Oracle Linux 6 : ruby (ELSA-2014-1911)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1911 advisory. - Fix REXML billion laughs attack via parameter entity expansion CVE-2014-8080. Resolves: rhbz1163993 Tenable has extracted the preceding description...

FOSCAM FI8910W网络摄像机身份验证绕过漏洞(CVE-2014-1911)

BUGTRAQ ID: 65931 CVECAN ID: CVE-2014-1911 FOSCAM FI8910W是款网络摄像机产品。 FOSCAM FI8910W网络摄像机（固件版本11.37.2.54）在实现上存在安全漏洞，可使未经身份验证的远程攻击者利用此漏洞访问流视频和图形数据。 0 foscam Foscam IP Cameras 11.37.2.54 厂商补丁： foscam ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://foscam.us/...

CVE-2014-1911

The CVE-2014-1911 issue affects the Foscam FI8910W IP camera. Firmware versions prior to 11.37.2.55 allow an unauthenticated remote attacker to obtain streaming video and image data by exploiting a login/authentication bypass vulnerability (reported for 11.37.2.54 and addressed by upgrading to 11...

Foscam IP camera authentication bypass vulnerability

Overview The FI8910W Foscam IP camera running firmware version 11.37.2.54 fails to properly authenticate users. Description CWE-592: Authentication Bypass Issues - CVE-2014-1911The FI8910W Foscam IP camera running firmware version 11.37.2.54 contains a vulnerability which allows an unauthenticate...

Ubuntu Update for ghostscript USN-1911-2

Check for the Version of ghostscript OpenVAS Vulnerability Test $Id: gbubuntuUSN19112.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for ghostscript USN-1911-2 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Ubuntu: Security Advisory (USN-1911-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS / 12.10 / 13.04 : lcms2 vulnerability (USN-1911-1)

It was discovered that Little CMS did not properly verify certain memory allocations. If a user or automated system using Little CMS were tricked into opening a specially crafted file, an attacker could cause Little CMS to crash. Note that Tenable Network Security has extracted the preceding...

CVE-2013-1911

lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in 1 an mp3 URL or 2 file name...

CVE-2013-1911

lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in 1 an mp3 URL or 2 file name...

CVE-2013-1911

The CVE refers to the Ruby Gem ldoce (0.0.2). It explains that lib/ldoce/word.rb accepts an mp3 URL or filename and, if it contains shell metacharacters, can lead to remote command execution. The issue is triggered during handling of MP3 URLs/filenames, potentially allowing an attacker to run arb...

CVE-2012-1911

CVE-2012-1911 affects PHP Address Book 6.2.12 and earlier. It allows remote attackers to execute arbitrary SQL commands via (1) the to_group parameter to group.php or (2) the id parameter to vcard.php; the edit.php vector is covered by CVE-2008-2565. This is a concrete vulnerability with specifie...

CVE-2011-1911

CVE-2011-1911 affects JasperReports Server Community Project (JasperServer) versions 3.7.0 and 3.7.1. The root cause is a predictable _flowExecutionKey parameter, enabling CSRF via brute-forcing across requests. Impact described includes the ability for an attacker, tricking an authenticated user...

CVE-2010-1911

The CVE affects Consona Live Assistance components (tgctlcm.dll via the SdcWebSecureBase interface). The vulnerability arises from gating ActiveX control execution on a maintained whitelist of server domain names, enabling MITM DNS hijacking to trigger arbitrary code execution. The description do...

Debian DSA-1911-1 : pygresql - missing escape function

It was discovered that pygresql, a PostgreSQL module for Python, was missing a function to call PQescapeStringConn. This is needed, because PQescapeStringConn honours the charset of the connection and prevents insufficient escaping, when certain multibyte character encodings are used. The new...

Debian: Security Advisory (DSA-1911-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1911

CVE-2009-1911 describes a directory traversal/Local File Inclusion in QuiXplorer 2.3.2 and earlier, and TinyWebGallery 1.7.6 and earlier. The flaw arises in admin/index.php where the lang parameter is used to include PHP code via a .. path component, allowing remote attackers to include and execu...

CVE-2009-1911

Directory traversal vulnerability in .include/init.php aka admin/include/init.php in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery TWG 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to admin/index.php...

TinyWebGallery/QuiXplorer Local File Include Vulnerability

TinyWebGallery and QuiXplorer are prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. This may aid in further attacks...

CVE-2009-1911

creationtimestamp| type| source ---|---|--- 2009-05-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8649...

CVE-2008-1911

The CVE-2008-1911 entry concerns a SQL injection in 1024 CMS (version 1.4.2 beta and earlier) inside includes/system.php. The root cause is the vulnerability being exploitable when magic_quotes_gpc is disabled, allowing remote attackers to inject and execute arbitrary SQL via a cookpass cookie. I...