Fedora 19 : xen-4.2.2-5.fc19 (2013-8513)

xend toolstack doesn't check bounds for VCPU affinity XSA-56, CVE-2013-2072 xen-devel should require libuuid-devel, pygrub menu items can include too much text Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora Update for xen FEDORA-2013-8571

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2013-8571 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for xen FEDORA-2013-8590

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2013-8590 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

CVE-2012-2072

Cross-site scripting XSS vulnerability in the Share Buttons AddToAny module 6.x-3.x before 6.x-3.4 for Drupal allows remote authenticated users with the administer addtoany permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2072

The CVE-2012-2072 issue affects the Drupal Share Buttons (AddToAny) module (6.x-3.x series) prior to version 6.x-3.4. The root cause is improper sanitization of user-provided data, enabling cross-site scripting (XSS) by remote authenticated users who have the administer addtoany permission. Impac...

CVE-2012-2072

Cross-site scripting XSS vulnerability in the Share Buttons AddToAny module 6.x-3.x before 6.x-3.4 for Drupal allows remote authenticated users with the administer addtoany permission to inject arbitrary web script or HTML via unspecified vectors...

SA-CONTRIB-2012-045 - AddToAny - Cross Site Scripting

CVE: CVE-2012-2072 This module enables you to add Lockerz/AddToAny's universal sharing buttons to your site. Previously, the module did not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fac...

CVE-2011-2072

CVE-2011-2072 results from a memory leak in the SIP processing path of Cisco IOS Software, Cisco IOS XE Software, and Cisco Unified Communications Manager (CUCM). Affected products include Cisco IOS (and IOS XE) platforms configured to process SIP messages, and CUCM 6.x/7.x with CUCM 8.x also imp...

Debian DSA-2072-1 : libpng - several vulnerabilities

Several vulnerabilities have been discovered in libpng, a library for reading and writing PNG files. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-1205 It was discovered a buffer overflow in libpng which allows remote attackers to execute arbitrar...

CVE-2010-2072

Pyftpd 0.8.4 creates log files with predictable names in a temporary directory, which allows local users to cause a denial of service and obtain sensitive information...

CVE-2010-2072

Pyftpd 0.8.4 is affected by a vulnerability where log files are created with predictable names in a temporary directory, enabling local users to cause a denial of service and access sensitive information. The issue stems from insecure temporary-file handling. A fix exists in 0.8.5 and later; upgr...

CVE-2009-2072

CVE-2009-2072 affects Apple Safari. The vulnerability: Safari may display a lock icon for an HTTPS site without requiring a cached certificate, allowing a man-in-the-middle to spoof an arbitrary HTTPS site by sending a crafted (1) 4xx or (2) 5xx CONNECT response page through a proxy. This is docu...

CVE-2008-2072

CVE-2008-2072 describes a Cross-site scripting (XSS) vulnerability in index.php of Virtual Design Studio vlbook 1.21, allowing remote attackers to inject arbitrary web script or HTML via the l parameter. The entry notes this is a different vector from CVE-2006-3260, and the affected component is ...

CVE-2008-2072

creationtimestamp| type| source ---|---|--- 2008-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5529...

CVE-2007-2072

CVE-2007-2072 affects Ivan Gallery Script 0.1. The vulnerability is a PHP remote file inclusion in index.php via the dir parameter, allowing a remote attacker to execute arbitrary PHP code. The issue is tied to how dir is used in the script; some sources dispute the claim, contending the dir vari...

CVE-2006-2072

Affected software: DeleGate 9.x until 9.0.6 and 8.x until 8.11.6. Vulnerability: remote attacker can cause DoS by processing crafted DNS responses that trigger a buffer over-read or infinite recursion, leading to segmentation fault or invalid memory access (demonstrated by PROTOS DNS tests). Expl...

DeleGate DNS Response Message DoS

The remote host is running Delegate, a multi-application proxy. The remote version of this software is vulnerable to a denial of service when processing invalid DNS responses. An attacker may exploit this flaw to disable this service remotely. To exploit this flaw, an attacker would need to be ab...

CVE-2002-2072

java.security.AccessController in Sun Java Virtual Machine JVM in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service JVM crash via a Java program that calls the doPrivileged method with a null argument...

CVE-2002-2072

The CVE-2002-2072 entry concerns Sun/Oracle Java VM behavior: Java code calling java.security.AccessController.doPrivileged with a null argument in JRE 1.2.2 and 1.3.1 can trigger a JVM crash, resulting in a denial of service. Impact is stated as JVM crash (availability impact). The available doc...

CVE-2005-2072

CVE-2005-2072 affects the runtime linker (ld.so) in Solaris 8, 9, and 10, where LD_AUDIT in setuid/setgid contexts can be abused to gain privileges (including by using a long LD_AUDIT value). Connected advisories list vendor patches addressing this: Solaris 8/9/10 patches 109147-44, 109148-42, 11...