CVE-2013-4203

The self.rungpg function in lib/rgpg/gpghelper.rb in the rgpg gem before 0.2.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors...

PT-2013-3615

Name of the Vulnerable Software and Affected Versions Gallery 3 versions prior to 3.0.9 Description The issue is related to the lib/flowplayer.swf.php file, which does not properly remove query fragments. This allows remote attackers to have an unspecified impact via a replay attack...

CVE-2013-2240

lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138...

CVE-2013-2240: Undefined Security Weakness

lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138...

PT-2013-4974

Name of the Vulnerable Software and Affected Versions RubyGems versions 1.8.24 through 1.8.26 RubyGems versions prior to 1.8.23.2 RubyGems versions 2.0.x prior to 2.0.10 RubyGems versions 2.1.x prior to 2.1.5 Description The issue is related to an algorithmic complexity vulnerability in...

PT-2013-4937

Name of the Vulnerable Software and Affected Versions RubyGems versions 1.8.24 through 1.8.25 RubyGems versions 2.0.x through 2.0.7 RubyGems versions 2.1.x through 2.1.0 RubyGems version 1.8.23 and earlier Description The issue allows remote attackers to cause a denial of service via a crafted ge...

CVE-2013-4260

lib/ansible/playbook/init.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/...

CVE-2013-4260: Undefined Security Weakness

lib/ansible/playbook/init.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a predictable name in /var/tmp/ansible/...

PT-2013-5709

Name of the Vulnerable Software and Affected Versions sounder gem version 1.0.1 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a filename, specifically in the lib/sounder/sound.rb file. Recommendations For sounder gem version 1.0.1, conside...

CVE-2013-5647: Improper Control of Generation of Code

lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename...

xml2 Fuzzer 1.0 exploit

xml2 Fuzzer is a fuzzing utility that daemonizes in order to fuzz the client side of a web browser. / xml2 fuzz ver 1.0 -- C:\x90c\xml2fuzz ./xmlfuzz / \ / \ | || | | | \ / / . || | | | / | include include define FUZZDAEMONPORT 9090 / fuzz type / define AAAAFUZZ 1 define NUMERICFUZZ 2 static char...

CVE-2013-2244

Multiple cross-site scripting XSS vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field...

CVE-2013-2244: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field...

PT-2013-3619

Name of the Vulnerable Software and Affected Versions Moodle versions 2.4.x through 2.4.4 Moodle versions 2.5.x through 2.5.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field. This is due to multiple...

Oracle Linux 5 : Important: / nfs-utils-lib (ELSA-2007-0951)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0951 advisory. 1.0.8-7.2.z2 - Updated libnfsidmap to -17 to fix a security issue bz 254041 1.0.8-7.2.z1 - Fixed RPC library buffer overflow bz 265061 Tenable has...

Oracle Linux 4 : nfs-utils-lib (ELSA-2007-0913)

From Red Hat Security Advisory 2007:0913 : An updated nfs-utils-lib package to correct a security flaw is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The nfs-utils-lib package contains support...

Fedora 18 : gegl-0.2.0-11.fc18 (2013-12108)

This update contains the following changes : - Fix buffer overflow in and add plausibility checks to the ppm-load operation. - Fix multi-lib issue where content of generated documentation could differ between architectures. Note that Tenable Network Security has extracted the preceding descriptio...

Fedora 17 : gegl-0.2.0-11.fc17 (2013-12075)

This update contains the following changes : - Fix buffer overflow in and add plausibility checks to the ppm-load operation. - Fix multi-lib issue where content of generated documentation could differ between architectures. Note that Tenable Network Security has extracted the preceding descriptio...

Fedora 19 : gegl-0.2.0-11.fc19 (2013-12115)

This update contains the following changes : - Fix buffer overflow in and add plausibility checks to the ppm-load operation. - Fix multi-lib issue where content of generated documentation could differ between architectures. Note that Tenable Network Security has extracted the preceding descriptio...

CVE-2014-2538 rubygem rack-ssl: URL error display XSS

Cross-site scripting XSS vulnerability in lib/rack/ssl.rb in the rack-ssl gem before 1.4.0 for Ruby allows remote attackers to inject arbitrary web script or HTML via a URI, which might not be properly handled by third-party adapters such as JRuby-Rack...