|
CVE-2008-0532 (ACS for Windows, ACS Solution Engine, user_changeable_password)
|
|
|
|
Storm worm mutation/"New User" e-mails Tue, 21 Aug 2007 00:00:00 CDT
|
|
|
|
Web Attack on Trend Micro Fails to Infect Users Sat, 15 Mar 2008 00:03:13 +0000
|
|
|
|
VU#312692:Shadow Utils useradd utility sets incorrect file permissions
|
|
|
|
Types Users Should be Aware of Computer Viruses - PR-USA.net (press release)
|
|
|
|
Gentoo: GNU ed User-assisted execution of arbitrary code Tue, 23 Sep 2008 17:21:00 +0000
|
|
|
|
FrSIRT - WordPress "user_login" Column SQL Truncation Vulnerability 2008-09-15
|
|
|
|
openMosix userspace library stack-based buffer overflow Thu, 17 Apr 2008 22:15:00 +0200
|
|
|
|
Gentoo: FAAD2 User-assisted execution of arbitrary code Sun, 09 Nov 2008 15:59:00 +0000
|
|
|
|
PokerMax Pro Poker League "ValidUserAdmin" Cookie Security Bypass
|
|
|
|
Default Multiple Joomla! Component com_rapidrecipe "user_id=" Remote SQL Inj. 13-2-2008
|
|
|
|
CVE-2008-0533 (ACS for Windows, ACS Solution Engine, user_changeable_password)
|
|
|
|
Vu Case Manager "username" and "password" SQL Injection Vulnerability 2007-11-22
|
|
|
|
CVE-2008-2275 (sr_feuser_register Extension)
|
|
|
|
Firebird "username" Buffer Overflow Vulnerability
|
|
|
|
News: Xbox Live account theft puts users at risk 2008-01-10
|
|
|
|
Drupal User and BlogAPI Security Bypass Vulnerabilities
|
|
|
|
FrSIRT - GNOME PeerCast "getAuthUserPass" Buffer Overflow Vulnerability 2008-04-30
|
|
|
|
Tips for Your Users: Passwords You Can Live With Fri, 13 Jun 2008 08:27:33 +0000
|
|
|
|
Phishers use DNS Tricks to Direct Users to Bad Sites Fri, 01 Feb 2008 08:42:49 +0000
|
|
|
|
Websense User-Agent Filtering Bypass Security Issue
|
|
|
|
?Bad Blog? Can Give Facebook Users More Than a Bad Name Mon, 13 Oct 2008 19:44:59 +0000
|
|
|
|
FrSIRT - QuakeNet snircd "send_user_mode()" Denial of Service Vulnerability 2008-03-25
|
|
|
|
AdaptCMS "user_name" SQL Injection Vulnerability
|
|
|
|
Ingres User Authentication Security Issue
|
|
|
|
Bugtraq: [ GLSA 200806-03 ] Imlib 2: User-assisted execution of arbitrary code
|
|
|
|
Linux Audit "audit_log_user_command()" Buffer Overflow
|
|
|
|
FrSIRT - VMware VirtualCenter User Account Disclosure Vulnerability 2008-08-13
|
|
|
|
SmallNuke "user_email" SQL Injection Vulnerability
|
|
|
|
Facebook privacy breach exposed users' hidden dates of birth Wed, 16 Jul 2008 09:01:21 Z
|
|
|
|
BSOD in Win 2k3, Vista x86 and x64 by nonpriviledged user Thu, 13 Nov 2008 17:59:52 +0100
|
|
|
|
FrSIRT - AlstraSoft Article Manager Pro "username" SQL Injection Vulnerability 2008-11-13
|
|
|
|
PHP Classifieds "admin_username" SQL Injection Vulnerability
|
|
|
|
FrSIRT - fuzzylime "user" Parameter Cross Site Scripting Vulnerability 2008-09-23
|
|
|
|
Facebook users struck by new "court jester" malware attack Thu, 7 Aug 2008 12:27:38 Z
|
|
|
|
Mobile-spy Victim/User Phone/SMS/URL Log Spoofing and Persistent XSS Injection 1-11-2007
|
|
|
|
Websense "username" Cross-Site Scripting Vulnerability
|
|
|
|
New Malware Threatens Mac Users Tue, 18 Nov 2008 06:05:39 +0000
|
|
|
|
Zabbix "UserParameter" Privilege Escalation Weakness
|
|
|
|
New SELinux Userland Project Site Mon, 18 Aug 2008 17:52:41 +0000
|
|
|
|
Ingres User Authentication Security Bypass and Unauthorized Access 2007-12-24
|
|
|
|
Kaspersky Internet Security 2009 2 years+10 user
|
|
|
|
Gentoo: Blam User-assisted execution of arbitrary code Sun, 27 Jan 2008 12:07:00 +0000
|
|
|
|
LifeType "newBlogUserName" Cross-Site Scripting
|
|
|
|
Virtualization Users Should Expect More Attacks Mon, 08 Sep 2008 12:51:26 +0000
|
|
|
|
Microsoft Security Advisory (892313): Default Setting in Windows Media Player Digital Rights Management Could Allow a User to Open a Web Page Without Requesting Permission - 5/10/2005 Tue, 10 May 2005 07:00:00 GMT
|
|
|
|
Microsoft Security Advisory (954462): Rise in SQL Injection Attacks Exploiting Unverified User Data Input - 6/24/2008 Tue, 24 Jun 2008 07:00:00 GMT
|
|
|
|
FrSIRT - CheckPoint VPN-1 UTM Edge "user" Cross Site Scripting Vulnerability 2008-03-06
|
|
|
|
GNOME PeerCast "HTTP::getAuthUserPass()" Buffer Overflow Vulnerability
|
|
|
|
E-topbiz Online Store 1 "user" and "cat_id" SQL Injection Vulnerabilities
|
|
|
|
WebGUI User Name Script Insertion Vulnerability
|
|
|
|
FrSIRT - Webmin and Usermin "search" Parameter Cross Site Scripting Issue 2008-02-07
|
|
|
|
Gentoo: Graphviz User-assisted execution of arbitrary Sun, 09 Nov 2008 16:01:00 +0000
|
|
|
|
Phishing e-mails instruct users to call a phone number Mon, 29 Oct 2007 00:00:00 CDT
|
|
|
|
Firefox Security Flaw Affecting Gmail's Users Mon, 12 Nov 2007 17:38:23 +0000
|
|
|
|
CVE-2008-0571 (Userpoints Module)
|
|
|
|
Websense Web Reporting Tools "username" Cross Site Scripting Issue 2007-12-11
|
|
|
|
News: eBay users' details posted to anti-fraud forum 2007-09-26
|
|
|
|
Looking For Pyrenees Travel Info Unwittingly Leads Users to Malware Fri, 08 Feb 2008 03:33:27 +0000
|
|
|
|
TYPO3 sr_feuser_register Extension Multiple Vulnerabilities
|
|
|
|
FrSIRT - Saba "usercp.php" Data Handling Cross Site Scripting Vulnerabilities 2008-10-30
|
|
|
|
CA Products Ingres User Authentication Security Bypass Vulnerability 2007-12-24
|
|
|
|
CVE-2008-2274 (sr_feuser_register Extension)
|
|
|
|
plusPHP Short URL Multi-User Script "_pages_dir" File Inclusion
|
|
|
|
CVE-2008-5095 (identity_manager_roles_based_provisioning_module, user_application)
|
|
|
|
CVE-2007-6038 (juser)
|
|
|
|
user-ppp "command_Expand_Interpret()" Buffer Overflow Vulnerability
|
|
|
|
Vuln: Symantec Altiris Deployment Solution Client User Interface Local Privilege Escalation Vulnerability 2008-10-21
|
|
|
|
Firefox Infects Vietnamese Users With Trojan Code Thu, 08 May 2008 11:38:56 +0000
|
|
|
|
Mihalism Multi Host "username" SQL Injection
|
|
|
|
PeerCast "HTTP::getAuthUserPass()" Buffer Overflow Vulnerability
|
|
|
|
Mozilla Firefox 3.0.3 User Interface Null Pointer Dereference Crash Wed, 01 Oct 2008 00:26:52 +0200
|
|
|
|
Xen PAL Emulation "copy_to_user()" Security Bypass
|
|
|
|
Gentoo: MPlayer User-assisted execution of arbitrary Thu, 29 May 2008 10:29:00 +0000
|
|
|
|
FrSIRT - Cisco User-Changeable Password Remote Buffer Overflow Vulnerabilities 2008-03-13
|
|
|
|
Stash 1.0.3 (SQL) User Credentials Disclosure Exploit Fri, 17 Oct 2008 01:05:03 +0200
|
|
|
|
Gentoo: Imlib 2 User-assisted execution of arbitrary code Mon, 09 Jun 2008 10:37:00 +0000
|
|
|
|
grsecurity RBAC User Transition Security Issue
|
|
|
|
Bugtraq: [security bulletin] HPSBOV02364 SSRT080078 rev.2 - HP OpenVMS SMGRTL Run Time Library, Local Authorized User, Gain Privileged Access
|
|
|
|
Bugtraq: [security bulletin] HPSBMA02363 SSRT080106 rev.1 - HP Enterprise Discovery Running on Windows, Remote Authorized User, Gain Extended Privileges
|
|
|
|
Bugtraq: BSOD in Win'2k3, Vista x86 and x64 by nonpriviledged user
|
|
|
|
IBM Rational ClearQuest Web User Enumeration Weakness
|
|
|
|
Gentoo: xine-lib User-assisted execution of arbitrary code Tue, 26 Feb 2008 17:55:00 +0000
|
|
|
|
ping Dusty : scan under each username?
|
|
|
|
VU#732449:Liferay Portal User Profile Greeting stored XSS
|
|
|
|
CA Products Ingres User Authentication Security Issue
|
|
|
|
Bugtraq: [ GLSA 200802-12 ] xine-lib: User-assisted execution of arbitrary code
|
|
|
|
PHP Shop "admin_username" SQL Injection Vulnerability
|
|
|
|
E.Z. Poll "Username" and "Password" SQL Injection Vulnerabilities
|
|
|
|
Bugtraq: Javamail login username and password same email problem
|
|
|
|
VU Case Manager "Username/Password" SQL Injection 27-11-2007
|
|
|
|
Brief: Mac users face Trojan threat 2007-10-31
|
|
|
|
FrSIRT - PeerCast "HTTP::getAuthUserPass()" Buffer Overflow Vulnerability 2008-04-30
|
|
|
|
Gentoo: Pan User-assisted execution of arbitrary code Thu, 31 Jul 2008 14:36:00 +0000
|
|
|
|
Portuguese YouTube Spam Leads Users To Japan, Then To Malware Thu, 30 Oct 2008 04:38:17 +0000
|
|
|
|
Vuln: Microsoft Windows Kernel Usermode Callback Local Privilege Escalation Vulnerability 2008-05-16
|
|
|
|
FrSIRT - Titan FTP Server "User" and "Pass" Commands Buffer Overflow Issues 2008-02-04
|
|
|
|
Vuln: WordPress 'users.php' and 'invite.php' Multiple Cross-Site Scripting Vulnerabilities 2008-03-07
|
|
|
|
Titan FTP Server Remote Heap Overflow (USER/PASS) 12-2-2008
|
|
|
|
Bugtraq: [ GLSA 200811-03 ] FAAD2: User-assisted execution of arbitrary code
|
|
|
|
Websense "User-Agent" HTTP Header URL Filtering Bypass Vulnerability 2007-12-13
|
|
|
|
Bugtraq: phpuserbase 1.3 (menu) Remote File Inclusion Vulnerability
|
|
|
|
Vuln: Heimdal FTPD gss_userok() Free Uninitialized Pointer Memory Corruption Vulnerability 2007-12-07
|
|
|
|
Microsoft Alerts Users to Carpet Bombing via Safari Mon, 02 Jun 2008 13:51:57 +0000
|
|
|
|
Kaspersky Internet Security 2009 2 years+10 user
|
|
|
|
CVE-2008-4656 (frontend_users_view)
|
|
|
|
Trojan.BAT.Adduser.t 17 Dec 2007 17:21:00 +0300
|
|
|
|
Brief: Vietnamese pack infects Firefox users 2008-05-08
|
|
|
|
CVE-2008-3681 (com_user)
|
|
|
|
Gentoo: Newsbeuter User-assisted execution of arbitrary Mon, 22 Sep 2008 15:31:00 +0000
|
|
|
|
FrSIRT - Web Calendar "user_id" Parameter Remote SQL Injection Vulnerability 2008-04-24
|
|
|
|
phpMyAdmin Username/Password Session File Information Disclosure
|
|
|
|
FrSIRT - Squid Analysis Report Generator User-Agent Code Execution Issues 2008-03-04
|
|
|
|
Bugtraq: [ GLSA 200806-10 ] FreeType: User-assisted execution of arbitrary code
|
|
|
|
Opera, Firefox Bug Could Export Users' Web history Wed, 20 Feb 2008 12:17:21 +0000
|
|
|
|
Habari "habari_username" Cross-Site Scripting Vulnerability
|
|
|
|
snircd "send_user_mode" Denial of Service Vulnerability
|
|
|
|
ExoPHPdesk user profile XSS / profile SQL injection 16-11-2007
|
|
|
|
Brief: Malware on legit sites poses most risk to users 2008-06-09
|
|
|
|
Bugtraq: [ GLSA 200805-22 ] MPlayer: User-assisted execution of arbitrary code
|
|
|
|
Bugtraq: [ GLSA 200805-14 ] Common Data Format library: User-assisted execution of arbitrary code
|
|
|
|
Bugtraq: [ GLSA 200802-05 ] Gnumeric: User-assisted execution of arbitrary code
|
|
|
|
CVE-2008-0720 (Webmin, Usermin)
|
|
|
|
FrSIRT - Alt-N SecurityGateway "username" Remote Buffer Overflow Vulnerability 2008-06-02
|
|
|
|
Vikingboard Local File Inclusion and Username Spoofing
|
|
|
|
Novell Client <= 4.91 SP4 Local Stack overflow / B.S.O.D (unauthentificated user) Mon, 12 May 2008 22:15:27 +0200
|
|
|
|
Vuln: auraCMS 'user.php' Access Validation Vulnerability 2008-03-28
|
|
|
|
VU#326065:Liferay Portal Enterprise Admin User-Agent HTTP header XSS
|
|
|
|
Exponent CMS User Registration Script Insertion
|
|
|
|
Undernet ircu "send_user_mode" Denial of Service Vulnerability
|
|
|
|
FrSIRT - shareCMS "eventID" and "userID" Remote SQL Injection Vulnerabilities 2008-06-25
|
|
|
|
CourseMill Learning Management System "user" SQL Injection
|
|
|
|
Pet Grooming Management System "useradded.php" Security Bypass
|
|
|
|
Bugtraq: [ GLSA 200809-07 ] libTIFF: User-assisted execution of arbitrary code
|
|
|
|
FrSIRT - GnuPG Duplicated User IDs Remote Memory Corruption Vulnerability 2008-04-01
|
|
|
|
SophosLabs partners with Microsoft to protect users from emerging threats Tue, 14 Oct 2008 17:00:05 Z
|
|
|
|
Joomla IDoBlog Component "userid" SQL Injection
|
|
|
|
Helios Calendar "username" Cross-Site Scripting Vulnerability
|
|
|
|
Microsoft Security Advisory (897663): Windows Firewall Exception May Not Display in the User Interface - 8/31/2005 Wed, 31 Aug 2005 07:00:00 GMT
|
|
|
|
VU#888209:Liferay Portal Forgot Password User-Agent HTTP header XSS
|
|
|
|
FrSIRT - Lighttpd "mod_userdir" Module Information Disclosure Vulnerability 2008-03-17
|
|
|
|
Vuln: Connectix Boards 'part_userprofile.php' Remote File Include Vulnerability 2008-01-30
|
|
|
|
VU#794236:SkypeFind fails to properly sanitize user-supplied input
|
|
|
|
Celerondude Uploader "username" Cross-Site Scripting Vulnerability
|
|
|
|
Flyspray Cross-Site Scripting and User Enumeration
|
|
|
|
Gentoo: FreeType User-assisted execution of arbitrary code Mon, 23 Jun 2008 19:55:00 +0000
|
|
|
|
VU#120593:Meridian Prolog Manager uses weak authentication to store and transmit user credentials
|
|
|
|
Webmin / Usermin "search" Cross-Site Scripting
|
|
|
|
CVE-2008-1043 (php User Base)
|
|
|
|
Gentoo: yelp User-assisted execution of arbitrary code Thu, 04 Sep 2008 15:09:00 +0000
|
|
|
|
Mozilla Firefox "keypress" User Interface Event Dispatching Weakness
|
|
|
|
FrSIRT - Linux Audit "audit_log_user_command()" Buffer Overflow Vulnerability 2008-04-01
|
|
|
|
MindDezign Photo Gallery "id" and "username" SQL Injection Vulnerabilities
|
|
|
|
Bugtraq: [ GLSA 200811-04 ] Graphviz: User-assisted execution of arbitrary code
|
|
|
|
MySpace Hole Locks Out User Wed, 21 Nov 2007 14:02:07 +0000
|
|
|
|
Sarg User-Agent Processing Multiple Vulnerabilities
|
|
|
|
webSPELL 4.01.02 (calendar.php, usergallery.php) XSS Vulnerability 11-12-2007
|
|
|
|
LightBlog "username" Local File Inclusion
|
|
|
|
FrSIRT - Citrix Web Interface User Session Termination Failure Vulnerability 2008-10-29
|
|
|
|
4th of July malware attack targets holidaying American computer users Fri, 4 Jul 2008 07:48:38 Z
|
|
|
|
New Skype Copycat Steals User Credentials Thu, 18 Oct 2007 20:14:07 +0000
|
|
|
|
Gentoo: xine-lib User-assisted execution of arbitrary code Tue, 05 Aug 2008 20:02:00 +0000
|
|
|
|
FrSIRT - Pre Simple CMS "user" Parameter Remote SQL Injection Vulnerability 2008-11-06
|
|
|
|
Novell Client Login Long Username/Context Buffer Overflow
|
|
|
|
Microsoft Security Advisory (954462): Rise in SQL Injection Attacks Exploiting Unverified User Data Input Wed, 25 Jun 2008 08:00:00 GMT
|
|
|
|
Bugtraq: [scip_Advisory 3809] Pro2col StingRay FTS login username cross site scripting
|
|
|
|
Types Users Should be Aware of Computer Viruses - PR-USA.net (press release)
|
|
|
|
Bugtraq: ExoPHPdesk user profile XSS / profile SQL injection
|
|
|
|
CVE-2008-2480 (plusphp_short_url_multi-user_script)
|
|
|
|
Wordpress user_login Column SQL Truncation Vulnerability Fri, 19 Sep 2008 17:18:53 +0200
|
|
|
|
Web Calendar Pro "user_id" SQL Injection
|
|
|
|
Pre Simple CMS "user" SQL Injection Vulnerability
|
|
|
