Ubuntu 12.04 LTS / 12.10 / 13.04 : xserver-xorg-video-openchrome, xserver-xorg-video-openchrome-lts-quantal vulnerability (USN-1871-1)

Ilja van Sprundel discovered multiple security issues in various X.org libraries and components. An attacker could use these issues to cause applications to crash, resulting in a denial of service, or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding...

RHEL 4 / 5 : jboss-seam2 (RHSA-2010:0564)

Updated jboss-seam2 packages that fix one security issue are now available for JBoss Enterprise Application Platform 4.3 for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS...

JBoss Seam 2 Remote Command Execution

JBoss Seam 2 jboss-seam2, as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language EL expressions, which allows remote attackers to execute arbitrary code via a crafted URL. This modules also has been tested...

Microsoft Windows TCP/IP Stack Denial of Service Vulnerability (2563894)

This host is missing an important security update according to Microsoft Bulletin MS11-064. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-1871

Tcpip.sys in the TCP/IP stack in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service reboot via a series of crafted ICMP messages, aka "ICMP Denial of Service Vulnerability."...

CVE-2011-1871

CVE-2011-1871 affects the Windows TCP/IP stack (Tcpip.sys) on Windows Vista SP2, Windows Server 2008 SP2/R2 and Windows 7 SP1. A remote attacker can send crafted ICMP messages to cause a denial of service (reboot). The vulnerability is addressed by MS11-064; apply the Microsoft patch to mitigate....

Microsoft Windows TCP/IP ICMP CVE-2011-1871远程拒绝服务漏洞

Bugtraq ID: 48987 CVE ID：CVE-2011-1871 Microsoft Windows是一款流行的操作系统。 Windows TCP/IP栈不正确处理特制构建的ICMP消息序列，远程攻击者可以利用漏洞发送特制消息使系统停止响应或自动重新启动。 Microsoft Windows Vista x64 Edition SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 R2 x64 SP1 Microsoft Windows Server 2008 R2 x64 0 Microsoft...

Preemptive Protection against Microsoft Windows TCP/IP ICMP Denial of Service (MS11-064; CVE-2011-1871)

A denial of service DoS vulnerability has been reported in Microsoft Windows TCP/IP stack. An attacker could exploit this vulnerability to cause a DoS condition in an affected system. As a result, the system may become unresponsive and automatically reboot...

MS11-064: Vulnerabilities in TCP/IP Stack Could Allow Denial of Service (2563894)

The TCP/IP stack in use on the remote Windows host is potentially affected by the following denial of service vulnerabilities : - By sending a sequence of specially crafted ICMP messages, an unauthenticated, remote attacker could cause the affected host to stop responding and automatically reboot...

CVE-2010-1871

JBoss Seam 2 jboss-seam2, as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language EL expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when th...

CVE-2010-1871

CVE-2010-1871 affects JBoss Seam 2 (jboss-seam2) as used in Red Hat Linux’s JBoss Enterprise Application Platform 4.3.0. The vulnerability stems from inadequate sanitization of inputs to JBoss Expression Language (EL) expressions, enabling remote code execution via a crafted URL when the Java Sec...

Important: Red Hat Security Advisory: jboss-seam2 security update

Updated jboss-seam2 packages that fix one security issue are now available for JBoss Enterprise Application Platform 4.3 for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS...

Debian Security Advisory DSA 1871-1 (wordpress)

The remote host is missing an update to wordpress announced via advisory DSA 1871-1. OpenVAS Vulnerability Test $Id: deb18711.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1871-1 wordpress Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian Security Advisory DSA 1871-2 (wordpress)

The remote host is missing an update to wordpress announced via advisory DSA 1871-2. OpenVAS Vulnerability Test $Id: deb18712.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1871-2 wordpress Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2008-1871

CVE-2008-1871 affects Scriptsagent.com Links Directory 1.1. The vulnerability is an SQL injection in links.php, exploitable via the cat_id parameter in a list action, allowing remote authenticated users to execute arbitrary SQL commands. Impact is described as partial confidentiality, integrity, ...

CVE-2008-1871

creationtimestamp| type| source ---|---|--- 2008-04-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5377...

CVE-2007-1871

CVE-2007-1871 affects chcounter 3.1.3. The vulnerability is a Cross-site Scripting (XSS) flaw in the login_name parameter to /stats/, allowing injection of arbitrary web script/HTML. Root cause: input not properly sanitized before rendering in the page. Impact: remote attackers could execute scri...

CVE-2007-1871.txt

Cross site scripting in chcounter 3.1.3 security advisory References: http://chcounter.org/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1871 Description: Cross site scripting describes attacks that allow to insert malicious html or javascript code via get or post forms. This can be use...

CVE-2007-1871: Cross site scripting in chcounter 3.1.3

Cross site scripting in chcounter 3.1.3 security advisory References: http://chcounter.org/ https://vulners.com/cve/CVE-2007-1871 Description: Cross site scripting describes attacks that allow to insert malicious html or javascript code via get or post forms. This can be used to steal session...

CVE-2006-1871

SQL injection vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.5 allows remote attackers to execute arbitrary SQL commands via the DELETEFROMTABLE function in the DBMSLOGMNRSESSION Log Miner package, aka Vuln DB06...