Mandriva Linux Security Advisory : autotrace (MDVSA-2013:190)

Updated autotrace package fixes security vulnerability : Stack-based buffer overflow in bmp parser CVE-2013-1953. Updated autotrace package corrects the issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandriva...

MGASA-2013-0195 Updated autotrace package fixes security vulnerability

Stack-based buffer overflow in bmp parser CVE-2013-1953. Updated autotrace package corrects the issue...

SuSE Update for MozillaThunderbird openSUSE-SU-2012:0917-1 (MozillaThunderbird)

Check for the Version of MozillaThunderbird OpenVAS Vulnerability Test $Id: gbsuse201209171.nasl 8273 2018-01-03 06:29:19Z teissa $ SuSE Update for MozillaThunderbird openSUSE-SU-2012:0917-1 MozillaThunderbird Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

SuSE Update for xulrunner openSUSE-SU-2012:0924-1 (xulrunner)

Check for the Version of xulrunner OpenVAS Vulnerability Test $Id: gbsuse201209241.nasl 8265 2018-01-01 06:29:23Z teissa $ SuSE Update for xulrunner openSUSE-SU-2012:0924-1 xulrunner Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

openSUSE: Security Advisory for seamonkey (openSUSE-SU-2012:0935-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for MozillaThunderbird (openSUSE-SU-2012:0917-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. VID dbf338d0-dce5-11e1-b655-14dae9ebcf89 OpenVAS Vulnerability Test $ Description: Auto generated from VID dbf338d0-dce5-11e1-b655-14dae9ebcf89 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Mandriva Update for mozilla MDVSA-2012:110-1 (mozilla)

Check for the Version of mozilla OpenVAS Vulnerability Test Mandriva Update for mozilla MDVSA-2012:110-1 mozilla Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for thunderbird CESA-2012:1089 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for firefox CESA-2012:1088 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for mozilla MDVSA-2012:110 (mozilla)

Check for the Version of mozilla OpenVAS Vulnerability Test Mandriva Update for mozilla MDVSA-2012:110 mozilla Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for mozilla MDVSA-2012:110 (mozilla)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-1953

CVE-2012-1953 affects Mozilla Firefox 4.x–13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0–13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11. The ElementAnimations::EnsureStyleRuleFor function can cause denial of service (buffer over-read, incorrect pointer dereference, hea...

CVE-2011-1953

CVE-2011-1953 affects Post Revolution prior to 0.8.0c-2. The vuln is a set of XSS flaws in common.php (allowed tags: p, a, strong, em, i, img, li, ol, video, blockquote) that do not sanitize attributes, enabling arbitrary script via tag attributes. A DoS path exists in a loop when removing non-pe...

Post Revolution 0.8.0c Multiple Remote Vulnerabilities

info ——————————— Name : Post Revolution 0.8.0c Multiple Remote Vulnerabilities Class: Design Error && Input Validation Error CVE: CVE-2011-1952, CVE-2011-1953, CVE-2011-1954 Remote: Yes Local: No Credit : Javier Bassi javierbassi at gmail dot com Vulnerable : All versions prior to and including...

Post Revolution 0.8.0c XSS / XSRF / Denial Of Service

info ——————————— Name : Post Revolution 0.8.0c Multiple Remote Vulnerabilities Class: Design Error && Input Validation Error CVE: CVE-2011-1952, CVE-2011-1953, CVE-2011-1954 Remote: Yes Local: No Credit : Javier Bassi Vulnerable : All versions prior to and including 0.8.0c are affected. Vendor...

CVE-2010-1953

CVE-2010-1953 affects the Joomla! extension iNetLanka Multiple Map (com_multimap) 1.0 with a Local File Inclusion via directory traversal in the controller parameter to index.php. The root cause is improper validation of the .. traversal in user input, allowing remote attackers to read arbitrary ...

CVE-2010-1953

creationtimestamp| type| source ---|---|--- 2010-04-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12288...

CVE-2009-1953

IBM FileNet Content Manager versions 4.0, 4.0.1, and 4.5 (as used in IBM WebSphere Application Server and Oracle BEA WebLogic) are affected. The CE Web Services listener, under a specific WSEAF configuration, does not properly constrain a cached Subject, enabling remote attackers to access creden...

CVE-2008-1953

CVE-2008-1953 describes a cross-site scripting (XSS) vulnerability in Magnolia Enterprise Edition’s Sitedesigner, specifically in the pre-1.1.5 search template. The issue allows remote attackers to inject arbitrary web script or HTML via the query parameter. The connected documents confirm the af...