Fedora 16 : mantis-1.2.12-1.fc16 (2012-18299)

New upstream release, fixes several security bugs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Gentoo Security Advisory GLSA 201211-01 (MantisBT)

The remote host is missing updates announced in advisory GLSA 201211-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Debian Security Advisory DSA 2500-1 (mantis)

The remote host is missing an update to mantis announced via advisory DSA 2500-1. OpenVAS Vulnerability Test $Id: deb25001.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2500-1 mantis Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2012-1119

CVE-2012-1119 affects MantisBT up to version 1.2.9, where there is insufficient auditing when users copy or clone a bug report. This allows remote attackers to copy bug reports without detection. Impact per metric: confidentiality impact none, integrity impact partial, availability impact partial...

Debian DSA-2500-1 : mantis - several vulnerabilities

Several vulnerabilities were discovered in Mantis, an issue tracking system. - CVE-2012-1118 Mantis installation in which the privatebugviewthreshold configuration option has been set to an array value do not properly enforce bug viewing restrictions. - CVE-2012-1119 Copy/clone bug report actions...

Ubuntu Update for linux-ti-omap4 USN-1119-1

Ubuntu Update for Linux kernel vulnerabilities USN-1119-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11191.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-ti-omap4 USN-1119-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.n...

Android 2.0 ,2.1, 2.1.1 WebKit Use-After-Free Exploit

Exploit for Android platform in category remote exploits function heap var id = document.getElementById"target"; var attribute = id.getAttributeNode'id'; nodes = attribute.childNodes; document.body.removeChildid; attribute.removeChildnodes0; setTimeoutfunction for var i = 0; i 70000; i++ var s =...

Android 2.0 / 2.1 / 2.1.1 WebKit Use-After-Free

function heap var id = document.getElementById"target"; var attribute = id.getAttributeNode'id'; nodes = attribute.childNodes; document.body.removeChildid; attribute.removeChildnodes0; setTimeoutfunction for var i = 0; i 70000; i++ var s = new Stringunescape"\u0058\u0058"; ; var scode =...

CVE-2010-1119

creationtimestamp| type| source ---|---|--- 2011-03-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16974...

Google Android 2.02.12.1.1 - WebKit Use-After-Free

Google Android 2.02.12.1.1 - WebKit Use-After-Free function heap var id = document.getElementById"target"; var attribute = id.getAttributeNode'id'; nodes = attribute.childNodes; document.body.removeChildid; attribute.removeChildnodes0; setTimeoutfunction for var i = 0; i 70000; i++ var s = new...

Google Android 2.0/2.1/2.1.1 - WebKit Use-After-Free

function heap var id = document.getElementById"target"; var attribute = id.getAttributeNode'id'; nodes = attribute.childNodes; document.body.removeChildid; attribute.removeChildnodes0; setTimeoutfunction for var i = 0; i 70000; i++ var s = new Stringunescape"\u0058\u0058"; ; var scode =...

CVE-2011-1119

CVE-2011-1119 affects Google Chrome up to version 9.0.597.107. The vulnerability arises in device orientation handling, allowing remote attackers to cause a denial of service or possibly cause other unspecified impact via unknown vectors that lead to a stale pointer. Affected product is Google Ch...

Apple iTunes < 9.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 9.2. It is, therefore, affected by multiple vulnerabilities : - A heap-based buffer overflow vulnerability exists in the handling of images with an embedded ColorSync profile. By using a specially crafted image, a remote attacker...

Winamp IN_CDDA.dll Buffer Overflow (CVE-2004-1119)

Winamp is a very popular multimedia player, produced by NullSoft, which is capable of playing many formats of audio and video files. One of the audio formats supported by Winamp is Compact-Disc-Digital-Audio CDDA, which is the format used on standard audio Compact Discs CD. When an audio CD is...

CVE-2009-1119

EMC RepliStor is affected on versions earlier than 6.2 SP5 and 6.3 SP2. The vulnerability is described as multiple heap overflows triggered by specially crafted messages to the remote services ctrlservice.exe or rep_srv.exe, with the root cause attributed to an integer overflow. The impact cited ...

FGA-2009-003:EMC RepliStor Buffer Overflow Vulnerability

FGA-2009-003:EMC RepliStor Buffer Overflow Vulnerability  2009.April.08 Summary:  ======== Fortinet's FortiGuard Global Security Research Team has discovered a buffer overflow vulnerability in EMC RepliStor. Impact: ======= Remote code execution. Risk:  ===== Critical Affected Software: ...

CVE-2008-1119

CVE-2008-1119 affects Centreon 1.4.2.3 and earlier, by a directory traversal in include/doc/get_image.php via the img parameter. An unauthenticated, remote attacker can read arbitrary files on the server, subject to web server privileges. This exact vulnerability is corroborated by connected Ness...

Debian Security Advisory DSA 159-2 (python)

The remote host is missing an update to python announced via advisory DSA 159-2. OpenVAS Vulnerability Test $Id: deb1592.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 159-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 159-1 (python)

The remote host is missing an update to python announced via advisory DSA 159-1. OpenVAS Vulnerability Test $Id: deb1591.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 159-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-1119

CVE-2007-1119 affects Novell ZENworks 7 Desktop Management Support Pack 1 prior to Hot patch 3 (ZDM7SP1HP3). The issue allows remote attackers to upload images to certain folders that were not configured in the “Only allow uploads to the following directories” setting, via unspecified vectors. Pu...