DEBIAN-CVE-2013-0854

The mjpegdecodescanprogressiveac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data...

CVE-2013-0854

The mjpegdecodescanprogressiveac function in libavcodec/mjpegdec.c in FFmpeg before 1.1 allows remote attackers to have an unspecified impact via crafted MJPEG data...

CVE-2013-0854

CVE-2013-0854 concerns FFmpeg’s libavcodec/mjpegdec.c, where the function mjpeg_decode_scan_progressive_ac in FFmpeg prior to 1.1 mishandles crafted MJPEG data. The result is a remote, unauthenticated impact (unspecified in the sources) that could affect affected decoding paths. This vulnerabilit...

[SECURITY] [DSA 2793-1] libav security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2793-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 09, 2013 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-2793-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-0854

The vulnerability CVE-2012-0854 affects FFmpeg’s libavcodec/dpcm.c (dpcm_decode_frame) in versions before 0.9.1. The issue arises from using an improper pointer after an audio API change, enabling remote attackers to trigger a denial of service (application crash) through a heap-based buffer over...

Fedora Update for util-linux-ng FEDORA-2011-0854

Check for the Version of util-linux-ng OpenVAS Vulnerability Test Fedora Update for util-linux-ng FEDORA-2011-0854 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CVE-2010-0854

CVE-2010-0854 affects Oracle Database (versions including 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7) in the Audit component. The issue is described as an unspecified vulnerability that could let remote authenticated users influence integrity related to auditing on tables, per the NVD entry...

Ubuntu USN-732-1 (dash)

The remote host is missing an update to dash announced via advisory USN-732-1. OpenVAS Vulnerability Test $Id: ubuntu7321.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7321.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-732-1 dash Authors: Thomas Reinke...

[USN-732-1] dash vulnerability

=========================================================== Ubuntu Security Notice USN-732-1 March 10, 2009 dash vulnerability CVE-2009-0854 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS Ubuntu 8.10 This advisor...

CVE-2009-0854

CVE-2009-0854 affects dash 0.5.4 when used as a login shell, allowing local users to execute arbitrary code via a Trojan horse .profile in the current working directory. The Ubuntu advisory USN-732-1 and security data confirm the vulnerability and list fixed package versions: dash_0.5.4-8ubuntu1....

CVE-2008-0854

CVE-2008-0854 is a SQL injection vulnerability in the Joomla!/Mambo com_salesrep component. The flaw allows remote attackers to inject arbitrary SQL via the rid parameter in the showrep action of index.php. According to NVD data, it has a CVSS v2 base score of 7.5 (HIGH); attack vector: NETWORK; ...

Debian Security Advisory DSA 705-1 (wu-ftpd)

The remote host is missing an update to wu-ftpd announced via advisory DSA 705-1. OpenVAS Vulnerability Test $Id: deb7051.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 705-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-0854

CVE-2007-0854: Remote file inclusion vulnerability in scripts2/objcache of cPanel WebHost Manager (WHM). An attacker can use a URL in the obj parameter to cause arbitrary code execution or overwrite files under /var/cpanel/objcache, potentially yielding unexpected web content. Some sources note t...

Information disclosure

Multiple unspecified vulnerabilities in Intensive Point iUser Ecommerce before 2.2 have unspecified vectors and impact, as addressed by "Urgent secure fixes". NOTE: this might be a duplicate of CVE-2006-0854, but the vendor announcement for this issue from January 8, 2005 is too vague to be sure,...

CVE-2006-0854

CVE-2006-0854 describes a PHP remote file inclusion in Intensive Point iUser Ecommerce. The vulnerability arises because common.php uses the include_path without initialization, allowing an attacker to include arbitrary files via a URL. Per NVD, the CVSS v2 base score is 7.5 (HIGH). The connected...

[SECURITY] [DSA 705-1] New wu-ftpd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 705-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 705-1] New wu-ftpd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 705-1 [email protected] http://www.debian.org/security/ Martin Schulze April 4th, 2005 http://www.debian.org/security/faq -...

DSA-705-1 wu-ftpd - missing input sanitising

Bulletin has no description...

CVE-2005-0854

The CVE-2005-0854 entry concerns betaparticle blog (bp blog) prior to version 4. It reports an authentication bypass that enables remote attackers to perform file operations via direct requests to upload.asp or myFiles.asp (upload and delete respectively). The vulnerability allows unauthorized ac...