212 matches found
Google Chrome Multiple Vulnerabilities (win)
This host is installed with Google Chrome Web Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnapr10.nasl 5394 2017-02-22 09:22:42Z teissa $ Google Chrome Multiple Vulnerabilities win Authors: Madhuri D Updated By: Madhuri D on 2010-05-10...
CVE-2010-1501
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1767. Reason: This candidate is a duplicate of CVE-2010-1767. Notes: All CVE users should reference CVE-2010-1767 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1767. Reason: This candidate is a duplicate of CVE-2010-1767. Notes: All CVE users should reference CVE-2010-1767 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2009-1767
CVE-2009-1767 involves admin/edituser.php in the 2daybiz Template Monster Clone, where no administrative authentication is required. This permits remote attackers to modify arbitrary accounts via the parameters loginname, password, email, firstname, and lastname. The NVD lists a CVSSv2 base score...
Ubuntu Update for libxslt vulnerabilities USN-633-1
Ubuntu Update for Linux kernel vulnerabilities USN-633-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6331.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libxslt vulnerabilities USN-633-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Ubuntu: Security Advisory (USN-633-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RedHat Update for libxslt RHSA-2008:0287-01
Check for the Version of libxslt OpenVAS Vulnerability Test RedHat Update for libxslt RHSA-2008:0287-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CentOS Update for libxslt CESA-2008:0287 centos3 x86_64
Check for the Version of libxslt OpenVAS Vulnerability Test CentOS Update for libxslt CESA-2008:0287 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Safari < 3.2 Multiple Vulnerabilities
Binary data 4754.prm...
USN-633-1: libxslt vulnerabilities
It was discovered that long transformation matches in libxslt could overflow. If an attacker were able to make an application linked against libxslt process malicious XSL style sheet input, they could execute arbitrary code with user privileges or cause the application to crash, leading to a deni...
[slackware-security] libxslt
New libxslt packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. More details about the issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-1767 Here are the details from the Slackware 12.1 ChangeLog:...
Slackware 12.0 / 12.1 / current : libxslt (SSA:2008-210-03)
New libxslt packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-210-03. The text itself is copyright ...
openSUSE 10 Security Update : libxslt (libxslt-5263)
A libxslt XSL-match processing overflow has been fixed. CVE-2008-1767 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libxslt-5263. The text description of thi...
SuSE 10 Security Update : libxslt (ZYPP Patch Number 5343)
A libxslt XSL-match processing overflow has been fixed. CVE-2008-1767 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid33196;...
libxslt XSL文件处理缓冲区溢出漏洞
BUGTRAQ ID: 29312 CVECAN ID: CVE-2008-1767 Libxslt是为GNOME项目开发的XSLT C库,XSLT本身是用于定义XML转换的XML语言。 libxslt库在转换XML文档期间使用的固定大小的数组,如果XSL样式表文件中设置了特定的template match条件的话,则使用该库的应用程序在解析文件时会触发缓冲区溢出,导致应用程序崩溃或执行任意指令。 XMLSoft libxslt 1.1.24 Debian ------ Debian已经为此发布了一个安全公告(DSA-1589-1)以及相应补丁: DSA-1589-1:New libxs...
Debian DSA-1589-1 : libxslt - buffer overflow
It was discovered that libxslt, an XSLT processing runtime library, could be coerced into executing arbitrary code via a buffer overflow when an XSL style sheet file with a long XSLT 'transformation match' condition triggered a large number of steps. %NASLMINLEVEL 70300 C Tenable Network Security...
CVE-2008-1767
CVE-2008-1767: Buffer overflow in libxslt’s pattern.c (versions before 1.1.24) can be triggered by a long XSLT transformation match, leading to a crash or possible arbitrary code execution. Public advisories include Red Hat RHSA-2008:0287, Slackware SSA:2008-210-03, Debian DSA-1589-1, and various...
libxslt security update
CentOS Errata and Security Advisory CESA-2008:0287 Updated libxslt packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. libxslt is a C library, based on libxml, for parsing of XML files into oth...
CVE-2008-1767
creationtimestamp| type| source ---|---|--- 2008-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31815...
Debian: Security Advisory (DSA-921-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...