82 matches found
CVE-2011-1778
CVE-2011-1778 is a libarchive vulnerability (affecting libarchive up to 2.8.5) described as two heap-based buffer overflows triggered by archiving inputs such as tar (and, per Scientific Linux, ISO9660 images). A remote attacker could cause an application crash or, possibly, execute arbitrary cod...
CVE-2012-1778
CVE-2012-1778 is a SQL injection vulnerability in artykul_print.php of CreateVision CMS, exploitable via the id parameter to allow remote SQL commands. The issue is caused by improper input handling in the affected script, enabling an attacker to manipulate the underlying database. Public referen...
CVE-2012-1778
creationtimestamp| type| source ---|---|--- 2012-03-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36977...
Debian DSA-2413-1 : libarchive - buffer overflows
Two buffer overflows have been discovered in libarchive, a library providing a flexible interface for reading and writing archives in various formats. The possible buffer overflows while reading ISO 9660 or tar streams allow remote attackers to execute arbitrary code depending on the application...
[SECURITY] [DSA 2413-1] libarchive security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2413-1 [email protected] http://www.debian.org/security/ Luk Claes February 20, 2012 http://www.debian.org/security/faq -...
Ubuntu: Security Advisory (USN-1310-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mandriva Update for libarchive MDVSA-2011:190 (libarchive)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mandriva Update for libarchive MDVSA-2011:191 (libarchive)
Check for the Version of libarchive OpenVAS Vulnerability Test Mandriva Update for libarchive MDVSA-2011:191 libarchive Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
libarchive security update
2.8.3-3 - Security fixes CVE-2011-1777, CVE-2011-1778 739939...
CVE-2010-1778
Cross-site scripting XSS vulnerability in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via an RSS feed...
CVE-2010-1778
Cross-site scripting XSS vulnerability in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via an RSS feed...
CVE-2010-1778
Apple Safari contains an XSS in RSS feed handling (CVE-2010-1778). Affected: Safari before 5.0.1 on Mac OS X 10.5–10.6 and Windows; Safari before 4.1.1 on Mac OS X 10.4. Remote attackers could inject arbitrary script via a malicious RSS feed. Impact: possible script/HTML execution and data exposu...
Mac OS X : Apple Safari < 5.0.1 / 4.1.1
The version of Apple Safari installed on the remote Mac OS X host is earlier than 5.0.1 / 4.1.1. As such, it is potentially affected by numerous issues in the following components : - Safari - WebKit C Tenable Network Security, Inc. if NASLLEVEL 3000 exit0; include"compat.inc"; if description...
SuSE 11 Security Update : Mozilla XULrunner (SAT Patch Number 1778)
Mozilla XULrunner was upgraded to 1.9.0.17 fixing some bugs and regressions. The following security bug has been fixed : - The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service application...
CVE-2009-1778
CVE-2009-1778 affects BigACE CMS 2.5: SQL injection in the new user registration feature when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL via the username parameter. The provided documents do not include remediation details (patch/version) or explicit exploita...
CVE-2009-1778
creationtimestamp| type| source ---|---|--- 2009-05-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8664...
Debian Security Advisory DSA 1778-1 (mahara)
The remote host is missing an update to mahara announced via advisory DSA 1778-1. OpenVAS Vulnerability Test $Id: deb17781.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1778-1 mahara Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CVE-2008-1778
CVE-2008-1778 : The vulnerability is described as an unspecified issue in the floating point context switch implementation on Sun Solaris 9/10 for x86, potentially allowing a local user to cause a denial of service (application exit), corrupt data, or trigger incorrect calculations via unknown ve...
CVE-2007-1778
PHP remote file inclusion vulnerability in db/mysql.php in the Eve-Nuke 0.1 EN-Forums module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2007-1778
CVE-2007-1778 is a PHP remote file inclusion vulnerability in the Eve-Nuke 0.1 (EN-Forums) module for PHP-Nuke. The issue allows remote attackers to execute arbitrary PHP code through a URL supplied to the phpbb_root_path parameter, leading to complete compromise of affected systems. The NVD entr...