212 matches found
Fedora 17 : mantis-1.2.15-1.fc17 (2013-5833)
new upstream release, fixing security issues: CVE-2013-1930 948971 CVE-2013-1931 948975 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...
SuSE Update for opera openSUSE-SU-2012:0610-1 (opera)
Check for the Version of opera OpenVAS Vulnerability Test $Id: gbsuse201206101.nasl 8265 2018-01-01 06:29:23Z teissa $ SuSE Update for opera openSUSE-SU-2012:0610-1 opera Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is...
openSUSE: Security Advisory for opera (openSUSE-SU-2012:0610-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for libav USN-1209-2
Ubuntu Update for Linux kernel vulnerabilities USN-1209-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN12092.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for libav USN-1209-2 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...
Ubuntu: Security Advisory (USN-1209-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 10.04 LTS / 10.10 : ffmpeg vulnerabilities (USN-1209-1)
It was discovered that FFmpeg incorrectly handled certain malformed ogg files. If a user were tricked into opening a crafted ogg file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. This...
VLC Media Player 'AMV' Denial of Service Vulnerability - Windows
VLC Media Player is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2011-1931
CVE-2011-1931 is a vulnerability in FFmpeg’s AMV handling where sp5xdec.c in the Sunplus SP5X JPEG decoder (libavcodec/FFmpeg) writes outside the bounds of an unspecified array, enabling memory corruption and potentially remote code execution when processing malformed AMV files. The flaw affects ...
CVE-2011-1931
sp5xdec.c in the Sunplus SP5X JPEG decoder in libavcodec in FFmpeg before 0.6.3 and libav through 0.6.2, as used in VideoLAN VLC media player 1.1.9 and earlier and other products, performs a write operation outside the bounds of an unspecified array, which allows remote attackers to cause a denia...
CubeCart PHP 4.3.x - 'shipkey' SQL Injection
SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application 1. Advisory Information Title: SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application Advisory Id: CORE-2010-0415 Advisory URL: http://www.coresecurity.com/content/cubecart-php-shopping-cart-sql-injection...
CVE-2010-1931
creationtimestamp| type| source ---|---|--- 2010-06-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14117...
CubeCart PHP 4.3.x - shipkey SQL Injection
CubeCart PHP 4.3.x - shipkey SQL Injection SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application 1. Advisory Information Title: SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application Advisory Id: CORE-2010-0415 Advisory URL:...
CVE-2010-1931
CubeCart PHP Shopping Cart vulnerability CVE-2010-1931 is an SQL injection in the shipKey parameter of index.php, affecting CubeCart v4.3.4–4.3.9. The shipKey input is treated as an integer, but not properly cast, allowing an attacker to inject SQL via POST data to update basket steps (example: /...
SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application
Advisory ID Internal CORE-2010-0415 1. Advisory Information Title: SQL Injection in CubeCart PHP Free & Commercial Shopping Cart Application Advisory Id: CORE-2010-0415 Advisory URL:https://www.coresecurity.com/core-labs/advisories/cubecart-php-shopping-cart-sql-injection Date published:...
Debian DSA-1931-1 : nspr - several vulnerabilities
Several vulnerabilities have been discovered in the NetScape Portable Runtime Library, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1563 A programming error in the string handling code may lead t...
Debian Security Advisory DSA 1931-1 (nspr)
The remote host is missing an update to nspr announced via advisory DSA 1931-1. OpenVAS Vulnerability Test $Id: deb19311.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1931-1 nspr Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Unfixed XSS vulnerability at journalism.berkeley.edu
Security researcher Dark.Man, has submitted on 18/08/2009 a cross-site-scripting XSS vulnerability affecting journalism.berkeley.edu, which at the time of submission ranked 1931 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/08/2009. It is...
Gentoo Security Advisory GLSA 200605-11 (ruby)
The remote host is missing updates announced in advisory GLSA 200605-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
