Mozilla Firefox Multiple Vulnerabilities (Aug 2013) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Ubuntu Update for firefox USN-1924-1

Check for the Version of firefox OpenVAS Vulnerability Test $Id: gbubuntuUSN19241.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for firefox USN-1924-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...

Firefox < 23.0 Multiple Vulnerabilities

The installed version of Firefox is earlier than 23.0 and is, therefore, potentially affected by the following vulnerabilities : - Various errors exist that could allow memory corruption conditions. CVE-2013-1701, CVE-2013-1702 - Use-after-free errors exist related to DOM modification when using...

CVE-2013-1708

Summary (CVE-2013-1708) : Mozilla Firefox before 23.0 and SeaMonkey before 2.20 were vulnerable to a denial-of-service via a crafted WAV file that is not properly handled by nsCString::CharAt, causing an application crash. OpenSUSE/SUSE advisories (and the Gentoo GLSA reference) link this CVE to ...

Oracle Application Express (Apex) CVE-2012-1708

An unspecified vulnerability in versions 4.0 and 4.1 of the Application Express Apex component of the Oracle Database Server allows remote attackers to affect integrity via unpublished vectors. --------------------------------------------------------------------------------- c Recx Ltd 2009-2012...

Ubuntu 12.04 LTS / 12.10 : libvirt vulnerabilities (USN-1708-1)

Wenlong Huang discovered that libvirt incorrectly handled certain RPC calls. A remote attacker could exploit this and cause libvirt to crash, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS. CVE-2012-4423 Tingting Zheng discovered that libvirt incorrectly handled clean...

CVE-2012-1708

CVE-2012-1708 affects the Oracle Database Server’s Application Express component, specifically versions 4.0 and 4.1. The vulnerability is described as unspecified, allowing remote attackers to affect integrity via unknown vectors. Connected sources reiterate the same vendor/product scope; no conc...

Novell iPrint Client 'printer-url' Multiple BOF Vulnerabilities - Windows

Novell iPrint Client is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-1708

CVE-2011-1708: A stack-based buffer overflow in Nipplib.dll of the Novell iPrint Client (affecting the iPrint Client before 5.64) can allow a remote attacker to execute arbitrary code by supplying a crafted op-printer-list-all-jobs cookie. OpenVAS/ZDI reports confirm the flaw resides in the nippl...

Novell iPrint Client < 5.64 Multiple Vulnerabilities

Binary data 5942.prm...

Novell iPrint Client < 5.64 Multiple Vulnerabilities

The version of Novell iPrint Client installed on the remote host is prior to 5.64. It is, therefore, affected by one or more of the following vulnerabilities in the nipplib.dll component, as used by both types of browser plugins, that can allow for arbitrary code execution : - The uri parameter...

CVE-2010-1708

Affected software: Free Realty, via agentadmin.php. Vulnerability: multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands by supplying crafted values in the login field (agentname) or the password field (agentpassword). Impact: data exposure and manipulation co...

CVE-2010-1708

creationtimestamp| type| source ---|---|--- 2010-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12411...

Apple Safari Multiple Vulnerabilities June-09 (Windows) - I

This host is installed with Apple Safari Web Browser and is prone to to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafarimultvulnjun091.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari Multiple Vulnerabilities June-09 Windows - I Authors: Sharath S Copyright: Copyright c...

CVE-2009-1708

Apple Safari before 4.0 is vulnerable to an open-help-anchor URL handler issue that allows remote sites to open local help files, potentially leading to arbitrary code execution or information disclosure. The root cause is failure to prevent calls to the open-help-anchor handler, enabling crafted...

Debian DSA-1708-1 : git-core - shell command injection

It was discovered that gitweb, the web interface for the Git version control system, contained several vulnerabilities : Remote attackers could use crafted requests to execute shell commands on the web server, using the snapshot generation and pickaxe search functionality CVE-2008-5916 . Local...

Debian Security Advisory DSA 1708-1 (git-core)

The remote host is missing an update to git-core announced via advisory DSA 1708-1. OpenVAS Vulnerability Test $Id: deb17081.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1708-1 git-core Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2008-1708

IBM solidDB 06.00.1018 and earlier are affected: a memory-allocation field is not validated, enabling a remote attacker to cause a denial-of-service (daemon exit) by sending a packet with a large value. No remediation details are provided in the supplied documents. Monitor for updates and potenti...

CVE-2007-1708

The CVE-2007-1708 entry describes a PHP remote file inclusion in ttCMS, affecting ttCMS 4 and earlier. The vulnerability resides in lib/db/ez_sql.php and allows an attacker to execute arbitrary PHP code by supplying a URL in the lib_path parameter that is included by the application. This leads t...

CVE-2002-1708

The OpenVAS/Nessus entries confirm CVE-2002-1708 as a cross-site scripting vulnerability in BasiliX Webmail, affecting version 1.1.0 or lower. The issue arises because BasiliX does not filter HTML tags when displaying messages, enabling an attacker to inject arbitrary HTML/script into the message...