Vuldb Updates

A vulnerability, which was classified as problematic, has been found in Netscape Browser up to 8.0.1. Affected by this issue is some unknown functionality of the component IFRAME Javascript URL Handler. The manipulation leads to basic cross site scripting. This vulnerability is handled as CVE-2005-1476. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Netscape Browser up to 8.0.1. This affects the function InstallTrigger.install. The manipulation of the argument IconURL leads to Remote Code Execution. This vulnerability is uniquely identified as CVE-2005-1476. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla Firefox up to 1.0.3. It has been declared as problematic. Affected by this vulnerability is the function InstallTrigger.install of the component IconURL Installation. The manipulation leads to Remote Code Execution. This vulnerability is known as CVE-2005-1476. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla Firefox up to 1.0.2 and classified as critical. This issue affects some unknown processing. The manipulation of the argument rel="icon" leads to code injection. The identification of this vulnerability is CVE-2005-1155. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in F5 BIG-IP up to 4.6.3. Affected by this issue is the function slc_add_reply of the component Telnet Client SLC. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2005-0469. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as critical, was found in F5 3-DNS Controller up to 4.6.3. This affects the function slc_add_reply of the component Telnet Client SLC. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2005-0469. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical has been found in OpenBSD 3.5/3.6. Affected is the function env_opt_add of the component Telnet Client. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2005-0469. It is possible to launch the attack remotely. There is no exploit available. It is recommended to disable the affected component.

A vulnerability has been found in Webmin and classified as critical. This vulnerability affects unknown code of the component RPC Module. The manipulation of the argument remote_foreign_require/remote_foreign_call leads to improper access controls. This vulnerability was named CVE-2002-2360. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in FreeBSD 4/5. It has been declared as critical. This vulnerability affects the function env_opt_add of the component Telnet Client. The manipulation leads to memory corruption. This vulnerability was named CVE-2005-0469. The attack can be initiated remotely. There is no exploit available. It is recommended to disable the affected component.

A vulnerability was found in OpenBSD 3.5/3.6. It has been rated as critical. This issue affects the function slc_add_reply of the component Telnet Client. The manipulation leads to memory corruption. The identification of this vulnerability is CVE-2005-0469. The attack may be initiated remotely. There is no exploit available. It is recommended to disable the affected component.

A vulnerability has been found in Sun Solaris up to 10 and classified as critical. Affected by this vulnerability is the function env_opt_add of the component Telnet Client. The manipulation leads to memory corruption. This vulnerability is known as CVE-2005-0469. The attack can be launched remotely. There is no exploit available. It is recommended to disable the affected component.

A vulnerability was found in FreeBSD 4/5. It has been classified as critical. This affects the function slc_add_reply of the component Telnet Client. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2005-0469. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to disable the affected component.

A vulnerability, which was classified as critical, has been found in Sun Solaris up to 10. This issue affects the function slc_add_reply of the component Telnet Client. The manipulation leads to memory corruption. The identification of this vulnerability is CVE-2005-0469. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to disable the affected component.

A vulnerability, which was classified as problematic, has been found in IBM Lotus Sametime. This issue affects some unknown processing. The manipulation of the argument authReasonCode leads to cross site scripting. The identification of this vulnerability is CVE-2011-1106. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in Mozilla Firefox and Thunderbird up to 17.0. Affected is an unknown function of the component Chrome Object Wrappers. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2013-0757. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in IBM DB2 8.1. Affected is the function to_date. The manipulation of the argument second leads to null pointer dereference. This vulnerability is traded as CVE-2005-4869. The attack needs to be approached locally. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Dovecot up to 1.2.15/2.1.15. This vulnerability affects unknown code of the component IMAP4/POP3. The manipulation as part of SSL/TLS Handshake leads to improper authentication. This vulnerability was named CVE-2014-3430. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Symantec Endpoint Protection 12.1.4100.4126. Affected is an unknown function of the component Application/Device Control. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2014-3434. It is possible to launch the attack on the local host. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.1.111/6.6.52/6.10.11 and classified as problematic. This vulnerability affects the function ocfs2_xattr_find_entry. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2024-47670. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12-rc4. This affects the function pc_clock_settime of the component posix-clock. The manipulation leads to improper update of reference count. This vulnerability is uniquely identified as CVE-2024-50210. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.