APPLE-SA-2013-09-20-1 Apple TV 6.0

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-09-20-1 Apple TV 6.0 Apple TV 6.0 is now available and addresses the following: Apple TV Available for: Apple TV 2nd generation and later Impact: Viewing a maliciously crafted PDF file may lead to an unexpected application termination or...

CVE-2013-1026

CVE-2013-1026 is a buffer overflow in ImageIO on OS X before 10.8.5, triggered by JPEG2000 data in PDFs. This could allow remote code execution or cause a denial of service (crash). Apple released OS X 10.8.5 (Mountain Lion) security update to fix the issue.

Apple MAC OS X ImageIO 缓冲区溢出漏洞(CVE-2013-1026)

BUGTRAQ ID: 62369 CVECAN ID: CVE-2013-1026 Apple Mac OS X是苹果电脑操作系统软件。 Mac OS X 10.8 - 10.8.4在处理PDF文件内JPEG2000编码的数据时存在缓冲区溢出漏洞，远程攻击者通过特制的PDF文件，利用此漏洞可造成应用终止或执行任意代码。 0 Apple Mac OS X 10.8 - 10.8.4 Apple Mac OS X 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（HT5880）以及相应补丁: HT5880：About the security content of ...

RHEL 5 / 6 : jbossas and jboss-naming (RHSA-2012:1026)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1026 advisory. - JNDI: unauthenticated remote write access is permitted by default CVE-2011-4605 - JBoss: authentication bypass when running under JACC...

CVE-2012-1026

creationtimestamp| type| source ---|---|--- 2012-02-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18467...

CVE-2011-1026

Apache Archiva is affected by CSRF vulnerabilities (CVE-2011-1026) in Archiva 1.0–1.2.2 and 1.3.x before 1.3.5. The issues allow remote attackers to hijack administrator sessions, potentially compromising the entire application. Affected component: Archiva web admin/session handling; vulnerabilit...

Apache Archiva 1.3.4 Cross Site Request Forgery

Hi, This is regarding multiple CSRF Cross Site Request Forgery Vulnerabilities in Apache Archiva 1.3.4 and previous versions. The following is the disclosure document Title: Multiple CSRF Vulnerabilities in Apache Archiva 1.3.4 --------------------------------------------------------------------...

Apache Archiva 1.3.4 Cross Site Request Forgery

CVE-2011-1026: Apache Archiva Multiple CSRF vulnerability Severity: High Vendor: The Apache Software Foundation Versions Affected: Archiva 1.3.0 - 1.3.4 The unsupported versions Archiva 1.0 - 1.2.2 are also affected. Description: An attacker can build a simple html page containing a hidden Image...

Ubuntu Update for paste vulnerability USN-1026-1

Ubuntu Update for Linux kernel vulnerabilities USN-1026-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10261.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for paste vulnerability USN-1026-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu 10.04 LTS : paste vulnerability (USN-1026-1)

It was discovered that Python Paste did not properly sanitize certain strings, resulting in cross-site scripting XSS vulnerabilities. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this ...

TPTI-10-04: Oracle Secure Backup Scheduler Service Remote Code Execution Vulnerability

TPTI-10-04: Oracle Secure Backup Scheduler Service Remote Code Execution Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-10-04 -- CVE ID: CVE-2010-0898 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Oracle -- Affected Products: Oracle Secure Backup -- TippingPointTM IPS...

CVE-2009-1026

Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-1026

CVE-2009-1026 affects Kim Websites 1.0, with SQL injection vulnerabilities in login.php. The issue allows remote attackers to manipulate the database by supplying crafted values for the username or password fields, enabling arbitrary SQL execution. This aligns with the NVD assessment of a high-se...

CVE-2009-1026

creationtimestamp| type| source ---|---|--- 2009-03-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8209 2023-12-30 23:40:28+00:00| seen| https://t.me/arpsyndicate/2258...

Gentoo Security Advisory GLSA 200412-03 (imlib)

The remote host is missing updates announced in advisory GLSA 200412-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200412-03 (imlib)

The remote host is missing updates announced in advisory GLSA 200412-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: imlib

The remote host is missing an update to the system as announced in the referenced advisory. VID 2001103a-6bbd-11d9-851d-000a95bc6fae OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: imlib

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian Security Advisory DSA 618-1 (imlib)

The remote host is missing an update to imlib announced via advisory DSA 618-1. OpenVAS Vulnerability Test $Id: deb6181.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 618-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-628-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...