openSUSE: Security Advisory for pidgin (openSUSE-SU-2013:0405-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

FreeBSD : libpurple -- multiple vulnerabilities (549787c1-8916-11e2-8549-68b599b52a02)

Pidgin reports : libpurple Fix a crash when receiving UPnP responses with abnormally long values. MXit Fix two bugs where a remote MXit user could possibly specify a local file path to be written to. Fix a bug where the MXit server or a man-in-the-middle could potentially send specially crafted...

SuSE 11.2 Security Update : pidgin (SAT Patch Number 7429)

pidgin was updated to fix 4 security issues : - Fixed a crash when receiving UPnP responses with abnormally long values. CVE-2013-0274, bnc804742 - Fixed a crash in Sametime protocol when a malicious server sends us an abnormally long user ID. CVE-2013-0273, bnc804742 - Fixed a bug where the MXit...

SuSE 10 Security Update : pidgin (ZYPP Patch Number 8475)

pidgin was updated to fix 4 security issues : - Fixed a crash when receiving UPnP responses with abnormally long values. CVE-2013-0274, bnc804742 - Fixed a crash in Sametime protocol when a malicious server sends us an abnormally long user ID. CVE-2013-0273, bnc804742 - Fixed a bug where the MXit...

Ubuntu: Security Advisory (USN-1746-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : pidgin vulnerabilities (USN-1746-1)

Chris Wysopal discovered that Pidgin incorrectly handled file transfers in the MXit protocol handler. A remote attacker could use this issue to create or overwrite arbitrary files. This issue only affected Ubuntu 11.10, Ubuntu 12.04 LTS and Ubuntu 12.10. CVE-2013-0271 It was discovered that Pidgi...

CVE-2013-0274

upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service application crash by leveraging access to the local network...

CVE-2013-0274

upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service application crash by leveraging access to the local network...

CVE-2013-0274

Pidgin (libpurple) upnp.c vulnerability CVE-2013-0274 arises from failure to terminate long strings in UPnP responses, affecting the Pidgin/libpurple component prior to version 2.10.7. This allows a remote attacker on the local network to trigger an application crash (DoS). The issue is specific ...

CVE-2013-0274

upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service application crash by leveraging access to the local network...

Secunia Research: Network Instruments Observer SNMP OID Processing Denial of Service

====================================================================== Secunia Research 07/06/2012 - Network Instruments Observer - - SNMP OID Processing Denial of Service Vulnerability - ====================================================================== Table of Contents Affected...

PhotoPost PHP 'showgallery.php' Multiple Cross Site Scripting Vulnerabilities

PhotoPost PHP is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user- supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the...

CVE-2011-0274

HP BAC (Business Availability Center) and BSM (Business Service Management) versions affected are BAC 7.x up to 7.55, BAC 8.x up to 8.05, and BSM up to 9.01. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified ...

[security bulletin] HPSBMA02622 SSRT100342 rev.1 - HP Business Availability Center (BAC) and Business Service Management (BSM), Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02678501 Version: 1 HPSBMA02622 SSRT100342 rev.1 - HP Business Availability Center BAC and Business Service Management BSM, Remote Cross Site Scripting XSS NOTICE: The information in this Securit...

CVE-2010-0274

Technical details for CVE-2010-0274 are not publicly available in the provided documents. Monitor for updates.

CVE-2010-0274

Unspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes aka Domino Web Access or DWA before 229.241 for Domino 8.0.2 FP3 has unknown impact and attack vectors, aka SPR LSHR7TBLY5...

CVE-2009-0274

CVE-2009-0274 affects Novell GroupWise WebAccess components across GroupWise 6.5/7.x/8.0. The issue is described as a server-side flaw in how POST requests are converted to GET requests, allowing remote attackers to obtain sensitive information via a crafted URL. Connected sources (e.g., Seebug S...

CVE-2008-0274

Cross-site scripting XSS vulnerability in Drupal 4.7.x and 5.x, when certain .htaccess protections are disabled, allows remote attackers to inject arbitrary web script or HTML via crafted links involving theme .tpl.php files...

CVE-2008-0274

Cross-site scripting XSS vulnerability in Drupal 4.7.x and 5.x, when certain .htaccess protections are disabled, allows remote attackers to inject arbitrary web script or HTML via crafted links involving theme .tpl.php files...

CVE-2008-0274

CVE-2008-0274 is a documented XSS vulnerability in Drupal 4.7.x and 5.x where, if certain .htaccess protections are disabled, remote attackers can inject arbitrary web script or HTML via crafted links involving theme .tpl.php files. The connected OpenVAS and VuXML entries corroborate the Drupal-b...