CVE-2011-3934

Double free vulnerability in the vp3updatethreadcontext function in libavcodec/vp3.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted vp3 data...

GLSA-201312-02 : BusyBox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201312-02 BusyBox: Multiple vulnerabilities Multiple vulnerabilities have been discovered in BusyBox. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could send a specially crafted DHCP...

AutoSec Tools V-CMS inline_image_upload.php PHP File Upload And Execution (CVE-2011-4828)

An arbitrary file upload vulnerability has been reported in AutoSec Tools V-CMS...

Mandriva Linux Security Advisory : memcached (MDVSA-2013:280)

A vulnerability was found and corrected in memcached : Memcached is vulnerable to a denial of service as it can be made to crash when it receives a specially crafted packet over the network CVE-2011-4971. The updated packages for Enterprise Server 5 has beed patched to resolve this flaw. The...

MGASA-2013-0339 Updated memcached packages fix CVE-2011-4971

Updated memcached packages fix security vulnerability: Memcached is vulnerable to a denial of service as it can be made to crash when it receives a specially crafted packet over the network CVE-2011-4971. The updated packages have been upgraded to the 1.4.15 version and patched to resolve this fl...

Updated memcached packages fix CVE-2011-4971

Updated memcached packages fix security vulnerability: Memcached is vulnerable to a denial of service as it can be made to crash when it receives a specially crafted packet over the network CVE-2011-4971. The updated packages have been upgraded to the 1.4.15 version and patched to resolve this fl...

Mandriva Linux Security Advisory : pmake (MDVSA-2013:271)

Updated pmake package fixes security vulnerability : The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and earlier, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/depend temporary file, related to bsd.lib.mk and bsd.prog.mk CVE-2011-1920...

Updated pmake packages fix CVE-2011-1920

Updated pmake package fixes security vulnerability: The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and earlier, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/depend temporary file, related to bsd.lib.mk and bsd.prog.mk CVE-2011-1920...

SuSE Update for kernel openSUSE-SU-2013:0925-1 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse201309251.nasl 8448 2018-01-17 16:18:06Z teissa $ SuSE Update for kernel openSUSE-SU-2013:0925-1 kernel Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program ...

Fedora 20 : bip-0.8.9-1.fc20 (2013-21006)

Upstream v0.8.9 - CVE-2013-4550 - failed SSL handshake resource leak Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

ESXi 5.0 < Build 764879 Multiple Vulnerabilities (remote check)

The remote VMware ESXi 5.0 host is affected by the following security vulnerabilities : - Errors exist in the Libxml2 library functions 'xmlXPathNextPrecedingSibling', 'xmlNodePtr' and 'xmlXPathNextPrecedingInternal' that could allow denial of service attacks or arbitrary code execution...

ESXi 5.0 < Build 1022489 Multiple Vulnerabilities (remote check)

The remote VMware ESXi 5.0 host is affected by the following vulnerabilities : - An off-by-one overflow condition exists in the xmlXPtrEvalXPtrPart function due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, via a specially crafted XML file, t...

ESXi 5.0 < Build 515841 Multiple Vulnerabilities (remote check)

The remote VMware ESXi 5.0 host is affected by the following security vulnerabilities : - A security bypass vulnerability exists in the e1000 driver in the Linux kernel due to improper handling of Ethernet frames that exceed the MTU. An unauthenticated, remote attacker can exploit this, via...

ARC PcVue ActiveX Control SCADA Remote Code Execution (CVE-2011-4042; CVE-2011-4043 ; CVE-2011-4044; CVE-2011-4045)

A buffer overflow vulnerability has been reported in SCADA ARC PcVue...

Ubuntu Update for libav USN-2011-1

Check for the Version of libav OpenVAS Vulnerability Test $Id: gbubuntuUSN20111.nasl 8526 2018-01-25 06:57:37Z teissa $ Ubuntu Update for libav USN-2011-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

JVN#28467717: Page Scroller vulnerable to cross-site scripting

Page Scroller from coliss is a script that uses jQuery. In addition to Page Scroller being avaliable just as a script, it is also available as a ZIP archive that includes jQuery and demo files. The jQuery included in the ZIP archive contains a known cross-site scripting vulnerability CVE-2011-496...

CVE-2011-5267

Multiple cross-site scripting XSS vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, as used in WikiWig 5.01 and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the 1 topdict or 2 torlist parameter. NOTE: this issue might b...

CVE-2011-5267

CVE-2011-5267: Multiple XSS vulnerabilities in the SpellChecker module (spell-check-savedicts.php) of Xinha, used in WikiWig 5.01 and possibly other products. Attacks could inject script/HTML via (1) to_p_dict or (2) to_r_list parameters. The issue may be related to the htmlarea plugin and is lin...

[SECURITY] [DSA 2783-2] librack-ruby regression update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - -------------------------------------------------------------------------- Debian Security Advisory DSA-2783-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso October 24, 2013 http://www.debian.org/security/faq -...

CVE-2011-4106

TimThumb (timthumb.php) prior to version 2.0 contains a flaw where the code does not validate the entire image source against the domain whitelist. This allows a remote attacker to craft a URL with a whitelisted domain in the src parameter to upload and subsequently access a file in the cache dir...