Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : libxml2 vulnerabilities (USN-1334-1)

It was discovered that libxml2 contained an off by one error. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the user invoking the...

Ubuntu Update for libxml2 USN-1334-1

Ubuntu Update for Linux kernel vulnerabilities USN-1334-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13341.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for libxml2 USN-1334-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

CVE-2011-1334

CVE-2011-1334 is a cross-site scripting vulnerability affecting Cybozu Office 6, Cybozu Garoon 2.0.0–2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5. The flaw allows remote attackers to inject arbitrary script/HTML via vectors related to downloading gr...

CVE-2010-1334

Pulse CMS Basic 1.2.4 is affected by an Unrestricted file upload vulnerability that allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension and then accessing it via a direct request to the file in an unspecified di...

CVE-2009-1334

IBM Tivoli CDP for Files 3.1.4.0 has a cross-site scripting (XSS) vulnerability in the login/FilepathLogin.html page, exploitable via the reason parameter. This could allow remote attackers to inject arbitrary web script or HTML. The PT-2009-3866 entry confirms the affected version and suggests a...

CVE-2009-1334

creationtimestamp| type| source ---|---|--- 2009-04-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32908...

Fedora Update for mailman FEDORA-2008-1334

Check for the Version of mailman OpenVAS Vulnerability Test Fedora Update for mailman FEDORA-2008-1334 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2008-1334

CVE-2008-1334 affects the BT Home Hub router (and related Thomson/Alcatel SpeedTouch components) where an authentication bypass is possible by placing a character at the end of PATH_INFO. The vulnerability lets remote attackers bypass authentication and read/modify administrative settings or init...

CVE-2003-1334

CVE-2003-1334 affects Kai Blankenhorn’s Bitfolge (snif) index file before 1.2.7. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents confirm the issue but do not provide concret...

CVE-2006-1334

CVE-2006-1334 : Maian Weblog 2.0 has SQL injection in print.php and mail.php; vulnerable parameters are (1) entry and (2) email. Remote attackers could potentially execute arbitrary SQL. No patch/mitigation details are provided in the supplied documents; exploitation specifics are not described i...

CVE-2005-1334

CVE-2005-1334 is rejected/not used; it is a duplicate of CVE-2005-1579 and not an active vulnerability entry.

CVE-2005-1334

...

CVE-2004-1334

The CVE concerns the Linux kernel before 2.6.10, where the function ip_options_get is vulnerable to an integer overflow when cmsg_len is -1. This can be exploited by local users to trigger a kernel crash (DoS) via a crafted message length, leading to a buffer overflow. Affected component: kernel ...

CVE-2004-1334

Integer overflow in the ipoptionsget function in the Linux kernel before 2.6.10 allows local users to cause a denial of service kernel crash via a cmsglen that contains a -1, which leads to a buffer overflow...

CVE-2001-1334

PHPSlash 0.6.1 contains a vulnerability in Block_render_url.class that allows remote attackers with PHPSlash administrator privileges to read arbitrary files. By creating a block and specifying the target file as the source URL, an authenticated admin can exfiltrate local files. The CVE entry pro...

CVE-2002-1334

Cross-site scripting XSS vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via 1 the direct parameter in imageFolio.cgi, or 2 nph-build.cgi...

CVE-2002-1334

Technical details about CVE-2002-1334 are not publicly available in the provided documents. No vendor, product version, vulnerable component, or remediation is specified here. Monitor for updates in the connected sources.

CVE-2002-1334

Cross-site scripting XSS vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via 1 the direct parameter in imageFolio.cgi, or 2 nph-build.cgi...

CVE-1999-1334

Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via 1 long From: headers, 2 long Reply-To: headers, or 3 via a long -f filterfile command line argument...

CVE-1999-1334

CVE-1999-1334 : Multiple buffer overflows in the filter command of Elm 2.4 allow an attacker to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, or (3) a long -f (filterfile) command line argument. The connected sources confirm Elm 2.4 as the affected component a...