CVE-2012-0995

CVE-2012-0995 affects Zenphoto 1.4.2 with multiple XSS vulnerabilities. The issue arises in ZENphoto where user-supplied input can be reflected in the browser via: (a) msg parameter to zp-core/admin.php, (b) PATH_INTO/PATH_INFO handling for unspecified URLs, (c) album parameter to zp-core/admin-e...

CVE-2011-0995

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise SLE 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-0995

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise SLE 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-0995

The CVE-2011-0995 issue affects the sqlite3-ruby gem in the rubygem-sqlite3 package for SUSE Linux Enterprise (SLE) 11 SP1. Vulnerable: sqlite3-ruby before 1.2.4-0.5.1; cause: weak permissions on unspecified files. Impact: local users can gain privileges via unknown vectors. Remediation: upgrade ...

Internet Download Manager FTP Buffer Overflow Vulnerability

This host is installed with Internet Download Manager and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbinternetdownloadmanagerbofvuln.nasl 5374 2017-02-20 16:36:11Z cfi $ Internet Download Manager FTP Buffer Overflow Vulnerability Authors: Madhuri D Copyright:...

CVE-2010-0995

The CVE-2010-0995 entry concerns Internet Download Manager (IDM) prior to 5.19. The vulnerability is a stack-based buffer overflow triggered while IDM processes certain FTP URIs, by sending crafted test sequences from client to server, allowing remote code execution. Public sources in the connect...

Tonec Internet Download Manager 5.18 超长FTP URI栈溢出漏洞

BUGTRAQ ID: 39822 CVE ID: CVE-2010-0995 Internet Download Manager是一款下载加速工具。 Internet Download Manager在向FTP服务器发送某些测试序列时存在栈溢出漏洞，用户受骗从特制的FTP URI下载了特制文件就可以触发这个溢出，导致执行任意代码。 Tonec Internet Download Manager 5.18 厂商补丁： Tonec ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.internetdownloadmanager.com/...

Secunia Research: Internet Download Manager FTP Buffer Overflow Vulnerability

====================================================================== Secunia Research 30/04/2010 - Internet Download Manager FTP Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2009-0995

Technical details about CVE-2009-0995 are not publicly available in the provided documents. No affected product/version or exploit information is specified here; monitor for updates from official advisories to obtain concrete details and remediation guidance.

Gentoo Security Advisory GLSA 200703-08 (seamonkey)

The remote host is missing updates announced in advisory GLSA 200703-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200703-04 (mozilla-firefox)

The remote host is missing updates announced in advisory GLSA 200703-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1336-1 (mozilla-firefox)

The remote host is missing an update to mozilla-firefox announced via advisory DSA 1336-1. OpenVAS Vulnerability Test $Id: deb13361.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1336-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Ubuntu 5.10 / 6.06 LTS / 6.10 : firefox vulnerabilities (USN-428-1)

Several flaws have been found that could be used to perform Cross-site scripting attacks. A malicious website could exploit these to modify the contents or steal confidential data such as passwords from other opened web pages. CVE-2006-6077, CVE-2007-0780, CVE-2007-0800, CVE-2007-0981,...

openSUSE 10 Security Update : seamonkey (seamonkey-2691)

This security update brings Mozilla SeaMonkey to version 1.1.1. http://www.mozilla.org/projects/security/known-vulnerabilities.html for more details. It includes fixes to the following security problems : - MFSA 2007-01: As part of the Firefox 2.0.0.2 and 1.5.0.10 update releases several bugs wer...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-2699)

This update brings Mozilla Firefox to security update version 1.5.0.10. - MFSA 2007-01: As part of the Firefox 2.0.0.2 and 1.5.0.10 update releases several bugs were fixed to improve the stability of the browser. Some of these were crashes that showed evidence of memory corruption and we presume...

[SECURITY] [DSA 1336-1] New mozilla-firefox packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1336-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 22nd, 2007 http://www.debian.org/security/faq -...

Slackware 10.2 / 11.0 : mozilla-firefox (SSA:2007-066-03)

New mozilla-firefox packages are available for Slackware 10.2, and 11.0 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2007-066-03. The text itself is copyright C...

CVE-2007-0995

Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute names, which allows remote attackers to bypass content filters that use regular expressions...

CVE-2007-0995

Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignore trailing invalid HTML characters in attribute names, which can allow remote attackers to bypass content filters that rely on regular expressions. Affected products should be upgraded to fixed versions (Firef...

CVE-2006-0995

EMC Dantz Retrospect Backup Client is affected by CVE-2006-0995. The vulnerability allows an unauthenticated remote attacker to cause a denial of service by sending a malformed TCP packet to port 497, which triggers an assertion error and terminates the Retrospect client, resulting in loss of bac...