110 matches found
Fedora 18 : libXext-1.3.1-3.20130524gitdfe6e1f3b.fc18 (2013-9166)
Update to latest git to fix the following CVEs: CVE-2013-1982 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
[SECURITY] [DSA 2682-1] libxext security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2682-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2682-1] libxext security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2682-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...
CVE-2013-1982
Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 XcupGetReservedColormapEntries, 2 XcupStoreColors, 3 XdbeGetVisualInfo, 4 XeviGetVisualInfo, 5 XShapeGetRectangles, and 6...
Debian: Security Advisory (DSA-2682-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Elk Cloner
1982 The first example of Apple malware can be traced back thirty years ago to a high school classroom in Mount Lebanon, Penn. It was there that Richard Skrenta, a student at Mt. Lebanon High School coded Elk Cloner, a virus that was passed around via the now archaic Apple II platform. The virus ...
CVE-2012-1982
Cross-site scripting XSS vulnerability in myadmin/admin1listpages.php in SocialCMS 1.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the TRtitle parameter in an edit action...
CVE-2012-1982
CVE-2012-1982 describes a cross-site scripting (XSS) vulnerability in SocialCMS 1.0.2 and earlier. The flaw is in the file my_admin/admin1_list_pages.php where an attacker with authenticated access can inject arbitrary web script or HTML via the TR_title parameter in an edit action. Affected soft...
SocialCMS <= 1.0.2 XSS (Persistent and Reflected) Vulnerabilities
Exploit for php platform in category web applications +------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : SocialCMS = 1.0.2 XSS Persistent and Reflected Vulnerabilities Date : 30-03-2012 Author :...
SocialCMS 1.0.2 Cross Site Scripting
+------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : SocialCMS = 1.0.2 XSS Persistent and Reflected Vulnerabilities Date : 30-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Vendor site :...
CVE-2011-1982
CVE-2011-1982 describes an uninitialized object pointer vulnerability in Microsoft Office (notably Office 2007 SP2, and Office 2010 Gold/SP1) that can allow remote code execution when opening Word documents via a crafted file. The underlying issue is an uninitialized pointer in MSO.dll triggered ...
MS11-073: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2587634)
The remote Windows host is running a version of Microsoft Office that is potentially affected by two vulnerabilities : - The application insecurely restricts the path used for loading external libraries when opening documents that use the .doc, .xls, or .ppt Office binary format and when the Offi...
Microsoft Office 'MSO.dll' Uninitialized Pointer (CVE-2011-1982) Remote Code Execution Vulnerability
Description Microsoft Office is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...
CVE-2010-1982
Directory traversal vulnerability in the JA Voice comjavoice component 2.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php...
CVE-2010-1982
Directory traversal vulnerability in the JA Voice comjavoice component 2.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php...
CVE-2010-1982
Joomla! JA Voice component (com_javoice) 2.0 is affected by a Directory Traversal (Local File Inclusion) vulnerability. The flaw allows an attacker to read arbitrary files by supplying a .. (dot dot) traversal sequence in the view parameter to index.php, enabling access to sensitive files. The CV...
CVE-2010-1982
creationtimestamp| type| source ---|---|--- 2010-04-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12121...
Debian DSA-1982-1 : hybserv - denial of service
Julien Cristau discovered that hybserv, a daemon running IRC services for IRCD-Hybrid, is prone to a denial of service attack via the commands option. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
Hybserv2 :help命令远程拒绝服务漏洞
BUGTRAQ ID: 38006 CVE ID: CVE-2010-0303 Hybserv2是改进版的Hybserv IRC服务器，可提供即时会话服务。 Hybserv2的mystring.c文件中存在拒绝服务漏洞，远程用户可以通过向MemoServ服务发送包含有help \t选项的私人消息导致守护程序崩溃。 Hybserv2 Hybserv2 1.9.4 Hybserv2 Hybserv2 1.9.3 Hybserv2 Hybserv2 1.9.2 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1982-1）以及相应补丁:...
CVE-2009-1982
CVE-2009-1982 affects Oracle E-Business Suite (11.5.10.2 and 12.0.6) via Oracle Applications Framework. The Oracle E-Business Suite risk matrix shows a network-exposed, remote‑exploit vulnerability (CVSS v2 base 4.3) that can affect integrity, with remediation via the July 2009 CPU patches. No ex...