CVE-2012-0994

SQL injection vulnerability in the Manage Albums feature in zp-core/admin-albumsort.php in ZENphoto 1.4.2 allows remote authenticated users to execute arbitrary SQL commands via the sortableList parameter...

Novell File Reporter Agent XML Parsing Stack Buffer Overflow (CVE-2011-0994)

A stack buffer overflow vulnerability has been reported in the Agent component of Novell File Reporter. The vulnerability is due to improper boundary checks of user-supplied NAME tags in the input XML. The vulnerability is triggered upon parsing of a malicious XML tag with overly long content...

Novell File Reporter Agent XML Parser Buffer Overflow

Added: 05/16/2011 CVE: CVE-2011-0994 BID: 47144 OSVDB: 71980 Background Novell File Reporter is software that allows network administrators to identify files stored on the network and generates reports regarding the size of individual files, file type, when files were last accessed, and where...

Novell File Reporter Agent XML Parser Buffer Overflow

Added: 05/16/2011 CVE: CVE-2011-0994 BID: 47144 OSVDB: 71980 Background Novell File Reporter is software that allows network administrators to identify files stored on the network and generates reports regarding the size of individual files, file type, when files were last accessed, and where...

Novell File Reporter Agent XML Parser Buffer Overflow

Added: 05/16/2011 CVE: CVE-2011-0994 BID: 47144 OSVDB: 71980 Background Novell File Reporter is software that allows network administrators to identify files stored on the network and generates reports regarding the size of individual files, file type, when files were last accessed, and where...

Novell File Reporter 'NFRAgent.exe' XML Parsing Buffer Overflow Vulnerability

This host is installed with Novell File Reporter and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbnovellfilereporterbofvulnwin.nasl 8201 2017-12-20 14:28:50Z cfischer $ Novell File Reporter 'NFRAgent.exe' XML Parsing Buffer Overflow Vulnerability Authors: Antu Sana...

DSquare Exploit Pack: D2SEC_NFRAGENT

Name| d2secnfragent ---|--- CVE| CVE-2011-0994 Exploit Pack| D2ExploitPack Description| Novell File Reporter Agent Stack Overflow Vulnerability Notes|...

CVE-2011-0994

The CVE-2011-0994 issue affects the Novell File Reporter Agent (NFRAgent.exe). It is a stack/buffer overflow caused by improper boundary handling while parsing XML data, enabling a remote attacker to potentially execute arbitrary code on vulnerable Windows hosts. Public sources consistently refer...

CVE-2010-0994

CVE-2010-0994 concerns the Visualization Library vulnerability in src/vl/vlDAT.cpp (vl::loadDAT, vl::isDAT). It describes boundary/buffer overflow errors in DAT file parsing that allow user‑assisted remote code execution in Visualization Library 2009.08.812. Exploitation requires a crafted DAT fi...

CVE-2009-0994

Oracle BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 has an unspecified vulnerability leading to confidentiality impact for remote authenticated users (vectors not disclosed). Affected products are BI Publisher within Oracle Application Server; ro...

FreeBSD Ports: zgv

The remote host is missing an update to the system as announced in the referenced advisory. VID 249a8c42-6973-11d9-ae49-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: zgv

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian Security Advisory DSA 614-1 (xzgv)

The remote host is missing an update to xzgv announced via advisory DSA 614-1. OpenVAS Vulnerability Test $Id: deb6141.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 614-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1336-1 (mozilla-firefox)

The remote host is missing an update to mozilla-firefox announced via advisory DSA 1336-1. OpenVAS Vulnerability Test $Id: deb13361.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1336-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

[SECURITY] [DSA 1336-1] New mozilla-firefox packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1336-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 22nd, 2007 http://www.debian.org/security/faq -...

Slackware 10.2 / 11.0 : mozilla-firefox (SSA:2007-066-03)

New mozilla-firefox packages are available for Slackware 10.2, and 11.0 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2007-066-03. The text itself is copyright C...

CVE-2007-0994

CVE-2007-0994 affects Mozilla Firefox 2.x before 2.0.0.2 and Firefox 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8. A regression in handling HTML mail with javascript: URIs in , (link), or tags could bypass access checks and allow remote JavaScript execution with chro...

CVE-2006-0994

Sophos Anti-Virus products (Windows/Mac/Linux/Unix variants and related Sophos components such as PureMessage, MailMonitor) are affected by CVE-2006-0994. The root cause is a heap corruption flaw in the CAB file unpacking logic, triggered when cabinet file inspection is enabled and processing a C...

CVE-2004-0994

Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the readprffile function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify...

CVE-2004-0994

Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the readprffile function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify...