103 matches found
DSA-2662-1 xen - several
Bulletin has no description...
Debian: Security Advisory (DSA-2662-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-1919
CVE-2012-1919 affects AtMail Open-Source’s @Mail WebMail Client (mime.php) prior to version 1.05. The vulnerability is a CRLF injection that allows a remote attacker to perform directory traversal and read arbitrary files by injecting a %0A sequence followed by .. in the file parameter, enabling ...
CVE-2011-1919
Vulnerability overview (CVE-2011-1919) : GE Intelligent Platforms Proficy Applications (pre-4.4.1 SIM 101 and pre-5.x before 5.0 SIM 43) contains a stack-based buffer overflow when processing crafted TCP messages. The affected components are Proficy Server Manager (PRProficyMgr.exe), Proficy Serv...
Debian Security Advisory DSA 1919-2 (smarty)
The remote host is missing an update to smarty announced via advisory DSA 1919-2. OpenVAS Vulnerability Test $Id: deb19192.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1919-2 smarty Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
Debian: Security Advisory (DSA-1919)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-1919
Summary (CVE-2010-1919) : A DoS vulnerability in EMC Avamar 4.1.x and 5.0 prior to SP1 allows an unauthenticated remote attacker to hang the gsan service by sending a crafted TCP message, potentially requiring a reboot of the affected grid. Affected versions: EMC Avamar 4.1.x and 5.0 (pre-SP1). M...
Debian DSA-1919-1 : smarty - several vulnerabilities
Several remote vulnerabilities have been discovered in Smarty, a PHP templating engine. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-4810 The expandquotedtext function allows for certain restrictions in templates, like function calling and PHP...
Debian: Security Advisory (DSA-1919-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ZDI-09-048: Microsoft Internet Explorer CSS Behavior Memory Corruption Vulnerability
ZDI-09-048: Microsoft Internet Explorer CSS Behavior Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-048 August 5, 2009 -- CVE ID: CVE-2009-1919 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer -- TippingPointTM IPS Customer...
CVE-2009-1919
Microsoft Internet Explorer variants 5.01–8 on Windows 2000–Vista/Server 2003/2008 are affected by an Uninitialized Memory Corruption vulnerability in memory handling of deleted objects when processing HTML with embedded style sheets. The connected KB describes MS09-034 (Cumulative Security Updat...
Microsoft Internet Explorer (CVE-2009-1919)未初始化内存远程代码执行漏洞(MS09-034)
Bugraq ID: 35827 CVE ID：CVE-2009-1919 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer访问已经删除的对象时存在问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 攻击者需要构建恶意WEB页，诱使用户访问来触发此漏洞，目前没有详细漏洞细节提供。 Microsoft Internet Explorer 5.0.1 SP4 Microsoft Internet Explorer 5.0.1 SP3 Microsoft Internet Explorer 5.0.1...
Internet Explorer Uninitialized Memory Corruption (MS09-034; CVE-2009-1919)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability exists in the way Internet Explorer accesses an object that has been deleted. When Internet Explorer attempts to access an object that has been deleted, it may corrupt memory in such a way...
MS09-034: Cumulative Security Update for Internet Explorer (972260)
The remote host is missing IE Security Update 972260. The remote version of IE is affected by several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid40407; scriptversion"1.26";...
CVE-2008-1919
The CVE-2008-1919 entry describes an SQL injection in listtest.php of YourFreeWorld Apartment Search Script, exploitable via the r parameter. The underlying issue is improper input handling in a PHP script leading to arbitrary SQL execution. The vulnerability is remote in scope and affects the li...
CVE-2008-1919
creationtimestamp| type| source ---|---|--- 2008-04-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5471...
openSUSE 10 Security Update : gimp-unstable (gimp-unstable-1919)
A buffer overflow was fixed in the xcf loader in GIMP that allows user-complicit attackers to cause a denial of service crash and possibly execute arbitrary code via an XCF file with a large numaxes value in the VECTORS property. CVE-2006-3404 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2007-1919
CVE-2007-1919 describes a Cross-site scripting (XSS) vulnerability in Arizona Dream Livre d'or (livor) 2.5, specifically in index.php where the page parameter can be abused to inject arbitrary web script or HTML. The available sources confirm the vulnerability and affected component, but do not p...
CVE-2006-1919
The CVE-2006-1919 entry describes a PHP remote file inclusion in Internet Photoshow 1.3 (index.php) that allows remote attackers to execute arbitrary PHP code by supplying a URL in the page parameter. The vulnerability affects Internet Photoshow 1.3 and is due to including a user-supplied URL, en...