Ubuntu Update for linux USN-1972-1

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN19721.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for linux USN-1972-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

CVE-2013-1972

The CVE-2013-1972 entry maps to Drupal-contributed elFinder file manager module vulnerabilities: CSRF in elFinder 6.x-0.x (before 6.x-0.8) and 7.x-0.x (before 7.x-0.8) could allow remote attackers to hijack user sessions and create, modify, or delete files via unknown vectors. A Drupal SA-CONTRIB...

SA-CONTRIB-2013-044 - elFinder file manager - Cross Site Request Forgery (CSRF)

The elfinder module provides an AJAX-based file manager based on the elFinder javascript library. The module doesn't sufficiently verify requests thereby exposing a Cross Site Request Forgery CSRF vulnerability. This would enable an attacker to create, modify, or delete files on the server. There...

SuSE Update for MozillaFirefox openSUSE-SU-2012:1065-1 (MozillaFirefox)

Check for the Version of MozillaFirefox OpenVAS Vulnerability Test $Id: gbsuse201210651.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for MozillaFirefox openSUSE-SU-2012:1065-1 MozillaFirefox Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH,...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2012:1065-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE Update for MozillaFirefox openSUSE-SU-2012:1064-1 (MozillaFirefox)

Check for the Version of MozillaFirefox OpenVAS Vulnerability Test $Id: gbsuse201210641.nasl 8285 2018-01-04 06:29:16Z teissa $ SuSE Update for MozillaFirefox openSUSE-SU-2012:1064-1 MozillaFirefox Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2012:1064-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2556-1 (icedove)

The remote host is missing an update to icedove announced via advisory DSA 2556-1. OpenVAS Vulnerability Test $Id: deb25561.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2556-1 icedove Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2553-1 : iceweasel - several vulnerabilities

Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian. The reported vulnerabilities could lead to the execution of arbitrary code or the bypass of...

MozillaFirefox: Update to version 15 (critical)

Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update bnc777588 MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1 975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE- 2012-3959...

CVE-2012-1972

CVE-2012-1972 is a use-after-free in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox, with remote code execution/denial of service via heap memory corruption. Affected products/versions include Firefox prior to 15.0, Firefox ESR 10.x prior to 10.0.7, and Thunderbird prior ...

CVE-2012-1972

Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a...

Microsoft Visio Remote Code Execution Vulnerabilities (2560978)

This host is missing an important security update according to Microsoft Bulletin MS11-060. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-1972

The CVE-2011-1972 issue affects Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold/SP1. It stems from improper in-memory validation of objects during Visio file parsing, enabling remote code execution when a specially crafted Visio file is opened. Multiple sources corroborate a memory-corruption s...

Microsoft Visio CVE-2011-1972远程代码执行漏洞

Bugtraq ID: 49024 Microsoft Visio是一款微软开发的流程图软件。 在解析特制的Visio文件时，Microsoft Visio校验内存中对象存在一个远程代码执行漏洞，攻击者构建恶意文件，诱使用户解析，可以应用程序上下文执行任意代码 Microsoft Visio 2010 SP1 Microsoft Visio 2010 0 Microsoft Visio 2007 SP2 Microsoft Visio 2007 SP1 Microsoft Visio 2007 0 Microsoft Visio 2003 Standard Microsoft Visio...

CVE-2010-1972

The default configuration of HP Client Automation HPCA Enterprise Infrastructure aka Radia allows remote attackers to read log files, and consequently cause a denial of service or have unspecified other impact, via web requests...

CVE-2010-1972

The default configuration of HP Client Automation HPCA Enterprise Infrastructure aka Radia allows remote attackers to read log files, and consequently cause a denial of service or have unspecified other impact, via web requests...

CVE-2010-1972

CVE-2010-1972 affects HP Client Automation Enterprise Infrastructure (Radia). The default configuration allows remote attackers to read log files via the web interface, which can cause a denial of service and potentially other impact. The root cause is unauthenticated access to log files enabled ...

[security bulletin] HPSBMA02555 SSRT100064 rev.1 - HP Client Automation Enterprise Infrastructure (Radia) Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02286740 Version: 1 HPSBMA02555 SSRT100064 rev.1 - HP Client Automation Enterprise Infrastructure Radia Remote Disclosure of Information NOTICE: The information in this Security Bulletin should b...

Debian DSA-1972-1 : audiofile - buffer overflow

Max Kellermann discovered a heap-based buffer overflow in the handling of ADPCM WAV files in libaudiofile. This flaw could result in a denial of service application crash or possibly execution of arbitrary code via a crafted WAV file. The old stable distribution etch, this problem will be fixed i...