Fedora Core 10 FEDORA-2009-8020 (kdelibs3)

The remote host is missing an update to kdelibs3 announced via advisory FEDORA-2009-8020. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 10 FEDORA-2009-8049 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory FEDORA-2009-8049. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Critical: Red Hat Security Advisory: kdelibs security update

Updated kdelibs packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The kdelibs packages provide libraries for the K Desktop Environment KDE. A flaw...

CVE-2009-1687

The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption a...

Debian: Security Advisory (DSA-1687-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1687-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1687-1. OpenVAS Vulnerability Test $Id: deb16871.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1687-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Gentoo Security Advisory GLSA 200506-04 (Wordpress)

The remote host is missing updates announced in advisory GLSA 200506-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GNU m4格式串及文件名引用漏洞

BUGTRAQ ID: 28688 CVECAN ID: CVE-2008-1687,CVE-2008-1688 GNU M4是广泛应用的GNU宏处理器。 GNU M4的src/freeze.c文件中的producefrozenstate函数存在格式串处理漏洞，如果向m4 -F传送了特制的文件名参数的话，就可能导致执行任意指令。 GNU M4在实现maketemp和mkstemp宏时存在漏洞，如果输出字符串中包含有特殊字符的话，就可能导致处理不正确的文件。 GNU m4 1.4.10 GNU --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2008-1687

The 1 maketemp and 2 mkstemp builtin functions in GNU m4 before 1.4.11 do not quote their output when a file is created, which might allow context-dependent attackers to trigger a macro expansion, leading to unspecified use of an incorrect filename...

CVE-2008-1687

The CVE-2008-1687 issue affects GNU m4 up to version 1.4.10; the maketemp and mkstemp builtins do not quote their output when creating a file, which can let an attacker trigger a macro expansion and cause the program to use an incorrect filename. The root cause is unquoted output during file crea...

CVE-2008-1687

The 1 maketemp and 2 mkstemp builtin functions in GNU m4 before 1.4.11 do not quote their output when a file is created, which might allow context-dependent attackers to trigger a macro expansion, leading to unspecified use of an incorrect filename...

[slackware-security] m4

New m4 packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-1687...

CVE-2007-1687

CVE-2007-1687 : The vulnerability affects the Internet Pictures Corporation’s iPIX Image Well ActiveX control, specifically the library iPIX-ImageWell-ipix.dll . Multiple buffer overflows in this control could allow a remote attacker to execute arbitrary code on a vulnerable system. The issue is ...

CVE-2006-1687

CVE-2006-1687 affects APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT. The vulnerability is a Cross-site Scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML via the message parameter, likely involving the basket functionality. The NVD entry lists a MEDIUM seve...

CVE-2002-1687

CVE-2002-1687 describes a local buffer overflow in the AIX diagnostics library triggered by a long DIAGNOSTICS environment variable. Multiple sources (NVD, Red Hat, CVE list, NVD mirrors) corroborate that a local attacker could cause data and instructions to be overwritten. The impact is limited ...

CVE-2005-1687

SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the tbid parameter...

CVE-2004-1687

CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter...

CVE-2004-1687

Snitz Forums 2000 v3.4.04 has a CRLF injection vulnerability in down.asp that enables HTTP Response Splitting via the location parameter. This remote issue can alter the server's HTML output. OpenVAS data labels it as Snitz Forums 2000 HTTP Response Splitting . No explicit remediation/patch detai...

CVE-2004-1687

CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter...