pcre -- multiple vulnerabilities

PCRE development team reports: A pattern such as "?20,1999?", which has a group containing a forward reference repeated a large but limited number of times within a repeated outer group that has a zero minimum quantifier, caused incorrect code to be compiled, leading to the error "internal error:...

Ubuntu 14.04 LTS : OpenStack Nova vulnerability (USN-2325-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2325-1 advisory. Alex Gaynor discovered that OpenStack Nova would sometimes respond with variable times when comparing authentication tokens. If nova were configured to proxy...

Ubuntu: Security Advisory (USN-2325-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-2325

Affected product: Proxmox Mail Gateway. Vulnerability: reflected and stored XSS in multiple parameters. Details from connected docs: an attacker can inject arbitrary script/HTML via the (1) state parameter to objects/who/index.htm or (2) user email address to quarantine/spam/manage.htm. Versions:...

HP Data Protector CRS Opcode 235 Stack Buffer Overflow (CVE-2013-2325)

A stack buffer overflow has been discovered in HP Data Protector. The vulnerability exists in the Cell Request service crs.exe, which listens on a randomly chosen port. The application fails to sanitize input with opcode 235, which can result in a stack buffer overflow. A remote, unauthenticated...

[security bulletin] HPSBMU02883 SSRT101227 rev.1 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03781657 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03781657 Version: 1 HPSBMU02883...

CVE-2012-2325

SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel ACP in MyBB aka MyBulletinBoard before 1.6.7 allows remote administrators to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-2325

CVE-2012-2325 is a SQL injection vulnerability in the User Inline Moderation feature of the Admin Control Panel (ACP) in MyBB (MyBulletinBoard) , fixed in version 1.6.7. The flaw allows remote administrators to execute arbitrary SQL commands via unspecified vectors, impacting data confidentiality...

Debian Security Advisory DSA 2325-1 (kfreebsd-8)

The remote host is missing an update to kfreebsd-8 announced via advisory DSA 2325-1. OpenVAS Vulnerability Test $Id: deb23251.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2325-1 kfreebsd-8 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Code injection

Unspecified vulnerability in the EnterpriseOne Tools component in Oracle JD Edwards 8.98 SP 24 allows remote authenticated users to affect confidentiality, related to Enterprise Infrastructure SEC JDENET, a different vulnerability than CVE-2011-2325, CVE-2011-3509, and CVE-2011-3524...

CVE-2011-2325

Oracle JD Edwards sawkernel/JDENet vulnerability CVE-2011-2325 affects the JD Edwards 9.0 EnterpriseOne Server + EnterpriseOne Tools 8.98 (and older variants). A specially crafted packet to the JDENET/SAW kernel could disclose system credentials (passwords) and other confidential data, enabling r...

Debian DSA-2325-1 : kfreebsd-8 - privilege escalation/denial of service

Buffer overflow in the 'Linux emulation' support in FreeBSD kernel allows local users to cause a denial of service panic and possibly execute arbitrary code by calling the bind system call with a long path for a UNIX-domain socket, which is not properly handled when the address is used by other...

CVE-2010-2325

Cross-site scripting XSS vulnerability in the administrative console in IBM WebSphere Application Server WAS 7.0 before 7.0.0.11 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related in part to "URL injection."...

CVE-2010-2325

CVE-2010-2325 describes an XSS vulnerability in the IBM WebSphere Application Server (WAS) 7.0 administrative console on z/OS, affecting versions before 7.0.0.11. The issue is related to the admin UI and involves URL injection that can allow remote attackers to inject arbitrary web script or HTML...

Mac OS X Security Update 2008-005

The remote host is missing Security Update 2008-005. One or more of the following components are affected: Open Scripting Architecture BIND CarbonCore CoreGraphics Data Detectors Engine Disk Utility OpenLDAP OpenSSL PHP QuickLook rsync OpenVAS Vulnerability Test Mac OS X Security Update 2008-005...

Clicknet CMS 'index.php' Directory Traversal Vulnerability

Clicknet CMS is prone to a directory traversal vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

CVE-2009-2325

creationtimestamp| type| source ---|---|--- 2009-06-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9037...

CVE-2008-2325

QuickLook in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Microsoft Office file, related to insufficient "bounds checking."...

CVE-2008-2325

CVE-2008-2325 affects Apple Mac OS X QuickLook. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service by processing crafted Microsoft Office files, due to insufficient bounds checking in QuickLook on Mac OS X 10.4.11 and 10.5.4. Connected sources (OpenVA...

Apple Mac OS X 2008-005更新修复多个安全漏洞

BUGTRAQ ID: 30487,30488,30489,30490,30492,30493 CVECAN ID: CVE-2008-2320,CVE-2008-2321,CVE-2008-2322,CVE-2008-2323,CVE-2008-2324,CVE-2008-2325 Mac OS X是苹果家族机器所使用的操作系统。 Apple 2008-005安全更新修复了Mac OS X中的多个安全漏洞，本地或远程攻击者可能利用这些漏洞造成多种威胁。 CVE-2008-2320 处理超长文件名时的栈溢出漏洞可能导致应用意外终止或执行任意指令。 CVE-2008-2321...