104 matches found
CVE-2013-0246
The CVE-2013-0246 issue affects Drupal core 7.x prior to 7.19. In the Image module, when a private file system is used, derivative images are not properly protected, allowing remote attackers to read derivative images of restricted images via unspecified vectors. Impact is unauthorized access to ...
Oracle Linux 5 : java-1.6.0-openjdk (ELSA-2013-0246)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0246 advisory. 1:1.6.0.0-1.33.1.11.6.0.1.el59 - Add oracle-enterprise.patch 1:1.6.0.0-1.33.1.11.6 - removed patch9 revertTwoWrongSecurityPatches2013-02-06.patch - add...
RedHat Update for java-1.6.0-openjdk RHSA-2013:0246-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for java CESA-2013:0246 centos5
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
java security update
CentOS Errata and Security Advisory CESA-2013:0246 Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring Syst...
Fedora Update for drupal6-context FEDORA-2013-0246
Check for the Version of drupal6-context OpenVAS Vulnerability Test Fedora Update for drupal6-context FEDORA-2013-0246 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...
Fedora Update for drupal6-context FEDORA-2013-0246
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
SA-CORE-2013-001 - Drupal core - Multiple vulnerabilities
Multiple vulnerabilities were fixed in the supported Drupal core versions 6 and 7. Cross-site scripting Various core and contributed modules - Drupal 6 and 7 A reflected cross-site scripting vulnerability XSS was identified in certain Drupal JavaScript functions that pass unexpected user input in...
Ecava IntegraXor ActiveX Directory Traversal
Overview Independent researchers Billy Rios and Terry McCorkle have identified a Path Traversal vulnerability in the Ecava IntegraXor application. Ecava has produced an update that mitigates this vulnerability. The researchers have validated that the patch fixes this vulnerability. Affected...
CVE-2012-0246
Ecava IntegraXor is affected by CVE-2012-0246 via a path traversal vulnerability in an ActiveX control. Affected products are IntegraXor versions older than 3.71.4200; exploitation involves opening a specially crafted HTML document on the server (notable to be exploitable through Internet Explore...
Apple QuickTime Multiple Buffer Overflow Vulnerabilities - Windows
Apple QuickTime is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2011-0246
CVE-2011-0246 refers to a heap-based buffer overflow in Apple QuickTime on Windows prior to version 7.7, triggered by processing a crafted GIF file. The vulnerability can allow remote code execution or cause an application crash (DoS). The NVD entry confirms the GIF-based overflow as the vector, ...
QuickTime < 7.7 Multiple Vulnerabilities
Binary data 801184.prm...
Memory corruption
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a...
CVE-2010-0246
This CVE (CVE-2010-0246) concerns Microsoft Internet Explorer 8 memory handling where uninitialized or deleted objects can cause memory corruption, enabling remote code execution. The connected MS KB (MS10-002) discusses a cumulative IE security update addressing remote-code-execution vulnerabili...
Internet Explorer 8 Overlap Components Memory Corruption (MS09-072; CVE-2009-3671; CVE-2010-0245; CVE-2010-0246)
Microsoft Internet Explorer is the most widely used Internet browser. A memory corruption vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. To trigge...
SLES9: Security update for postgresql
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql-devel postgresql-docs postgresql-pl postgresql-libs postgresql-server postgresql postgresql-contrib For more information, please visit the...
CVE-2009-0246
CVE-2009-0246 affects easyHDR PRO 1.60.2, where a stack-based buffer overflow can be triggered by processing an invalid Radiance RGBE (HDR) file. The vulnerability permits user-assisted attackers to execute arbitrary code on affected systems. Available sources confirm the impact is high (base sco...
Gentoo Security Advisory GLSA 200502-08 (postgresql)
The remote host is missing updates announced in advisory GLSA 200502-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD Ports: postgresql, postgresql-server, ja-postgresql
The remote host is missing an update to the system as announced in the referenced advisory. VID 65c8ecf9-2adb-11db-a6e2-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...