CVE-2015-1980

IBM InfoSphere Master Data Management - Collaborative Edition vulnerable to clickjacking on versions 9.1, 10.1, 11.0, 11.3, 11.4 prior to FP03. Exploitation could allow remote authenticated users to hijack the victim’s click actions via crafted HTTP requests or malicious sites. Affected versions ...

CVE-2014-1980

Cross-site scripting XSS vulnerability in include/functionsmetadata.inc.php in Piwigo before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the Make field in IPTC Exif metadata within an image uploaded to the Community plugin...

CVE-2014-1980

Cross-site scripting XSS vulnerability in include/functionsmetadata.inc.php in Piwigo before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the Make field in IPTC Exif metadata within an image uploaded to the Community plugin...

CVE-2014-1980

Cross-site scripting XSS vulnerability in include/functionsmetadata.inc.php in Piwigo before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the Make field in IPTC Exif metadata within an image uploaded to the Community plugin...

CVE-2014-1980

The CVE-2014-1980 issue is a cross-site scripting (XSS) vulnerability in Piwigo prior to version 2.4.6. It affects the code path include/functions_metadata.inc.php when processing IPTC Exif metadata via the Community plugin during image uploads. Remote attackers could inject arbitrary web script ...

DEBIAN-CVE-2013-1980

Buffer overflow in the getdsmp function in loaders/masiload.c in libxmp before 4.1.0 allows remote attackers to execute arbitrary code via a crafted MASI file...

CVE-2013-1980

CVE-2013-1980 affects the libxmp library: a buffer overflow in the get_dsmp function of loaders/masi_load.c in libxmp before 4.1.0 allows remote code execution via a crafted MASI file. Multiple sources (SUSE, Debian, Debian-related OSV reports, CVE lists) corroborate the vulnerability and version...

Ubuntu Update for vino USN-1980-1

Check for the Version of vino OpenVAS Vulnerability Test $Id: gbubuntuUSN19801.nasl 8456 2018-01-18 06:58:40Z teissa $ Ubuntu Update for vino USN-1980-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

Ubuntu: Security Advisory (USN-1980-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS / 12.10 / 13.04 : vino vulnerability (USN-1980-1)

Jonathan Claudius discovered that Vino incorrectly handled closing invalid connections. A remote attacker could use this issue to cause Vino to consume resources, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 18 : xmp-3.5.0-3.fc18 (2013-7135)

This update fixes heap-based buffer overflow when processing certain MASI files. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 19 : xmp-3.5.0-3.fc19 (2013-7098)

This update fixes heap-based buffer overflow when processing certain MASI files. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2011-1980

CVE-2011-1980 affects Microsoft Office 2003 SP3 and Office 2007 SP2, with an Untrusted Search Path vulnerability that allows local privilege escalation via loading a Trojan horse DLL from the current working directory when a .doc/.xls/.ppt file is present. The root cause is insecure library loadi...

MS11-073: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2587634)

The remote Windows host is running a version of Microsoft Office that is potentially affected by two vulnerabilities : - The application insecurely restricts the path used for loading external libraries when opening documents that use the .doc, .xls, or .ppt Office binary format and when the Offi...

Microsoft PowerPoint .dll Insecure Library Loading (MS11-073; CVE-2011-1980)

The vulnerability is due to insecure library loading issue in Microsoft PowerPoint. A remote attacker could trigger this flaw by convincing a victim to open a specially crafted PowerPoint file. Successful exploitation of this issue may allow execution of arbitrary code on a vulnerable system...

CVE-2010-1980

Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr comjoomlaflickr component 1.0.3 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1980

CVE-2010-1980 is a Local File Inclusion vulnerability in the Joomla! Flickr (com_joomlaflickr) component 1.0.3 for Joomla!, documented as a directory traversal in joomlaflickr.php that allows an attacker to include and execute arbitrary local files via a .. in the controller parameter to index.ph...

CVE-2010-1980

creationtimestamp| type| source ---|---|--- 2010-04-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12085...

Debian DSA-1980-1 : ircd-hybrid/ircd-ratbox - integer underflow/denial of service

David Leadbeater discovered an integer underflow that could be triggered via the LINKS command and can lead to a denial of service or the execution of arbitrary code CVE-2009-4016 . This issue affects both, ircd-hybrid and ircd-ratbox. It was discovered that the ratbox IRC server is prone to a...

CVE-2009-1980

CVE-2009-1980 is an Oracle E-Business Suite vulnerability affecting Oracle Application Object Library in E-Business Suite 11.5.10.2, 12.0.6, and 12.1. The Oracle CPU July 2009 advisory fixes this issue. The Oracle E-Business Suite risk matrix shows a network-accessible vulnerability (HTTP) with a...