CVE-2006-7245

Vulnerability: Monkey’s Audio before 4.01b2 is affected. A crafted APX file that lacks NULL termination can cause the application to crash (Denial of Service). Affected component: Monkey’s Audio parser/handling of APX files; root cause is missing NULL termination in APX processing. Impact is DoS ...

RedHat Update for gstreamer-plugins RHSA-2011:0477-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

USN-1126-2: PHP Regressions

USN 1126-1 fixed several vulnerabilities in PHP. The fix for CVE-2010-4697 introduced an incorrect reference counting regression in the Zend engine that caused the PHP interpreter to segfault. This regression affects Ubuntu 6.06 LTS and Ubuntu 8.04 LTS. The fixes for CVE-2011-1072 and CVE-2011-11...

CentOS 4 : gstreamer-plugins (CESA-2011:0477)

Updated gstreamer-plugins packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

gstreamer security update

CentOS Errata and Security Advisory CESA-2011:0477 Updated gstreamer-plugins packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CV...

RHEL 4 : gstreamer-plugins (RHSA-2011:0477)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0477 advisory. - libmodplug: Integer overflow when reading samples of AMF files CVE-2006-4192 - libmodplug: ReadS3M stack overflow vulnerability...

gstreamer-plugins security update

0.8.5-1.0.1.EL.3 - Update release to address ULN up2date 0.8.5-1.EL.3 - Add patches for CVE-2006-4192 and CVE-2011-1574 Related: rhbz 696507...

Sql injection

Multiple SQL injection vulnerabilities in list.asp in Softwebs Nepal aka Ananda Raj Pandey Ananda Real Estate 3.4 allow remote attackers to execute arbitrary SQL commands via the 1 city, 2 state, 3 country, 4 minprice, 5 maxprice, 6 bed, and 7 bath parameters, different vectors than CVE-2006-6807...

CVE-2010-4782

CVE-2010-4782 describes SQL injection vulnerabilities in Softwebs Nepal (Ananda Real Estate) 3.4 and earlier. The issue affects list.asp and allows remote attackers to execute arbitrary SQL commands via parameters such as city, state, country, minprice, maxprice, bed, and bath (vectors differ fro...

Gentoo Security Advisory GLSA 201006-01 (freetype)

The remote host is missing updates announced in advisory GLSA 201006-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201006-01 (freetype)

The remote host is missing updates announced in advisory GLSA 201006-01. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Allied Telesyn TFTP Server 1.9 Long Filename Overflow

Exploit for windows platform in category remote exploits $Id: attftplongfilename.rb 11882 2011-03-05 21:00:57Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informati...

CVE-2006-0395

creationtimestamp| type| source ---|---|--- 2011-03-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16870 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/email/mailappimageexec.rb 2025-02-06 03:13:38+00:00| seen|...

Allied Telesyn TFTP (AT-TFTP) Server/Daemon 1.9 - Long Filename Overflow (Metasploit)

$Id: attftplongfilename.rb 11882 2011-03-05 21:00:57Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Excel Crafted URL Unicode Buffer Overflow (MS06-050; CVE-2006-3086; CVE-2011-0104)

Microsoft Excel is a popular spreadsheet application. The application can create complex spreadsheets with multiple workbooks, formulas, and various data sources. The common extension used for Microsoft Excel documents is .xls. A buffer overflow vulnerability has been reported in Microsoft Excel...

CVE-2006-2961

creationtimestamp| type| source ---|---|--- 2011-02-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16713 2016-01-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39274 2018-05-29 15:50:33+00:00| seen|...

CVE-2006-3439

creationtimestamp| type| source ---|---|--- 2011-02-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16367 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms06040netapi.rb 2025-02-06 03:13:38+00:00| seen|...

Design/Logic Flaw

The extract function in PHP before 5.2.15 does not prevent use of the EXTROVERWRITE parameter to overwrite 1 the GLOBALS superglobal array and 2 the this variable, which allows context-dependent attackers to bypass intended access restrictions by modifying data structures that were not intended t...

FreeBSD Ports: php5

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2006-7243

PHP before 5.3.4 accepts a NUL (\0) in a pathname, enabling context-dependent bypass of access restrictions (example: .php\0.jpg) via file_exists; remediation involves upgrading to a fixed PHP version (5.3.4+; later advisories note 5.4.41+/5.5.x+/5.6.x fixes). The CVE-2015-4025/4026 entries ackno...