CVE-2013-1998

CVE-2013-1998 describes multiple buffer overflow flaws in X.Org X11 libXi (versions 1.7.1 and earlier) that could allow a crafted input to crash an X server or potentially execute code via XGetDeviceButtonMapping, XIPassiveGrabDevice, and XQueryDeviceState. Public advisories (ALAS-2014-452, CentO...

Ubuntu Update for libxi USN-1859-1

Check for the Version of libxi OpenVAS Vulnerability Test $Id: gbubuntuUSN18591.nasl 8466 2018-01-19 06:58:30Z teissa $ Ubuntu Update for libxi USN-1859-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Fedora Update for libXi FEDORA-2013-9108

Check for the Version of libXi OpenVAS Vulnerability Test Fedora Update for libXi FEDORA-2013-9108 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora 19 : libXi-1.7.1-4.20130524git661c45ca1.fc19 (2013-9046)

Udpate to git snapshot to fix CVE-2013-1984, CVE-2013-1995, CVE-2013-1998 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] [DSA 2683-1] libxi security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2683-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2683-1] libxi security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2683-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...

CVE-2012-1998

Technical details for CVE-2012-1998 are not publicly available in the provided documents. No concrete affected product/version or root cause is given here. Monitor for updates.

More VMware ESX Source Code Posted Online

For the third time this year, VMware ESX source code has been posted online. A hacker known as Stun claiming to be affiliated with Anonymous tweeted a link to a torrent site hosting the stolen VMkernel source code. VMware director of platform security Iain Mulholland acknowledged the breach on...

CVE-2011-1998

CVE-2011-1998 maps to a remote-code-execution vulnerability in Microsoft Internet Explorer 9 (Jscript9.dll memory handling). Root cause: memory corruption from improper handling of an initialized object in memory. Impact: remote attackers could execute arbitrary code via a malicious webpage. Miti...

Microsoft Internet Explorer Jscript9.dll内存破坏漏洞(MS11-081)

BUGTRAQ ID: 49963 CVE ID: CVE-2011-1998 Microsoft Internet Explorer简称MSIE，是微软公司推出的一款网页浏览器。 IE在Jscript9.dll的实现上存在内存破坏漏洞，远程攻击者可利用此漏洞远程代码，导致拒绝服务。 Microsoft Internet Explorer 9.x Microsoft Internet Explorer 8.x Microsoft Internet Explorer 7.x Microsoft Internet Explorer 6.x 临时解决方法：...

Microsoft Internet Explorer Multiple Vulnerabilities (2586448)

This host is missing a critical security update according to Microsoft Bulletin MS11-081. OpenVAS Vulnerability Test $Id: secpodms11-081.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 2586448 Authors: Veerendra G.G Copyright: Copyright c 2011 SecPod...

Internet Explorer Jscript9.dll Memory Corruption (MS11-081; CVE-2011-1998)

A memory corruption vulnerability has been reported in Internet Explorer. The vulnerability is due to an error in the way IE accesses an object that has not been correctly initialized. A remote attacker may exploit this vulnerability by enticing a user to open a malicious web-page with an affecte...

Moonlight Maze

Starting in 1998, U.S. government officials began noticing a pattern of probes into various government networks, including the Pentagon, NASA, universities, research institutions and the Department of Energy. Evidently, hackers – believed to be located in Russia – had compromised these networks a...

CMS IneDuCom SQL Injection

Exploit Title: SQLi to CMS IneDuCom ================================================================ Websites designed or CMS provided by HYM is vulnerable to sqli. HYM is from 1998, they provide services in online tech and software.They provide CMS and Rankstinger...

HYM CMS SQL Injection Vulnerability

Exploit for php platform in category web applications =================================== HYM CMS SQL Injection Vulnerability =================================== Exploit Title: SQLi to CMS/websites designed by HYM ================================================================ Websites designed ...

CVE-2010-1998

CVE-2010-1998 affects the Drupal CCK TableField module (6.x) prior to 6.x-1.2. The vulnerability is an XSS via table headers that remote authenticated users with certain node creation/editing privileges can exploit to inject arbitrary script/HTML. The NVD entry lists a low base score (CVSS2: 2.1,...

Debian: Security Advisory (DSA-1998-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 11 Security Update : gmime (SAT Patch Number 1998)

This update of gmime fixes a buffer overflow in the GMIMEUUENCODELEN macro which allowed possible code execution while processing uuencoded data. CVE-2010-0409: CVSS v2 Base Score: 5.8 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian Security Advisory DSA 1998-1 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory DSA 1998-1. OpenVAS Vulnerability Test $Id: deb19981.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1998-1 kdelibs Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian DSA-1998-1 : kdelibs - buffer overflow

Maksymilian Arciemowicz discovered a buffer overflow in the internal string routines of the KDE core libraries, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debi...