CVE-2014-4342

MIT Kerberos 5 aka krb5 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service buffer over-read or NULL pointer dereference, and application crash by injecting invalid tokens into a GSSAPI application session...

UBUNTU-CVE-2014-4342

MIT Kerberos 5 aka krb5 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a denial of service buffer over-read or NULL pointer dereference, and application crash by injecting invalid tokens into a GSSAPI application session...

WikiReader 1.12 URL Field Local Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21718/info WikiReader is prone to a local buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input data to an insufficiently sized buffer. An attacker can exploit this issue to execute...

New CMS Local File Inclusion

No description provided by source. Exploit Title: New CMS Local File Inclusio Date: 24 March 2010 Author: Xash Software Link: http://vaniarupeni.altervista.org/index.php?lng=it&mod=download&pg=download&c=5&download=1219238459 Version: = 1.12 ================================================ \ / / ...

DIZzy 1.12 - Local Stack Overflow

No description provided by source. !/usr/bin/ruby Exploit Title: DIZzy 1.12 Local Stack Overflow Google Dork: n/a Date: 17/11/2010 Author: g30rg3x Version: 1.12 Tested on: Windows XP SP3 Eng/Spa CVE: n/a Notes: Bug was originally found on 22/02/2010 but since there is no response from developers ...

D-Link DIR-100 1.12 Security Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31050/info D-Link DIR-100 is affected by a vulnerability that allows attackers to bypass security restrictions and access sites that are blocked by an administrator. D-Link DIR-100 devices with firmware 1.12 are vulnerabl...

Collabtive 1.12 SQL Injection Vulnerability

Collabtive version 1.12 suffers from a remote SQL injection vulnerability. Vulnerability title: SQL Injection / SQL Error message in Collabtive application CVE-2014-3246 CVE: CVE-2014-3246 cordinated with Vendor: Collabtive Product: Collabtive Open Source Project Management Software Affected...

Collabtive 1.2 - SQL Injection

Collabtive 1.2 - SQL Injection Vulnerability title: SQL Injection / SQL Error message in Collabtive application CVE-2014-3246 CVE: CVE-2014-3246 cordinated with Vendor: Collabtive Product: Collabtive Open Source Project Management Software Affected version: 1.12 Fixed version: 2.0 Reported by:...

Amazon Linux AMI : php-ZendFramework (ALAS-2013-153)

The 1 ZendFeedRss and 2 ZendFeedAtom classes in ZendFeed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service CPU and memory consumption via an XML External...

Mutiny Command Injection Vulnerability

Mutiny is prone to a command-injection vulnerability. Attackers can exploit this issue to execute arbitrary commands with root privileges. Mutiny versions prior to 4.5-1.12 are vulnerable. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced source...

D-Link DIR-605L Captcha Handling Buffer Overflow

This module exploits an anonymous remote code execution vulnerability on D-Link DIR-605L routers. The vulnerability exists while handling user supplied captcha information, and is due to the insecure usage of sprintf on the getAuthCode function. This module has been tested successfully on D-Link...

DEBIAN-CVE-2012-0804

Heap-based buffer overflow in the proxyconnect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTTP response...

ALPINE-CVE-2012-0804

Heap-based buffer overflow in the proxyconnect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTTP response...

CVE-2012-0804

CVS (versions 1.11 and 1.12) contains a heap-based buffer overflow in the proxy_connect function (src/client.c). Exploitation via a crafted HTTP response from a remote proxy server could crash the CVS client or allow arbitrary code execution. Affected advisories reference CVE-2012-0804 across mul...

CVE-2012-0804

Heap-based buffer overflow in the proxyconnect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTTP response...

CVE-2012-0804

Heap-based buffer overflow in the proxyconnect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTTP response...

Gentoo Security Advisory GLSA 201110-10 (Wget)

The remote host is missing updates announced in advisory GLSA 201110-10. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201110-08 (feh)

The remote host is missing updates announced in advisory GLSA 201110-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

PuTTY Detection

The remote host has an installation of PuTTY, which is a suite of tools for remote console access and file transfer. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57364; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/12/30";...

Fedora 14 : whatsup-1.12-1.fc14 (2011-2801)

Mon Mar 7 2011 Ruben Kerkhof 1.12-1 - Upstream released new version - Link against system-provided expat 652981 - Fixes FTBFS 661001 - Drop patch for incorrect open which was merged upstream - Thu Sep 30 2010 Dan Horak 1.10-2 - no InfiniBand on s390x Note that Tenable Network Security has...