RHEL 4 / 5 : firefox (RHSA-2009:1095)

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

CVE-2009-1834

creationtimestamp| type| source ---|---|--- 2009-05-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33039...

Gentoo Security Advisory GLSA 200606-01 (opera)

The remote host is missing updates announced in advisory GLSA 200606-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: swfdec

The remote host is missing an update to the system as announced in the referenced advisory. VID 5ef12755-1c6c-11dd-851d-0016d325a0ed OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: swfdec

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-1834

Swfdec vulnerability CVE-2008-1834 affects Swfdec up to version before 0.6.4. The flaw is in swfdec_load_object.c, which does not properly restrict local file access from untrusted sandboxes, enabling a crafted Flash file to read arbitrary local files. Impact is described as partial confidentiali...

SuSE 10 Security Update : gpg2 (ZYPP Patch Number 1834)

It is possible to crash denial of service the GNU Privacy Guard gpg by supplying a specifically crafted message specifying a very large UID, which leads to an out of memory situation or an integer overflow. It is unclear if this problem can be exploited to execute code. This issue is tracked by t...

openSUSE 10 Security Update : opera (opera-1313)

Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a stylesheet attribute, which pass a length check. CVE-2006-1834 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2007-1834

CVE-2007-1834 affects Cisco Unified CallManager (CUCM) 5.0 prior to 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 prior to 1.0(3). The vulnerability allows unauthenticated, remote attackers to cause a denial of service (loss of voice services) by sending a flood of ICMP echo requests. R...

CVE-2006-1834

Opera before 8.54 is affected by a vulnerability caused by an integer signedness error in the handling of long values in a stylesheet attribute, which can bypass a length check and potentially allow remote code execution. This is documented in multiple sources associated with CVE-2006-1834, inclu...

CVE-2002-1834

CVE-2002-1834 concerns the default configuration of Xerox DocuTech 6110 and 6115, where the web server allows remote attackers to (1) submit print jobs directly into the “print now” queue or (2) read the scanner job history. The connected sources repeat this description but do not provide additio...

CVE-2005-1834

The CVE-2005-1834 entry describes a SQL injection vulnerability in NEXTWEB (i)Site, specifically in login.asp. The underlying issue is unsanitized input in the password field, enabling remote attackers to execute arbitrary SQL commands and bypass authentication. The available connected documents ...

CVE-2004-1834

The CVE-2004-1834 issue affects mod_disk_cache in Apache 2.0–2.0.49, which stores client headers (including authentication information) on disk, potentially allowing local users to access sensitive data. The provided documents confirm the vulnerability description but do not specify a concrete fi...