CVE-2012-0524

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows local users to affect confidentiality and integrity via unknown vectors related to File Processing...

CVE-2012-0524

Oracle PeopleSoft PeopleTools within PeopleSoft Products 8.50/8.51/8.52 has an unspecified local vulnerability related to File Processing that affects confidentiality and integrity. Root cause, attack vectors, and exploit details are not provided in the supplied documents. No remediation or patch...

Fedora Update for hplip FEDORA-2011-0524

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-0524

CVE-2010-0524 affects the FreeRADIUS server in Apple Mac OS X Server prior to 10.6.3. The default configuration permits EAP-TLS authenticated connections based on an arbitrary client certificate, enabling a remote attacker to obtain network connectivity via a crafted RADIUS Access Request. Remedi...

CVE-2009-0524

Cross-site scripting XSS vulnerability in Adobe RoboHelp 6 and 7, and RoboHelp Server 6 and 7, allows remote attackers to inject arbitrary web script or HTML via vectors involving files produced by RoboHelp...

CVE-2009-0524

Cross-site scripting XSS vulnerability in Adobe RoboHelp 6 and 7, and RoboHelp Server 6 and 7, allows remote attackers to inject arbitrary web script or HTML via vectors involving files produced by RoboHelp...

CVE-2009-0524

CVE-2009-0524 affects Adobe RoboHelp 6 and 7, and RoboHelp Server 6 and 7. The connected sources describe multiple input validation errors in template_stock/whutils.js, Report_Template.asp, redirect.asp, and SQL_Lib.asp that enable cross-site scripting via URLs crafted from RoboHelp-produced file...

Gentoo Security Advisory GLSA 200504-15 (PHP)

The remote host is missing updates announced in advisory GLSA 200504-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2007-0524

CVE-2007-0524 affects the LG Chocolate KG800 phone. The vulnerability allows remote attackers to cause denial of service by repeatedly OBEX-pushing a file over Bluetooth, leading to continual modal dialogs and UI unavailability as demonstrated with ussp-push. The primary sources (NVD/NVD-derived ...

CentOS 4 : PHP (CESA-2005:406)

Updated PHP packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was found in the way PHP...

CentOS 3 : PHP (CESA-2005:405)

Updated PHP packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was found in the way PHP...

CVE-2006-0524

Cross-site scripting XSS vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2006-0524

CVE-2006-0524 affects ashNews 0.83 (ashnews.php) by a cross-site scripting (XSS) flaw that allows an attacker to inject arbitrary script/HTML through the id parameter. The core issue is improper handling of the id input in ashNews, enabling crafted URLs to execute code in a victim’s browser. Sour...

Fedora Core 3 : php-4.3.11-2.4 (2005-315)

This update includes the latest stable release of PHP 4.3, including a number of security fixes to the exif extension CVE-2005-1042 and CVE-2005-1043 and the getimagesize function CVE-2005-0524, along with many bug fixes. Note that Tenable Network Security has extracted the preceding description...

RHEL 3 : PHP (RHSA-2005:405)

Updated PHP packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was found in the way PHP...

SUSE-SA:2005:023: php4, php5

The remote host is missing the patch for the advisory SUSE-SA:2005:023 php4, php5. This update fixes the following security issues in the PHP scripting language: - A bug in getimagesize EXIF handling which could lead to a denial of service attack. This is tracked by the Mitre CVE IDs CVE-2005-052...

CVE-2005-0524

The vulnerability CVE-2005-0524 affects PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3 via the getimagesize entry point. The php_handle_iff function in image.c can be triggered to loop infinitely by a -8 size value, allowing remote attackers to cause a denial of service. The provided documents name PHP secur...

CVE-2004-0524

Buffer overflow in the chpasswd command in the Changepasswd plugin before 4.0, as used in SquirrelMail, allows local users to gain root privileges via a long user name...

CVE-2004-0524

Buffer overflow in the chpasswd command in the Changepasswd plugin before 4.0, as used in SquirrelMail, allows local users to gain root privileges via a long user name...

CVE-2004-0524

The CVE-2004-0524 entry describes a buffer overflow in the chpasswd command of the Change_passwd plugin (before 4.0) used by SquirrelMail. The vulnerability allows local users to gain root privileges through a long user name. The NVD entry assigns a base score of 10.0 (HIGH) with local, low-compl...