ERS Viewer 2011 ERS File Handling Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "ERS Viewer 2011 E...

CVE-2013-0726

The CVE-2013-0726 issue affects ERDAS ER Viewer (pre-13.00.0001). A stack-based buffer overflow in the ERM_convert_to_correct_webpath function of ermapper_u.dll allows remote code execution when processing a crafted ERS file pathname. Affected software is ER Viewer before 13.00.0001; the vulnerab...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - A flaw in the dccprcvstateprocess function could allow a remote attacker to cause a denial of service, even when the socket was already closed. CVE-2011-1093,...

CVE-2012-0726

CVE-2012-0726 affects IBM Tivoli Directory Server (TDS) 6.3 and earlier. The default TLS configuration enables NULL-MD5 and NULL-SHA ciphers, which can lead to unencrypted communications during the TLS handshake. IBM’s bulletin provides vendor fixes: 6.1.0.47-ISS-ITDS-IF0047 (for 6.1), 6.2.0.22-I...

Debian: Security Advisory (DSA-2264-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BELL-CVE-2011-0726 CVE-2011-0726 does not affect BellSoft software

Bulletin has no description...

CVE-2011-0726

The CVE-2011-0726 entry is supported by connected advisories describing a Linux kernel vulnerability in do_task_stat (fs/proc/array.c) present in kernels before 2.6.39-rc1. The flaw allows local users to defeat ASLR by reading start_code/end_code from /proc/[pid]/stat for PIE processes, implying ...

Ubuntu Update for linux USN-1170-1

Ubuntu Update for Linux kernel vulnerabilities USN-1170-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11701.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux USN-1170-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

[SECURITY] [DSA 2264-1] linux-2.6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2264-1 [email protected] http://www.debian.org/security/ dann frazier June 18, 2011 http://www.debian.org/security/faq -...

Debian DSA-2240-1 : linux-2.6 - privilege escalation/denial of service/information leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-3875 Vasiliy Kulikov discovered an issue in the Linux implementation of th...

[SECURITY] [DSA 2240-1] linux-2.6 security update

---------------------------------------------------------------------- Debian Security Advisory DSA-2240-1 [email protected] http://www.debian.org/security/ dann frazier May 24, 2011 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-2240-1 linux-2.6 - several issues

Bulletin has no description...

Oracle Linux 6 Unbreakable Enterprise kernel security fix update

2.6.32-100.28.15.el6 - sctp: fix to calc the INIT/INIT-ACK chunk length correctly is set CVE-2011-1573 - dccp: fix oops on Reset after close CVE-2011-1093 - bridge: netfilter: fix information leak CVE-2011-1080 - Bluetooth: bnep: fix buffer overflow CVE-2011-1079 - net: don't allow CAPNETADMIN to...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Updated kernel packages that fix several security issues, various bugs, and add an enhancement are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, whic...

[SECURITY] [DSA 2009-1] New tdiary packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-2009-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 09, 2010 http://www.debian.org/security/faq -...

CVE-2010-0726

Cross-site scripting XSS vulnerability in the tb-send.rb TrackBack transmission plugin in tDiary 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly related to the 1 plugintburl and 2 plugintbexcerpt parameters...

CVE-2010-0726

tDiary’s tb-send.rb TrackBack plugin (versions ≤ 2.2.2) is vulnerable to Cross-Site Scripting (XSS). Exploitation vectors are not fully disclosed in the provided docs, but the CVE-2010-0726 entry notes possible vectors related to plugin_tb_url and plugin_tb_excerpt. Debian reports the issue as an...

CVE-2010-0726

Cross-site scripting XSS vulnerability in the tb-send.rb TrackBack transmission plugin in tDiary 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly related to the 1 plugintburl and 2 plugintbexcerpt parameters...

RealNetworks RealPlayer SMIL Cross-Site Scripting (CVE-2003-0726)

SMIL files file extension ".smil" or ".smi" contain XML tags that identify the various multimedia objects to be played. RealPlayer fails to validate the SMIL file's content, and permits objects of type of "javascript", which are then executed in the client. An XSS Cross Site Scripting Vulnerabili...

RHEL 3 / 4 / 5 : acroread (RHSA-2008:0144)

Updated acroread packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Adobe Reader allows users to view and print documents in portable documen...