CVE-2016-1904

CVE-2016-1904 affects PHP 7.x before 7.0.2. Multiple integer overflows in ext/standard/exec.c are triggered by long inputs to php_escape_shell_cmd/php_escape_shell_arg, leading to a heap-based buffer overflow and potential DoS or other impact. Public documents consistently identify the vulnerabil...

CVE-2015-1904

IBM Business Process Manager BPM 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0, when external Enterprise Content Management ECM integration is enabled with a certain technical system account configuration, allows remote authenticated users to bypas...

CVE-2015-1904

CVE-2015-1904 affects IBM BPM (BPM) versions 8.0.x through 8.5.6.0 when external ECM integration uses a predefined technical system account, enabling remote authenticated users to bypass document-access restrictions for upload or download. The IBM security bulletin specifies a BPM CMIS integratio...

openSUSE Security Update : roundcubemail (openSUSE-SU-2013:0671-1)

Update to version 0.8.6 bnc812568 - Fix security issue in save-pref command CVE-2013-1904 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-332. The text description of this plugin...

Debian DSA-2890-1 : libspring-java - security update

Two vulnerabilities were discovered in libspring-java, the Debian package for the Java Spring framework. - CVE-2014-0054 Jaxb2RootElementHttpMessageConverter in Spring MVC processes external XML entities. - CVE-2014-1904 Spring MVC introduces a cross-site scripting vulnerability if the action on ...

[SECURITY] [DSA 2890-1] libspring-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2890-1 [email protected] http://www.debian.org/security/ Florian Weimer March 29, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2890-1 (libspring-java - security update)

Two vulnerabilities were discovered in libspring-java, the Debian package for the Java Spring framework. CVE-2014-0054 Jaxb2RootElementHttpMessageConverter in Spring MVC processes external XML entities. CVE-2014-1904 Spring MVC introduces a cross-site scripting vulnerability if the action on a...

DSA-2890-1 libspring-java - security update

Bulletin has no description...

Debian: Security Advisory (DSA-2890-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-1904

The CVE-2014-1904 entry is an XSS in Spring Framework’s Spring MVC FormTag: FormTag.java improperly handles user-supplied URIs in a default action, enabling remote script/HTML injection. Affected versions are Spring Framework 3.0.0 up to 3.2.7 (and 3.0.0–3.2.7 inclusive) and 4.0.0 up to 4.0.1 (4....

CVE-2013-1904

Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the value parameter for the genericmessagefooter setting in a save-perf action to index.php, as exploite...

CVE-2013-1904

CVE-2013-1904 affects Roundcube Webmail. Affected: steps/mail/sendmail.inc contains an absolute path traversal flaw in the _value parameter of the generic_message_footer setting used during a save-perf action, enabling remote attackers to read arbitrary files. Impact exposed in versions prior to ...

Ubuntu: Security Advisory (USN-1904-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ MDVSA-2013:149 ] roundcubemail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:149 http://www.mandriva.com/en/support/security/ Package : roundcubemail Date : April 21, 2013 Affected: Business Server 1.0 Problem Description: A vulnerability has been found and corrected in roundcubemail...

Fedora Update for roundcubemail FEDORA-2013-4564

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for roundcubemail FEDORA-2013-4536

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RealPlayer for Windows < 15.0.4.53 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is earlier than 15.0.4.53. As such, it is affected by multiple vulnerabilities : - A memory corruption error exists related to the handling of 'MP4' files. CVE-2012-1904 - An unspecified error exists...

RealNetworks RealPlayer MP4 File Handling Denial of Service Vulnerability - Windows

RealPlayer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1904

mp4fformat.dll in the QuickTime File Format plugin in RealNetworks RealPlayer 15 and earlier, and RealPlayer SP 1.1.4 Build 12.0.0.756 and earlier, allows remote attackers to cause a denial of service memory corruption and application crash via a crafted MP4 file...

RealPlayer .mp4 file handling memory corruption

Exploit for windows platform in category dos / poc Application : RealPlayer mp4 file handling memory corruption Versions : From mp4fformat.dll : 61177240 55 PUSH EBP 61177241 8BEC MOV EBP,ESP 61177243 8B4D 0C MOV ECX,DWORD PTR SS:EBP+C 61177246 85C9 TEST ECX,ECX ; ECX = 00000001 61177248 8B45 08...