Critical: postgresql9

Issue Overview: Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service file corruption, and allows remote authenticated users to modify configuration settings and execute arbitrary code, v...

Debian Security Advisory DSA 2658-1 (postgresql-9.1 - several vulnerabilities)

Several vulnerabilities were discovered in PostgreSQL database server. CVE-2013-1899Mitsumasa Kondo and Kyotaro Horiguchi of NTT Open Source Software Center discovered that it was possible for a connection request containing a database name that begins with - to be crafted that can damage or...

PostgreSQL -- anonymous remote access data corruption vulnerability

PostgreSQL project reports: The PostgreSQL Global Development Group has released a security update to all current versions of the PostgreSQL database system, including versions 9.2.4, 9.1.9, 9.0.13, and 8.4.17. This update fixes a high-exposure security vulnerability in versions 9.0 and later. Al...

VMSA-2013-0005:VMware vFabric Postgres security updates

VMSA-2013-0005 VMware vFabric Postgres security updates VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2013-0005 VMware Security Advisory Synopsis: VMware vFabric Postgres security updates VMware Security Advisory Issue date: 2013-04-04 VMware Security Advisory Updated on:...

CVE-2012-1901

Summary of CVE-2012-1901 (CONTEXT: FlexCMS) Vulnerable software: FlexCMS versions 3.2.1 and earlier.Root cause / vulnerability type: Cross-site request forgery (CSRF) vulnerabilities.Impacted actions: An attacker can hijack authentication for (1) users changing account settings via a request to i...

CVE-2012-1901

creationtimestamp| type| source ---|---|--- 2012-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18609...

CVE-2011-1901

The CVE-2011-1901 entry concerns the mail-filter web interface in Proofpoint products: Proofpoint Messaging Security Gateway (versions up to 6.2.0.263:6.2.0.237) and Proofpoint Protection Server (5.5.3–5.5.5, 6.0.2, 6.1.1, 6.2.0). The flaw allows remote attackers to bypass authentication via unsp...

MS10-056 / MS10-057: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2269638 / 2269707) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Office that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Word or Excel file, these issues could be leveraged to execute arbitrary code subject to the user's...

Microsoft Word RTF解析引擎远程内存破坏漏洞（MS10-056）

BUGTRAQ ID: 42132 CVE ID: CVE-2010-1901 Word是微软Office套件中的文字处理工具。 在处理包含有某些控制字的RTF文档时，RTF解析引擎可能错误的从RTF文件读取值，导致内存破坏。成功利用此漏洞的攻击者可以获得与本地用户相同的权限。 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Word 2007 SP2 Microsoft Word 2003 SP3 Microsoft Word 2002 SP3 临时解决方法： 以纯文本格式阅读电子邮件。...

Microsoft Office Word RTF Parsing Engine Memory Corruption

Added: 08/12/2010 CVE: CVE-2010-1901 BID: 42132 OSVDB: 66995 Background Microsoft Office Word is Microsoft's word processing software, released as a component of Microsoft Office suite. Problem Microsoft Office Word does not perform sufficient data validation when handling rich text data. When Wo...

Microsoft Office Word RTF Parsing Engine Memory Corruption

Added: 08/12/2010 CVE: CVE-2010-1901 BID: 42132 OSVDB: 66995 Background Microsoft Office Word is Microsoft's word processing software, released as a component of Microsoft Office suite. Problem Microsoft Office Word does not perform sufficient data validation when handling rich text data. When Wo...

CVE-2010-1901

Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly handle unspecified properties in rich tex...

CVE-2010-1901

CVE-2010-1901 affects Microsoft Word and related Office components (Word 2002 SP3, 2003 SP3, 2007 SP2; Mac: Office 2004/2008, Open XML Converter for Mac, Word Viewer, Compatibility Pack SP2) where the RTF parsing engine mishandles unspecified properties in rich text data, causing a memory corrupt...

Microsoft Word RTF Parsing Engine Memory Corruption (MS10-056; CVE-2010-1901)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been identified in Microsoft Word. The vulnerability is due to insufficient data validation by Microsoft Office Word when handling rich text data. A remote attacker could trigger this flaw by convincin...

Debian DSA-1901-1 : mediawiki1.7 - several vulnerabilities

Several vulnerabilities have been discovered in mediawiki1.7, a website engine for collaborative work. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-5249 David Remahl discovered that mediawiki1.7 is prone to a cross-site scripting attack. -...

Debian: Security Advisory (DSA-1901-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1901

Affected software: IBM WebSphere Application Server (WAS) 6.0.2 prior to 6.0.2.35. Vulnerability: The Security component permits implementation of non-standard HTTP methods. Root cause / impact: Described as enabling non-standard HTTP methods with unknown impact and remote attack vectors in the p...

Fedora Update for cups FEDORA-2008-1901

Check for the Version of cups OpenVAS Vulnerability Test Fedora Update for cups FEDORA-2008-1901 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

CVE-2008-1901

CVE-2008-1901 affects aptlinex before 0.91, where a local user can overwrite arbitrary files via a symlink attack on the gambas-apt.lock temporary file. The issue arises from a symlink-based race in handling the lock file, enabling local privilege impact with complete confidentiality, integrity, ...

CVE-2007-1901

SonicBB 1.0 allows remote attackers to obtain sensitive information via the 1 by parameter to search.php, 2 p parameter to viewforum.php, and the 3 id parameter to a viewforum.php or b members.php, which reveal the installation path in the resulting error message...