20944 matches found
CVE-2009-5113
The CVE-2009-5113 entry describes a cross-site scripting (XSS) vulnerability in WebGlimpse, specifically in the wgarcmin.cgi component of WebGlimpse 2.18.7 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the DOC parameter. The available sources (NVD/NVD m...
CVE-2009-5112
CVE-2009-5112 affects WebGlimpse (version 2.18.7 and earlier). The issue allows remote attackers to disclose the installation path via a crafted request to wgarcmin.cgi. The description provided does not include exploit specifics beyond this disclosure vector. No patched version or remediation de...
CVE-2009-5114
WebGlimpse 2.18.7 and earlier is affected by a directory traversal vulnerability in wgarcmin.cgi that allows remote attackers to read arbitrary files via a .. in the DOC parameter. Affected component is WebGlimpse, version 2.18.7 and prior; root cause CWE-22 (path traversal). Impact per sources: ...
GLSA-201203-15 : gif2png: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201203-15 gif2png: Multiple vulnerabilities Two vulnerabilities have been found in gif2png: A boundary error in gif2png.c could cause a buffer overflow CVE-2010-4694. The patch for CVE-2009-5018 causes gif2png to truncate GIF...
CVE-2009-5112
creationtimestamp| type| source ---|---|--- 2012-03-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36976...
CUPS and Xpdf PDF JBIG2 Symbol Dictionary Buffer Overflow (CVE-2009-0195)
Memory corruption vulnerabilities have been discovered in Apple CUPS and Cog Xpdf. The vulnerabilities are due to the way multiple products handle malformed JBIG2 structures in PDF documents. A remote attacker could trigger this issue via a specially crafted PDF file. Successful exploitation will...
DJ Studio Pro 5.1 .pls Stack Buffer Overflow
This module exploits a stack-based buffer overflow in DJ Studio Pro 5.1.6.5.2. When handling a .pls file, DJ Studio will copy the user-supplied data on the stack without any proper bounds checking done beforehand, therefore allowing code execution under the context of the user. This module requir...
DJ Studio Pro 5.1 .pls Stack Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'DJ Studio Pro 5.1...
DJ Studio Pro 5.1 - '.pls' Local Stack Buffer Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'DJ Studio Pro 5.1...
ImageMagick security and bug fix update
6.2.8.0-12.el5 - Add fix for CVE-2010-4167 767142 6.2.8.0-11.el5 Fix assertion failed when using 'identify -verbose' when theres no image information available 502626 6.2.8.0-10.el5 Fix memory allocation failure when using color option 616538 Fix hang when converting broken GIF 693989 Fix...
RedHat Update for glibc RHSA-2012:0126-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
DJ Studio Pro 5.1.6.5.2 SEH Exploit MSF
Exploit for windows platform in category local exploits $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
DJ Studio Pro 5.1.6.5.2 - Local Overflow (SEH) (Metasploit)
DJ Studio Pro 5.1.6.5.2 - Local Overflow SEH Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
DJ Studio Pro 5.1.6.5.2 Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'DJ Studio Pr...
Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : libpng vulnerabilities (USN-1367-1)
It was discovered that libpng did not properly verify the embedded profile length of iCCP chunks. An attacker could exploit this to cause a denial of service via application crash. This issue only affected Ubuntu 8.04 LTS. CVE-2009-5063 Jueri Aedla discovered that libpng did not properly verify t...
USN-1367-1: libpng vulnerabilities
It was discovered that libpng did not properly verify the embedded profile length of iCCP chunks. An attacker could exploit this to cause a denial of service via application crash. This issue only affected Ubuntu 8.04 LTS. CVE-2009-5063 Jueri Aedla discovered that libpng did not properly verify t...
Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update
An updated rhev-hypervisor6 package that fixes multiple security issues and various bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
CentOS 4 : glibc (CESA-2012:0125)
Updated glibc packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
RHEL 5 : glibc (RHSA-2012:0126)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0126 advisory. The glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the...
Gentoo Security Advisory GLSA 201201-11 (fwbuilder)
The remote host is missing updates announced in advisory GLSA 201201-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...