GIMP XWD File Handling Stack Buffer Overflow - Ver2 (CVE-2012-5576)

A buffer overflow vulnerability has been reported in GNU Image Manipulation Program GIMP. The vulnerability is due to insufficient validation of certain fields while parsing XWD files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the...

Microsoft Windows MSCOMCTL.OCX ActiveX Control Remote Code Execution - Ver2 (CVE-2012-0158)

A code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to insufficient boundary check in the MSCOMCTL ActiveX control. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Visio DXF File Parsing Code Execution - Ver2 (CVE-2012-1888)

A code execution vulnerability has been reported in Microsoft Office Visio. The vulnerability is due to a boundary error in Microsoft Office Visio when parsing specially crafted DXF files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the...

Nokia PC Suite Video Manager Buffer Overflow - Ver2 (CVE-2012-2442)

A buffer overflow vulnerability has been reported in Nokia Pc Suite. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

CVE-2012-0214

The pkgAcqMetaClearSig::Failed method in apt-pkg/acquire-item.cc in Advanced Package Tool APT 0.8.11 through 0.8.15.10 and 0.8.16 before 0.8.16exp13, when updating from repositories that use InRelease files, allows man-in-the-middle attackers to install arbitrary packages by preventing a user fro...

CVE-2012-0214

CVE-2012-0214 affects apt (APT) 0.8.11–0.8.15.10 and 0.8.16 before 0.8.16~exp13, allowing a MITM attacker updating from InRelease-enabled repositories to trick the user into installing altered packages by keeping the old InRelease active. Impact: potential installation of arbitrary packages; no e...

Ubuntu: Security Advisory (USN-2166-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for samba4 CESA-2014:0383 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for samba4 CESA-2014:0383 centos6

Check for the Version of samba4 OpenVAS Vulnerability Test CentOS Update for samba4 CESA-2014:0383 centos6 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

PhpMyAdmin exploits concludes With Metasploit-vulnerability warning-the black bar safety net

A: affects versions: 3.5. x 3.5.8.1 and 4.0.0 4.0.0-rc3 Overview: PhpMyAdmin presence of a PREGREPLACEEVAL vulnerability Use module: exploit/multi/http/phpmyadminpregreplace CVE: CVE-2 0 1 3-3 2 3 8 II: effects version: phpMyAdmin v3. 5. 2. 2 Overview: PhpMyAdmin存在serversync.php Backdoor...

CVE-2012-6130

Cross-site scripting XSS vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related to generating a link...

CVE-2012-6131

Cross-site scripting XSS vulnerability in cgi/client.py in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the @action parameter to support/issue1...

CVE-2012-6130

The CVE-2012-6130 entry describes a Cross-site Scripting (XSS) in Roundup’s history display prior to version 1.4.20, allowing remote attackers to inject arbitrary web script or HTML via a username argument. Connected documents corroborate that Roundup up to 1.4.20 is affected (e.g., Debian DLA-29...

CVE-2012-6131

CVE-2012-6131 describes a Cross-site Scripting (XSS) vulnerability in Roundup, specifically in the file cgi/client.py of Roundup versions before 1.4.20 . The issue allows remote attackers to inject arbitrary web script or HTML via the @action parameter to support/issue1 . Documents consistently c...

CVE-2012-6130

Cross-site scripting XSS vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related to generating a link...

CentOS 6 : samba4 (CESA-2014:0383)

Updated samba4 packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CVE-2012-6132

CVE-2012-6132 is a reported XSS flaw in Roundup prior to version 1.4.20, exploitable via the otk parameter. The connected records corroborate that Roundup’s web interface accepts arbitrary scripts/HTML through otk, enabling remote script injection and partial integrity impact. Public details in t...

CVE-2012-4921

The CVE-2012-4921 entry concerns the WordPress plugin DVS Custom Notification (versions

RedHat Update for samba4 RHSA-2014:0383-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : samba4 (RHSA-2014:0383)

Updated samba4 packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...