247 matches found
CVE-2012-5576
Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump XWD plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large 1 red, 2 green, or 3 blue color mask in an XWD file...
Fedora 18 : gimp-2.8.2-1.fc18 (2012-12293)
Among other things this update fixes security and stability issues in various image format loaders. Security issues fixed include CVE-2012-3403 and CVE-2012-3481. Overview of Changes from GIMP 2.8.0 to GIMP 2.8.2 ================================================= Core : - Make tag matching always...
Fedora 17 : gimp-2.8.2-1.fc17 (2012-12383)
Among other things this update fixes security and stability issues in various image format loaders. Security issues fixed include CVE-2012-3403 and CVE-2012-3481. Overview of Changes from GIMP 2.8.0 to GIMP 2.8.2 ================================================= Core : - Make tag matching always...
WebsiteBaker 2.8.2 Cross Site Scripting
Advisory: WebsiteBaker 2.8.2 SP2 HTTP-Referer XSS vulnerability Advisory ID: SSCHADV2012-003 Author: Stefan Schurtz Affected Software: Successfully tested on WebsiteBaker 2.8.2 SP2 Vendor URL: www.websitebaker2.org Vendor Status: fixed ========================== Vulnerability Description...
OpenX Administrative Interface Authentication Bypass Vulnerability
OpenX is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openx:openx";...
Security fix for the ALT Linux 5 package fuse version 2.8.2-alt1
Jan. 27, 2010 Denis Smirnov 2.8.2-alt1 - 2.8.2 - CVE-2009-3297 ALT 22834...
Design/Logic Flaw
The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a...
OpenX Arbitrary File Upload Vulnerability
OpenX is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately validate user- supplied input. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may facilitate...
CentOS Security Advisory CESA-2009:1503 (gpdf)
The remote host is missing updates to gpdf announced in advisory CESA-2009:1503. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
CVE-2009-2851
Cross-site scripting XSS vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via a comment author URL...
Design/Logic Flaw
libgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in the subject's 1 Common Name CN or 2 Subject Alternative Name SAN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued b...
Fedora 10 : wordpress-2.8.2-1.fc10 (2009-8114)
Tue Jul 28 2009 Adrian Reber - 2.8.2-1 - updated to 2.8.2 for security fixes - BZ 512900 - fixed 'wrong-script-end-of-line-encoding' of license.txt - correctly disable auto update check - fixed an error message from 'find' during the build - Mon Jul 27 2009 Fedora Release Engineering - 2.8.1-2 -...
Secunia Research: Orbit Downloader Long URL Parsing Buffer Overflow
====================================================================== Secunia Research 25/02/2009 - Orbit Downloader Long URL Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...
PT-2009-3039 · Sobi · Com Sobi2
Name of the Vulnerable Software and Affected Versions: com sobi2 version 2.8.2 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the bid parameter in a "showbiz" action to index.php. Recommendations: For version 2.8.2, at...
HP Linux Imaging and Printing System Security Bypass Vulnerability
This host is installed with HP Linux Imaging and Printing System and is prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodhplipsecbypassvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ HP Linux Imaging and Printing System Security Bypass Vulnerability Authors: Sujit Ghosal...
Mambo Component SOBI2 RC 2.8.2 (bid) SQL Injection Vulnerability
No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . +-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-+ | | | GaZa WiLL NeVeR DiE | | | | GoTo H3LL Israel & Usa | | | | Proud To Be A MusLiM , Proud To Be A EgYpTiaN | | |...
Epic Games Unreal Engine Logging Function - Remote Denial of Service
source: https://www.securityfocus.com/bid/25374/info The Unreal Engine is prone to a remote denial-of-service vulnerability because the application fails to properly bounds-check user-supplied input. Successfully exploiting this issue allows remote attackers to corrupt application memory in a...
CVE-2007-0649
Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such as conduct a remote file inclusion attacks via the srcdir parameter in custom/importxml.php or b...
Open Conference Systems = 2.8.2 Remote File Inclusion
Open Conference Systems = 2.8.2 Remote File Inclusion Download Source : http://pkp.sfu.ca/ocs/download/ocs-1.1.3.tar.gz Found By : TrZiNDaN Location : TurkeY -- [email protected] file ; importxml.php bugs ; at -- importxml.php includeonce"$srcdir/patient.inc"; includeonce"$srcdir/acl.inc"; exmp...