Show filters
55 Total Results
Displaying 41-50 of 55
Sort by:
Attacker Value
Unknown
CVE-2006-1041
Disclosure Date: March 07, 2006 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in Gregarius 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) rss_query parameter to search.php or (2) tag parameter to tags.php.
0
Attacker Value
Unknown
CVE-2006-1042
Disclosure Date: March 07, 2006 (last updated February 22, 2025)
Multiple SQL injection vulnerabilities in Gregarius 0.5.2 allow remote attackers to execute arbitrary SQL commands via the (1) folder parameter to feed.php or (2) rss_query parameter to search.php.
0
Attacker Value
Unknown
CVE-2006-0481
Disclosure Date: January 31, 2006 (last updated February 22, 2025)
Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (crash) when the png_do_strip_filler function is used to strip alpha channels out of the image.
0
Attacker Value
Unknown
CVE-2005-3662
Disclosure Date: November 18, 2005 (last updated February 22, 2025)
Off-by-one buffer overflow in pnmtopng before 2.39, when using the -alpha command line option (Alphas_Of_Color), allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM file with exactly 256 colors.
0
Attacker Value
Unknown
CVE-2005-3408
Disclosure Date: November 01, 2005 (last updated February 22, 2025)
SQL injection vulnerability in news.php in gCards version 1.43 allows remote attackers to execute arbitrary SQL commands via the limit parameter.
0
Attacker Value
Unknown
CVE-2004-1577
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
index.php in PHP Links allows remote attackers to gain sensitive information via an invalid show parameter, which reveals the full path in an error message.
0
Attacker Value
Unknown
CVE-2004-0599
Disclosure Date: November 23, 2004 (last updated February 22, 2025)
Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.
0
Attacker Value
Unknown
CVE-2004-0597
Disclosure Date: November 23, 2004 (last updated February 22, 2025)
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.
0
Attacker Value
Unknown
CVE-2004-0598
Disclosure Date: November 23, 2004 (last updated February 22, 2025)
The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null dereference.
0
Attacker Value
Unknown
CVE-2004-0768
Disclosure Date: October 20, 2004 (last updated February 22, 2025)
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
0
