[CLOSE] OSVDB ID : 72572 - Disclosed: 2011-02-28

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 71229 - Disclosed: 2011-02-28

Description:

Avactis Shopping Cart contains a flaw that allows a remote Cross-site Request Forgery (CSRF / XSRF) attack. The flaw exists because the application does not require multiple steps or explicit confirmation for sensitive transactions for the addition of administrator users. By using a crafted URL (e.g., a crafted GET request inside an "img" tag), an attacker may trick the victim into clicking on the image to take advantage of the trust relationship between the authenticated victim and the application. Such an attack could trick the victim into executing arbitrary commands in the context of their session with the application, without further prompting or verification.

[CLOSE] OSVDB ID : 71550 - Disclosed: 2011-02-28

Description:

Wireshark contains a flaw that may allow a remote denial of service. The issue is triggered when 'epan/dissectors/packet-ldap.c' (LDAP Dissector) fails to properly process filter strings, allowing an attacker to use a crafted filter string to cause a denial of service via memory consumption.

[CLOSE] OSVDB ID : 75010 - Disclosed: 2011-02-28

Description:

(Description Provided by CVE) : crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname.

[CLOSE] OSVDB ID : 74890 - Disclosed: 2011-02-28

Description:

(Description Provided by CVE) : Buffer overflow in the PPP Access Concentrator (PPPAC) on the SEIL/x86 with firmware 1.00 through 1.61, SEIL/B1 with firmware 1.00 through 3.11, SEIL/X1 with firmware 1.00 through 3.11, SEIL/X2 with firmware 1.00 through 3.11, SEIL/Turbo with firmware 1.80 through 2.10, and SEIL/neu 2FE Plus with firmware 1.80 through 2.10 might allow remote attackers to execute arbitrary code via a PPPoE packet.

[CLOSE] OSVDB ID : 73337 - Disclosed: 2011-02-28

Description:

(Description Provided by CVE) : A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589.

[CLOSE] OSVDB ID : 73338 - Disclosed: 2011-02-28

Description:

(Description Provided by CVE) : The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) allows remote attackers to download an unintended Cisco program onto a client machine, and execute this program, by identifying a Cisco program with a Cisco digital signature and then renaming this program to inst.exe, a different vulnerability than CVE-2010-0589 and CVE-2011-0926.

[CLOSE] OSVDB ID : 73712 - Disclosed: 2011-02-28

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 73525 - Disclosed: 2011-02-28

Description:

PSnapProof contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate the 'retPageID' parameter upon submission to the cart.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 73713 - Disclosed: 2011-02-28

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 75009 - Disclosed: 2011-02-28

Description:

(Description Provided by CVE) : crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the existence of arbitrary files via a symlink attack on a /tmp/crontab.XXXXXXXXXX temporary file and (2) perform MD5 checksum comparisons on arbitrary pairs of files via two symlink attacks on /tmp/crontab.XXXXXXXXXX temporary files.

[CLOSE] OSVDB ID : 75011 - Disclosed: 2011-02-28

Description:

(Description Provided by CVE) : ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

[CLOSE] OSVDB ID : 75084 - Disclosed: 2011-02-27

Description:

(Description Provided by CVE) : Wee Enhanced Environment for Chat (aka WeeChat) 0.3.4 and earlier does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL chat server via an arbitrary certificate, related to incorrect use of the GnuTLS API.

[CLOSE] OSVDB ID : 71165 - Disclosed: 2011-02-27

Description:

Citrix Secure Gateway contains an unspecified flaw that may allow a remote attacker to execute arbitrary code. No further details have been provided.

[CLOSE] OSVDB ID : 71223 - Disclosed: 2011-02-27

Description:

coRED CMS contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the /coRED/content/rubric/index.php script not properly sanitizing user-supplied input to the 'rubID' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 73581 - Disclosed: 2011-02-27

Description:

Imageview contains a flaw that may allow a remote attacker to execute arbitrary commands or code, or obtain access to arbitrary files. The issue is due to the /admin/index.php script not properly sanitizing user input supplied to the 'page' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server, or access arbitrary files.

[CLOSE] OSVDB ID : 73707 - Disclosed: 2011-02-27

Description:

(Description Provided by CVE) : Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place.

[CLOSE] OSVDB ID : 75761 - Disclosed: 2011-02-27

Description:

(Description Provided by CVE) : DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by header_html.php.

[CLOSE] OSVDB ID : 75086 - Disclosed: 2011-02-26

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 71371 - Disclosed: 2011-02-26

Description:

Xmap Component for Joomla! contains a trojaned distribution of the '/administrator/components/com_xmap/install.xmap.php' script which has a backdoor a remote attacker may use to execute arbitrary PHP code.

[CLOSE] OSVDB ID : 75085 - Disclosed: 2011-02-26

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 75897 - Disclosed: 2011-02-26

Description:

SweetRice contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when a remote attacker sends a direct request to the _plugin/tiny_mce/plugins/advimage/images.php script, which discloses the software's installation path resulting in a loss of confidentiality. While such information is relatively low risk, it is often useful in carrying out additional, more focused attacks.

[CLOSE] OSVDB ID : 72298 - Disclosed: 2011-02-25

Description:

Edraw Office Viewer Component is prone to an overflow condition. The ActiveX control fails to properly sanitize user-supplied input resulting in a buffer overflow. With a specially crafted website, a context-dependent attacker can potentially cause arbitrary code execution.

[CLOSE] OSVDB ID : 71269 - Disclosed: 2011-02-25

Description:

Things BBS contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate certain unspecified input before returning it to the user. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 71270 - Disclosed: 2011-02-25

Description:

Things BBS contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate certain unspecified input before returning it to the user. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 70945 - Disclosed: 2011-02-25

Description:

PolarSSL has been reported to contain a flaw related to the use of weak keys in a Diffie-Hellman key exchange, allowing Man-in-The-Middle (MiTM) attacks. However, the attack described in the PolarSSL advisory does not appear to work in the real world: while the server may accept a weak DH key, the client is supposed to validate the signature of the server's DH key, so a 3rd party must intercept and replace both keys in the exchange. At that point of the exchange, the attacker could just as well establish a direct SSL session with the server to achieve the same results.

[CLOSE] OSVDB ID : 71003 - Disclosed: 2011-02-25

Description:

Hiawatha contains a flaw that may allow a remote denial of service. The issue is triggered when when parsing HTTP header data, allowing a remote attacker to use a large value Content-Length header to cause a denial of service.

[CLOSE] OSVDB ID : 71239 - Disclosed: 2011-02-25

Description:

XCloner Plugin for WordPress contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate the 'mosmsg' and 'option' parameters upon submission to the wp-content/plugins/xcloner-backup-and-restore/admin.cloner.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 71238 - Disclosed: 2011-02-25

Description:

XCloner Plugin for WordPress contains a flaw that allows a remote attacker to traverse outside of a restricted path. The issue is due to the wp-content/plugins/xcloner-backup-and-restore/cloner.cron.php script not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied via the 'config' parameter. This directory traversal attack would allow the attacker to access arbitrary files.

[CLOSE] OSVDB ID : 71241 - Disclosed: 2011-02-25

Description:

XCloner Component for Joomla! contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate the 'mosmsg' and 'option' parameters upon submission to the administrator/components/com_xcloner-backupandrestore/admin.cloner.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 70956 - Disclosed: 2011-02-25

Description:

Novell Vibe OnPrem contains an unspecified flaw that may allow a remote attacker to execute arbitrary code. No further details have been provided.

[CLOSE] OSVDB ID : 71240 - Disclosed: 2011-02-25

Description:

XCloner Component for Joomla! contains a flaw that allows a remote attacker to traverse outside of a restricted path. The issue is due to the administrator/components/com_xcloner-backupandrestore/cloner.cron.php script not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied via the 'config' parameter. This directory traversal attack would allow the attacker to access arbitrary files.

[CLOSE] OSVDB ID : 73518 - Disclosed: 2011-02-25

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 73517 - Disclosed: 2011-02-25

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 73715 - Disclosed: 2011-02-25

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 73519 - Disclosed: 2011-02-25

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 80367 - Disclosed: 2011-02-25

Description:

FreePBX contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate the $type, $action, $old_custom_dest, and $custom_dest parameters upon submission to the config.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 71647 - Disclosed: 2011-02-25

Description:

Apache HttpComponents contains a flaw that may lead to unauthorized disclosure of potentially sensitive information. The issue is due to the HttpClient failing to properly send the Proxy-Authorization header to its final target host. This may allow a remote attacker to gain access to authorization credential information.

[CLOSE] OSVDB ID : 71169 - Disclosed: 2011-02-25

Description:

Recent Topics on Index page Plugin for MyBB contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate the 'subject' parameter upon submission to the newthread.php script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 71410 - Disclosed: 2011-02-25

Description:

Foxit Reader is prone to an overflow condition. The program suffers an integer overflow when parsing certain ICC chunks, which may be further exploited to cause a heap-based buffer overflow. With a specially crafted ICC chunks in a PDF file, a context-dependent attacker can potentially execute arbitrary code.