87 matches found
Gentoo Security Advisory GLSA 200412-03 (imlib)
The remote host is missing updates announced in advisory GLSA 200412-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200412-03 (imlib)
The remote host is missing updates announced in advisory GLSA 200412-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD Ports: imlib
The remote host is missing an update to the system as announced in the referenced advisory. VID 2001103a-6bbd-11d9-851d-000a95bc6fae OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: imlib
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Debian Security Advisory DSA 618-1 (imlib)
The remote host is missing an update to imlib announced via advisory DSA 618-1. OpenVAS Vulnerability Test $Id: deb6181.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 618-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-628-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-1026
CVE-2007-1026 is a SQL injection in XLAtunes prior to or including 0.1, exploitable via the album parameter in view mode. The underlying issue is improper handling of user-supplied input in view.php, allowing remote attackers to craft arbitrary SQL commands (injections) with network access. The p...
CVE-2006-1026
CVE-2006-1026 affects JFacets before 0.2. The issue allows remote attackers to escalate privileges to any account by issuing a GET request with a modified account profileID. The description directly states privilege escalation via crafted request; no exploitation specifics are provided beyond tha...
FreeBSD : imlib -- xpm heap buffer overflows and integer overflows (2001103a-6bbd-11d9-851d-000a95bc6fae)
Pavel Kankovsky reports : Imlib affected by a variant of CAN-2004-0782 too. I've discovered more vulnerabilities in Imlib 1.9.13. In particular, it appears to be affected by a variant of Chris Evans' libXpm flaw 1 CAN-2004-0782, see http://scary.beasts.org/security/CESA-2004-003.txt. Look at the...
CVE-2005-1026
The CVE-2005-1026 entry concerns SQL injection vulnerabilities in SnailSource phpBB 2.0.x mods. The flaws allow remote attackers to execute arbitrary SQL commands via (1) the file_id parameter to dlman.php in DLMan Pro and (2) the id parameter to links.php in Linkz Pro (aka LinksLinks Pro). This ...
CVE-2004-1026
Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service application crash and execute arbitrary code via certain image files...
CVE-2004-1026
Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service application crash and execute arbitrary code via certain image files...
CVE-2004-1026
CVE-2004-1026 involves multiple integer overflows in the image handler of the imlib library (versions up to 1.9.14 and earlier) that is used by gkrellm and several window managers. The issue, documented across OpenVAS and Gentoo GLSA entries, is rooted in the image processing code and can be trig...
CVE-2004-1026
Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service application crash and execute arbitrary code via certain image files...
CVE-2003-1026
Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back back function is called, as demonstrated by BackToFramedJpu, aka th...
CVE-2003-1026
Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back back function is called, as demonstrated by BackToFramedJpu, aka th...
CVE-2002-1026
Macromedia Sitespring 1.2.0 277.1 using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service crash via a long malformed request to TCP port 2500, possibly triggering a buffer overflow...
CVE-2002-1026
CVE-2002-1026 affects Macromedia Sitespring 1.2.0 (277.1) using the Sybase runtime engine 7.0.2.1480. The vulnerability allows remote attackers to cause a denial of service (crash) via a long malformed request to TCP port 2500, possibly triggering a buffer overflow. Impact is listed as partial av...
CVE-2002-1026
Macromedia Sitespring 1.2.0 277.1 using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service crash via a long malformed request to TCP port 2500, possibly triggering a buffer overflow...
CVE-2001-1026
Trend Micro InterScan AppletTrap 2.0 does not properly filter URLs when they are modified in certain ways such as 1 using a double slash // instead of a single slash, 2 URL-encoded characters, 3 requesting the IP address instead of the domain name, or 4 using a leading 0 in an octet of an IP...