libtiff security update

3.9.4-6 - Add fixes for CVE-2012-2088, CVE-2012-2113 Resolves: 835748...

ZDI-11-211: Adobe Shockwave Shockwave 3d Asset.x32 DEMX Chunk 0xFFFFFF49 Field Remote Code Execution Vulnerability

ZDI-11-211: Adobe Shockwave Shockwave 3d Asset.x32 DEMX Chunk 0xFFFFFF49 Field Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-211 June 14, 2011 -- CVE ID: CVE-2011-2113 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Adobe -- Affected Products...

CVE-2011-2113

Multiple buffer overflows in the Shockwave3DAsset component in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary code via unspecified vectors...

CVE-2011-2113

CVE-2011-2113 affects Adobe Shockwave Player, specifically the Shockwave3DAsset component. It stems from buffer overflows/memory corruption in the Shockwave3DAsset/DEM X chunk handling, allowing arbitrary code execution. Affected product: Shockwave Player prior to 11.6.0.626. Vendor patch APSB11-...

CVE-2011-2113

Multiple buffer overflows in the Shockwave3DAsset component in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary code via unspecified vectors...

SuSE 11 Security Update : puppet (SAT Patch Number 2113)

pupped created temporary files with fixed names. Local attacks could exploit that to install symlinks that overwrite files of the victim. CVE-2010-0156 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

Debian: Security Advisory (DSA-2113-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2113-1 : drupal6 - several vulnerabilities

Several vulnerabilities have been discovered in Drupal 6 a fully-featured content management framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-3091 Several issues have been discovered in the OpenID module that allows malicious access to use...

CVE-2010-2113

The CVE-2010-2113 entry concerns Uniform Server 5.6.5 with multiple Cross-Site Request Forgery (CSRF) vulnerabilities. According to the sources, remote attackers can hijack administrator authentication to perform password-change requests via the following scripts: apsetup.php, psetup.php, sslpset...

CVE-2009-2113

FretsWeb 1.2 is affected by multiple SQL injection vulnerabilities exploitable via the name parameter to player.php and the hash parameter to song.php. The underlying issue is unsafe handling of these inputs that allows arbitrary SQL execution. Potential impact is remote arbitrary SQL commands; e...

CVE-2009-2113

creationtimestamp| type| source ---|---|--- 2009-06-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8980...

CVE-2008-2113

PHPEasyData 1.5.4 is affected by a SQL injection in annuaire.php via the cat_id parameter, enabling remote attackers to execute arbitrary SQL commands. The CVSSv2 base score is 7.5 (HIGH) with network attack vector and no authentication, and impacts to confidentiality, integrity, and availability...

CVE-2008-2113

creationtimestamp| type| source ---|---|--- 2008-05-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5552...

CVE-2007-2113

CVE-2007-2113 affects Oracle Database (Upgrade/Downgrade component, DBMS_UPGRADE_INTERNAL) and is described as a SQL injection vulnerability in Oracle Database 10.1.0.5. The issue allows remote authenticated users to execute arbitrary SQL via unknown vectors; the description notes this DB07 may c...

Indiana University Security Advisory: Fuji Xerox Printing Systems (FXPS) print engine vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Indiana University Security Advisory: Fuji Xerox Printing Systems FXPS1 print engine vulnerabilities Advisory ID: 20060824FXPSPrintEngineVulnerabilities2 Revisions: 08-24-2006 2350 UTC 1.0 Initial Public Release Issues: FTP bounce attack is possible...

CVE-2005-2113

XOOPS <= 2.0.11 is affected by an SQL injection in the XMLRPC loginUser function that lets remote attackers execute arbitrary SQL and bypass authentication via crafted XML (e.g., blogger.getPost). The issue is documented as CVE-2005-2113; severity is HIGH (CVSS v2: AV:N/AC:L/Au:N/C:P/I:P/A:P)....

CVE-2004-2113

BremsServer 1.2.4 is affected by an XSS vulnerability that allows a remote attacker to inject arbitrary web script or HTML via the URL. The impact is partial integrity violation with no confidentiality or availability impact as per the CVE metrics; no specific exploit details or patches are provi...