CVE-2011-0254

WebKit used by Apple Safari before version 5.0.6 is affected by CVE-2011-0254. A crafted web site can cause memory corruption, allowing remote code execution or a denial of service (application crash). The issue is documented across multiple sources (Apple advisories and third-party vulnerability...

CVE-2010-0254

CVE-2010-0254 is a Visio memory‑corruption vulnerability in Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1/SP2. The flaw arises from improper validation of Visio file attributes, allowing a remote attacker to execute arbitrary code by opening a crafted Visio file. The issue is part of a ...

RHEL 4 : Satellite Server (RHSA-2008:0630)

Red Hat Network Satellite Server version 5.1.1 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having low security impact by the Red Hat Security Response Team. During an internal security...

Mandrake Linux Security Advisory : xine-ui (MDKSA-2007:154)

Format string vulnerability in the errorscreatewindow function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors. CVE-2007-0254 XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code...

Mandriva Update for xine-ui MDKSA-2007:027 (xine-ui)

Check for the Version of xine-ui OpenVAS Vulnerability Test Mandriva Update for xine-ui MDKSA-2007:027 xine-ui Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2009-0254

CVE-2009-0254 involves a stack-based buffer overflow in easyHDR PRO 1.60.2 triggered by processing an invalid FITS file. The vulnerability could allow a user‑assisted attacker to execute arbitrary code, with the NVD entry modeling it as a network‑vector issue and providing a high impact. The conn...

Gentoo Security Advisory GLSA 200701-18 (xine-ui)

The remote host is missing updates announced in advisory GLSA 200701-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200701-18 (xine-ui)

The remote host is missing updates announced in advisory GLSA 200701-18. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

tomcat XSS in example webapps

Cross-site scripting XSS vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly...

Moderate: Red Hat Security Advisory: Red Hat Network Satellite Server security update

Red Hat Network Satellite Server version 5.0.2 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having moderate security impact by the Red Hat Security Response Team. During an internal...

CVE-2008-0254

SQL injection vulnerability in activate.php in TutorialCMS aka Photoshop Tutorials 1.02, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the userName parameter...

CVE-2006-7196

Cross-site scripting XSS vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly...

CVE-2006-7196

Cross-site scripting XSS vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly...

CVE-2007-0254

Format string vulnerability in the errorscreatewindow function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors...

CVE-2007-0254

Format string vulnerability in the errorscreatewindow function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors...

CVE-2007-0254

CVE-2007-0254 refers to a format-string vulnerability in the xine-ui project, specifically in the errors_create_window() function of errors.c. The flaw potentially allows arbitrary code execution via crafted input, as reported in multiple advisories for xine-ui. Affected versions include 0.99.4-e...

CVE-2006-0254

CVE-2006-0254 describes cross-site scripting in Apache Geronimo 1.0 via the time parameter to cal2.jsp and any invalid parameter, exploitable when the log file is viewed in the Web-Access-Log viewer. Related OSV/GHSA entries confirm XenS issues and note that Geronimo 1.1 contains fixes. Remediati...

CVE-2005-0254

BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to other users with PDF or PS icons, which may trick some users into downloading and executing those...

CVE-2005-0254

BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to other users with PDF or PS icons, which may trick some users into downloading and executing those...

CVE-2005-0254

BibORB 1.3.2 and earlier versions are affected by an arbitrary file upload vulnerability due to improper enforcement of restrictions on uploaded files. Specifically, the upload mask allows non-PDF/PS data to be uploaded and then displayed with PDF/PS icons, potentially tricking users into downloa...