CVE-2011-2908

Cross-site request forgery CSRF vulnerability in the JMX Console jmx-console in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users for requests that...

Fedora Update for libsocialweb FEDORA-2012-17746

Check for the Version of libsocialweb OpenVAS Vulnerability Test Fedora Update for libsocialweb FEDORA-2012-17746 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for libsocialweb FEDORA-2012-17746

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-4612

icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc error.log via a crafted URL...

CVE-2011-4612

icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc error.log via a crafted URL...

Mandriva Linux Security Advisory : libproxy (MDVSA-2012:172)

A vulnerability has been discovered and corrected in libproxy : Stack-based buffer overflow in the url::getpac function in url.cpp in libproxy 0.4.x before 0.4.9 allows remote servers to have an unspecified impact via a large proxy.pac file CVE-2012-4504. The updated packages have been patched to...

CVE-2011-5244

Multiple off-by-one errors in the 1 token and 2 linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a DVI file containi...

CVE-2011-2486

nspluginwrapper before 1.4.4 does not properly provide access to NPNVprivateModeBool variable settings, which could prevent Firefox plugins from determining if they should run in Private Browsing mode and allow remote attackers to bypass intended access restrictions, as demonstrated using Flash...

CVE-2011-0433

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics AFM...

AZL-7377 CVE-2011-0433 affecting package t1lib 5.1.2-28

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics AFM...

CVE-2011-2486

nspluginwrapper before 1.4.4 does not properly provide access to NPNVprivateModeBool variable settings, which could prevent Firefox plugins from determining if they should run in Private Browsing mode and allow remote attackers to bypass intended access restrictions, as demonstrated using Flash...

CVE-2011-2486

Summary: CVE-2011-2486 affects nspluginwrapper prior to 1.4.4. The flaw lies in incorrect handling of NPNVprivateModeBool, which can prevent Firefox plugins from correctly determining Private Browsing state, enabling remote attackers to bypass access restrictions (as demonstrated with Flash). Imp...

CVE-2011-0433

CVE-2011-0433 is a heap-based buffer overflow in the linetoken function of afmparse.c within t1lib, impacting teTeX 3.0.x and GNOME Evince (and possibly others). An attacker could cause a crash or execute arbitrary code by processing a DVI file containing a crafted AFM file. The issue is part of ...

CVE-2011-5244

CVE-2011-5244 describes multiple off-by-one errors in t1lib's AFM parser (backend/dvi/mdvi-lib/afmparse.c), specifically in the token and linetoken functions, which are used by teTeX 3.0.x and GNOME Evince among others. The vulnerability allows remote attackers to crash a DVI reader and potential...

Microsoft Excel 'SerAuxErrBar'堆溢出远程代码执行漏洞(MS12-076)

BUGTRAQ ID: 56425 CVE ID: CVE-2012-1885 Excel是微软公司的办公软件的试算表软件组件。 Microsoft Excel 2003 SP3、2007 SP2/SP3、2010 SP1、Office 2008/2011 for Mac、Office Compatibility Pack SP2\SP3存在堆缓冲区溢出漏洞，通过特制的电子表格，可允许远程攻击者执行任意代码。 0 Microsoft Excel 2010 Microsoft Excel 2003 Microsoft Office Microsoft Office 2003 Profess...

Nginx Location NTFS Extended Attributes Security Bypass (CVE-2011-4963)

A design weakness vulnerability has been reported in nginx HTTP Server. The vulnerability is due to an error when handling specially crafted HTTP requests. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP request to the target. Successful exploitation can lea...

SCADA ICONICS WebHMI ActiveX Stack Overflow (CVE-2011-2089)

A code execution vulnerability exists in ICONICS WebHMI's ActiveX control. The vulnerability occurs in GenVersion.dll due to improper bounds checking before the input is copied onto the stack. A remote attacker could exploit this vulnerability by sending a long string of data to the...

Novell GroupWise Internet Agent iCalendar Parsing Denial of Service (CVE-2011-3827)

A denial of service vulnerability has been reported in Novell GroupWise Internet Agent...

QuickTime < 7.7.3 Multiple Vulnerabilities (Windows)

Binary data 6620.prm...

VMSA-2012-0016 : VMware security updates for vSphere API and ESX Service Console

a. VMware vSphere API denial of service vulnerability The VMware vSphere API contains a denial of service vulnerability. This issue allows an unauthenticated user to send a maliciously crafted API request and disable the host daemon. Exploitation of the issue would prevent management activities o...