20527 matches found
Mozilla Multiple Products Malformed SVG Use After Free (CVE-2011-0084)
A remote code execution vulnerability has been reported in Mozilla Firefox, Seamonkey and Thunderbird...
CVE-2011-4885
creationtimestamp| type| source ---|---|--- 2012-01-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18305 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/hashcollisiondos.rb 2022-10-27 07:57:28+00:00| seen|...
Fedora 15 : dhcp-4.2.1-14.P1.fc15 (2011-16976)
CVE-2011-4539 dhcpd: DoS due to processing certain regular expressions Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 16 : unbound-1.4.14-1.fc16 (2011-17282)
Security update for CVE-2011-4528 / VU209659 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
[BSA-061] Security Update for openswan
Harald Jenny uploaded new packages for openswan which fixed the following security problems: CVE-2011-4073 Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service pluto IKE daemo...
CVE-2011-3668
Cross-site request forgery CSRF vulnerability in postbug.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2rc1 allows remote attackers to hijack the authentication of arbitrary users for requests that create bug reports...
CVE-2011-3657
CVE-2011-3657 describes multiple XSS vulnerabilities in Bugzilla when debug mode is enabled. Affected products include Bugzilla 2.x and 3.x (up to 3.4.12/3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x before 4.0.3, and 4.1.x through 4.1.3). The flaws allow remote attackers to inject arbitr...
CVE-2011-3669
CVE-2011-3669 : CSRF vulnerability in Bugzilla’s attachment.cgi permits remote attackers to hijack the authentication of arbitrary users when uploading attachments. Affected software: Bugzilla 2.x, 3.x, and 4.x prior to 4.2rc1. Root cause: cross-site request forgery on the attachment upload path....
CVE-2011-3667
The User.offeraccountbyemail WebService method in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x before 4.0.3, and 4.1.x through 4.1.3, when createemailregexp is not empty, does not properly handle usercancreateaccount settings, which allows remote attackers to...
CVE-2011-3668
The CVE-2011-3668 entry describes a cross-site request forgery (CSRF) in Bugzilla’s post_bug.cgi function affecting Bugzilla 2.x, 3.x, and 4.x prior to 4.2rc1. Exploitation would allow remote attackers to hijack the authentication of arbitrary users to perform actions that create bug reports. The...
SEC Consult SA-20111230-0 :: Critical authentication bypass in Microsoft ASP.NET Forms - CVE-2011-3416
SEC Consult Vulnerability Lab Security Advisory 20111230-0 ======================================================================= title: Microsoft ASP.NET Forms Authentication Bypass product: Microsoft .NET Framework vulnerable version: Microsoft .NET Framework Version:4.0.30319; ASP.NET...
Microsoft ASP.NET and PHP Hash Collision Denial of Service - Specific (CVE-2011-3414)
A denial of service vulnerability has been reported in Microsoft ASP.NET and PHP. The vulnerability is caused due to the way common web framework implementations use hash tables to map parameters and values of web requests. A remote attacker may exploit this vulnerability by generating multiple...
[ MDVSA-2011:194 ] icu
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:194 http://www.mandriva.com/security/ Package : icu Date : December 27, 2011 Affected: 2010.1, 2011., Enterprise Server 5.0 Problem Description: A vulnerability has been discovered and corrected in icu: A...
WellinTech KingView 'HistoryServer.exe' Heap Based Buffer Overflow Vulnerability
This host is installed with KingView and is prone to heap based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbkingviewheapbofvuln.nasl 5931 2017-04-11 09:02:04Z teissa $ WellinTech KingView 'HistoryServer.exe' Heap Based Buffer Overflow Vulnerability Authors: Madhuri D Copyrigh...
Lighttpd Proof of Concept code for CVE-2011-4362
No description provided by source. 29 of November 2011 was the date of public disclosure interesting vulnerability in lighttpd server. Xi Wang discovered that modauth for this server does not propely decode characters from the extended ASCII table. The vulnerable code is below: "src/httpauth.c:67...
[ MDVSA-2011:193 ] squid
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:193 http://www.mandriva.com/security/ Package : squid Date : December 27, 2011 Affected: 2011. Problem Description: A vulnerability has been discovered and corrected in squid: The idnsGrokReply function in...
Lighttpd Proof of Concept code for CVE-2011-4362
29 of November 2011 was the date of public disclosure interesting vulnerability in lighttpd server. Xi Wang discovered that modauth for this server does not propely decode characters from the extended ASCII table. The vulnerable code is below: "src/httpauth.c:67" --- CUT --- static const short...
MITKRB5-SA-2011-008 buffer overflow in telnetd [CVE-2011-4862]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MITKRB5-SA-2011-008 MIT krb5 Security Advisory 2011-008 Original release: 2011-12-26 Last update: 2011-12-26 Topic: buffer overflow in telnetd CVE-2011-4862 CVSSv2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:F/RL:OF/RC:C CVSSv2 Base Score: 10 Access Vector:...
Mandriva Update for php MDVSA-2011:197 (php)
Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2011:197 php Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
[SECURITY] [DSA 2377-1] cyrus-imapd-2.2 security update
--------------------------------------------------------------------------- Debian Security Advisory DSA-2377-1 [email protected] http://www.debian.org/security/ Nico Golde Jan 1st, 2012 http://www.debian.org/security/faq -...