CentOS 3 : freetype (CESA-2010:0736)

Updated freetype packages that fix three security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

openSUSE Security Update : viewvc (viewvc-2147)

Query forms didn't escape user provided input, therefore allowing cross-site-scripting XSS attacks. CVE-2010-0736 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...

openSUSE Security Update : viewvc (viewvc-2147)

Query forms didn't escape user provided input, therefore allowing cross-site-scripting XSS attacks. CVE-2010-0736 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...

CVE-2010-0736

Cross-site scripting XSS vulnerability in the viewqueryform function in lib/viewvc.py in ViewVC before 1.0.10, and 1.1.x before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via "user-provided input."...

CVE-2010-0736

Removed by vendor...

CVE-2010-0736

Cross-site scripting XSS vulnerability in the viewqueryform function in lib/viewvc.py in ViewVC before 1.0.10, and 1.1.x before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via "user-provided input."...

CVE-2010-0736

The CVE-2010-0736 issue affects ViewVC where the view_queryform function in lib/viewvc.py is vulnerable to XSS via user-provided input. Affected ranges are ViewVC prior to 1.0.10 and 1.1.x prior to 1.1.4. The vulnerability allows remote attackers to inject arbitrary script/HTML and is confirmed a...

CVE-2009-0736

Cross-site scripting XSS vulnerability in Pebble before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-0736

Pebble prior to 2.3.2 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The condition is a flaw in Pebble’s handling of user-supplied input that leads to script execution in the victim’s browser. ...

CVE-2008-0736

CVE-2008-0736 affects CandyPress (CP) 4.1.1.26 and possibly other 4.x and 3.x versions. The vulnerability is in admin/SA_shipFedExMeter.asp, where a crafted FedExAccount parameter value enables a path traversal, allowing remote attackers to obtain the server path. Impact is partial confidentialit...

CVE-2007-0736

CVE-2007-0736 describes an integer overflow in the Libinfo RPC library on Apple Mac OS X 10.3.9–10.4.9. The underlying issue in the RPC portmap handling allows remote attackers to execute arbitrary code. Documents consistently cite this as a remote code execution via crafted requests to portmap, ...

CVE-2006-0736

CVE-2006-0736 is a stack-based buffer overflow in the pam_micasa PAM authentication module of CASA, affecting Novell Linux Desktop 9 and Open Enterprise Server 1. The vulnerability allows remote code execution and could grant root access, via remote vectors. The SUSE advisory SUSE-SA:2006:010 con...

Fedora Core 3 : kernel-2.6.11-1.14_FC3 (2005-313)

This update rebases the kernel to the latest upstream stable release, which fixes a number of security issues. Notably : - CVE-2005-0210 : dst leak - CVE-2005-0384 : ppp dos - CVE-2005-0531 : Sign handling issues. - CVE-2005-0400 : EXT2 information leak. - CVE-2005-0449 : Remote oops. -...

CVE-2005-0736

CVE-2005-0736 entry is rejected/not used and does not represent an active vulnerability.

CVE-2005-0728

CVE-2005-0728 entry is rejected/not used; duplicate of CVE-2005-0736.

CVE-2005-0736

Integer overflow in sysepollwait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events...

CVE-2005-0736

Integer overflow in sysepollwait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events...

BELL-CVE-2005-0736 CVE-2005-0736 does not affect BellSoft software

Bulletin has no description...

CVE-2004-0736

CVE-2004-0736 affects Php-Nuke’s search module. The issue lets remote attackers glean sensitive information by using the (1) "**" and (2) "+" search patterns, which reveal the application path in error messages. The available documents do not specify affected Php-Nuke versions or a concrete patch...

CVE-2003-0736

Multiple cross-site scripting XSS vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute arbitrary web script via 1 the day parameter in the calendar module, 2 the fatcatid parameter in the fatcat module, 3 the PAGEid parameter in the pagemaster module, 4 the PDAlimit...