Disclosed: 2010-03-19

Description:

Linux Kernel 2.6x contains a flaw that may allow a remote denial of service. The issue is triggered when the "l2cap_config_rsp()" function in net/bluetooth/l2cap.c receives a specially crafted packet, which will result in loss of availability (e.g., kernel crash) for the platform.

[CLOSE] OSVDB ID : 70483 - Disclosed: 2010-03-19

Description:

Linux Kernel contains a flaw that may allow a remote denial of service. The issue is triggered when the 'igb_receive_skb 'function in 'drivers/net/igb/igb_main.c' in the Intel Gigabit Ethernet subsystem has SR-IOV and promiscuous mode enabled without any VLANs registered. This may allow a remote attacker to cause a NULL pointer dereference and panic denial of service via a VLAN tagged frame.

[CLOSE] OSVDB ID : 63099 - Disclosed: 2010-03-19

Description:

Limny contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the index.php script not properly sanitizing user-supplied input to the 'q', 'theme', 'language', 'tags', 'category', 'name', 'pageslinksby', 'itemsseperator', 'datetimetype', 'numberofposts', 'numebrofpages', 'showsummaryinfullview', "postlinksby", "postsseperator", 'email', 'content', 'summary' and 'text' parameters. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 63100 - Disclosed: 2010-03-19

Description:

Limny contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the 'q', 'theme', 'language', 'tags', 'category', 'name', 'pageslinksby', 'itemsseperator', 'datetimetype', 'pageslinksby', 'itemsseperator', 'datetimetype', 'email', 'content', 'text' and 'summary' parameters upon submission to the index.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 63101 - Disclosed: 2010-03-19

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 63102 - Disclosed: 2010-03-19

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 63103 - Disclosed: 2010-03-19

Description:

Limny contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the "block[title]" and "block[content]" parameters upon submission to the 'themes/gray/block.php' script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.