v-secure vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands....

Alexander V. Lukyanov Lftp 2.3 Alexander V. Lukyanov Lftp 2.4.9 Alexander V. Lukyanov Lftp 2.5.2 Alexander V. Lukyanov Lftp 2.6.0 Alexander V. Lukyanov Lftp 2.6.3 Alexander V. Lukyanov Lftp 2.6.4 Alexander V. Lukyanov Lftp 2.6.5 Alexander V. Lukyanov Lftp 2.6.6 Alexander V. Lukyanov Lftp 2.6.7 Alexander V. Lukyanov Lftp 2.6.8 Alexander V. Lukyanov Lftp 2.6.91 EDB exploit available

4.3

CVSSv2

Open redirect vulnerability in redirect.php in V-webmail 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the to parameter....

V-webmail V-webmail 1.5.0

6.8

CVSSv2

Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0)....

Fujielectric V-server Fujielectric V-simulator

6.8

CVSSv2

Multiple out-of-bounds write issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0)....

Fujielectric V-server Fujielectric V-simulator

6.8

CVSSv2

A heap-based buffer overflow issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0)....

Fujielectric V-server Fujielectric V-simulator

7.5

CVSSv2

PHP remote file inclusion vulnerability in includes/mailaccess/pop3/core.php in V-Webmail 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[pear_dir] parameter....

V-webmail V-webmail1 EDB exploit available

7.5

CVSSv2

PHP remote file inclusion vulnerability in includes/mailaccess/pop3.php in V-Webmail 1.5 through 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[pear_dir] parameter....

V-webmail V-webmail1 EDB exploit available

6.8

CVSSv2

Multiple stack-based buffer overflow issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to...

Fujielectric V-server Fujielectric V-simulator

6.8

CVSSv2

An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0)....

Fujielectric V-server Fujielectric V-simulator

« PREV 1 2 3 4 5 6 7 NEXT »