CentOS Update for quagga CESA-2012:1258 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for libxslt CESA-2012:1265 centos6

Check for the Version of libxslt OpenVAS Vulnerability Test CentOS Update for libxslt CESA-2012:1265 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

RedHat Update for libxslt RHSA-2012:1265-01

Check for the Version of libxslt OpenVAS Vulnerability Test RedHat Update for libxslt RHSA-2012:1265-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2011-5169

SQL injection vulnerability in sgms/reports/scheduledreports/configure/scheduleProps.jsp in SonicWall ViewPoint 6.0 SP2 allows remote attackers to execute arbitrary SQL commands via the scheduleID parameter...

CVE-2011-5167

Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control TTF16.ocx 6.3.5 Build 1 in Oracle Hyperion Strategic Finance 12.x and possibly earlier allows remote attackers to execute arbitrary code via a long string to the DriverName parameter...

CVE-2011-5162

Stack-based buffer overflow in GOM Player 2.1.33.5071 allows user-assisted remote attackers to execute arbitrary code via a .ASX file with a long URI in the "ref href" tag. NOTE: this issue exists because of a CVE-2007-0707 regression...

SonicWall Viewpoint 'scheduleID' Parameter SQL Injection Vulnerability

SQL injection vulnerability in sgms/reports/scheduledreports/configure/scheduleProps.jsp in SonicWall ViewPoint 6.0 SP2 allows remote attackers to execute arbitrary SQL commands via the scheduleID parameter. CVE: CVE-2011-5169 Last updated: Sept. 17, 2012, 3:14 p.m...

CVE-2011-5172

CVE-2011-5172 affects StoryBoard Quick 6 Build 3786 (and possibly StoryBoard Artist/Studio). The issue is a stack-based buffer overflow in the handling of the string element field in a frame XML file, allowing remote attackers to execute arbitrary code. Exploitation details are not provided in th...

CVE-2011-5171

CVE-2011-5171 affects CyberLink Power2Go 7 (build 196) and 8 (build 1031). The issue arises from multiple stack-based buffer overflows in parsing a p2g project file, specifically via the src and name parameters, enabling remote code execution when a crafted file is opened. Public details confirm ...

CVE-2011-5167

CVE-2011-5167 describes a heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) version 6.3.5 Build 1 used by Oracle Hyperion Strategic Finance 12.x (and possibly earlier). An attacker could trigger arbitrary code execution by supplying a lo...

CVE-2011-5174

CVE-2011-5174 : A buffer overflow in Intel Trusted Execution Technology (TXT) SINIT Authenticated Code Modules (ACM) affects multiple Intel chipsets (Q67, Q57, Q35, QM/QS variants, GM/PM/GS families, X58/5520/5500/7500, etc.) and their associated SINIT ACM binaries (e.g., 51.BIN variants). The ro...

CVE-2011-5166

Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the 1 USER, 2 PASS, 3 REIN, 4 QUIT, 5 PORT, 6 PASV, 7 TYPE, 8 STRU, 9 MODE, 10 RETR, 11 STOR, 12 APPE, 13 ALLO, 14 REST, 15 RNFR, 16 RNTO, 17 ABOR, 18 DELE, 19 CWD, 20 LIST, ...

CVE-2011-5176

Banana Dance’s search.php contains multiple XSS vulnerabilities exploitable via the q and category parameters. Affected: versions prior to B.1.5. Root cause: insufficient input sanitization in search.php. Impact: remote injection of arbitrary script/HTML. Remediation: upgrade to B.1.5 or newer; a...

CVE-2011-5175

CVE-2011-5175 affects Banana Dance prior to version B.1.5, with a vulnerability in the file search.php where the category parameter enables an SQL injection. The root cause is unsafe handling/concatenation of user input in the query, allowing remote attackers to execute arbitrary SQL commands. Th...

CVE-2011-5168

Banana Dance is affected by CVE-2011-5168 via the user.php file. The issue enables SQL injection through the id parameter, allowing arbitrary SQL execution. The known remediation is to upgrade Banana Dance to version B.1.5 or later; a temporary workaround is to restrict access to the user.php fil...

CVE-2011-5164

The CVE-2011-5164 entry concerns a stack-based buffer overflow in VanDyke Software AbsoluteFTP. The authenticated/remote issue affects AbsoluteFTP versions 1.9.6 through 2.2.10 and is triggered by a crafted file name in a LIST command response, allowing a remote FTP server to execute arbitrary co...

CVE-2011-5175

SQL injection vulnerability in search.php in Banana Dance, possibly B.1.5 and earlier, allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2011-5162

GOM Player 2.1.33.5071 is affected by a stack-based buffer overflow in the ASX ref href handling, allowing user‑assisted remote code execution via a crafted ASX file with a long URI. The issue is described as a regression from CVE-2007-0707. Affected component: parsing of the ASX file’s ref href ...

CVE-2011-5163

CVE-2011-5163 is a buffer overflow in a third-party component used by the CitectSCADA Batch server and MX4 SCADA Batch module. Affected products include Schneider Electric CitectSCADA up to version 7.20 and Mitsubishi MX4 SCADA up to version 7.20; vulnerability arises from an overly long input st...

CVE-2011-5170

CVE-2011-5170 is a stack-based buffer overflow in Castillo Bueno Systems’ CCMPlayer 1.5 triggered by a long track name in an M3U playlist, enabling remote code execution. The connected documents confirm the vulnerability details and show public exploit activity, including a Metasploit module for ...