SuSE 10 Security Update : wireshark (ZYPP Patch Number 8168)

This version upgrade of wireshark fixes multiple denial of service flaws : - denial of service via memory alignment flaw. CVE-2012-2394 - DIAMETER memory allocation flaw. CVE-2012-2393 - denial of service in multiple dissectors / parsers Additionally, various other non-security bug fixes have bee...

CVE-2012-2394

creationtimestamp| type| source ---|---|--- 2012-05-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18920...

Debian Security Advisory DSA 2394-1 (libxml2)

The remote host is missing an update to libxml2 announced via advisory DSA 2394-1. OpenVAS Vulnerability Test $Id: deb23941.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2394-1 libxml2 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2394-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-2394

CVE-2010-2394 affects Oracle Solaris 10. The connected Oracle CPU July 2010 advisory lists Solaris as impacted by a TCP/IP–related vulnerability that allows local users to affect availability. The CVSS base score is 4.7 (MEDIUM) with local attack vector and availability impact. The provided docum...

CVE-2009-2394

CVE-2009-2394 describes an SQL injection in cat.php of SMSPages 1.0 (Mr.Saphp Arabic Script Mobile 2.0). The vulnerability arises from unsafely handling the CatID parameter, allowing remote attackers to execute arbitrary SQL commands. Affected software is explicitly named as SMSPages 1.0 in Mr.Sa...

CVE-2009-2394

creationtimestamp| type| source ---|---|--- 2009-06-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9027...

CVE-2008-2394

CVE-2008-2394 affects TAGWORX.CMS 3.00.02. The vulnerability is described as multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via the following parameters: (1) cid in contact.php and (2) nid in news.php. This is documented across multiple sources (NVD, CV...

CVE-2008-2394

creationtimestamp| type| source ---|---|--- 2008-05-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5642...

CVE-2002-2394

InterScan VirusWall 3.6 for Linux and 3.52 for Windows is affected by a vulnerability that allows remote attackers to bypass antivirus protection and potentially execute arbitrary code through HTTP/1.1 chunked transfer encoding. Affected components: VirusWall on Linux (3.6) and Windows (3.52). Ro...

Apple Quicktime < 7.2 SMIL Remote Integer Overflow PoC

Exploit for multiple platform in category dos / poc ====================================================== Apple Quicktime SRC="available-sample.qtif" QTSRC="poc.smil" WIDTH="10" HEIGHT="10" PLUGINSPAGE=" www.apple.com/quicktime/download" TYPE="video/quicktime" /...

CVE-2006-2394

CVE-2006-2394 affects PHP Live Helper’s chat.php, where the PHPSESSID parameter enables cross-site scripting. The vulnerability allows remote attackers to inject arbitrary web script or HTML in the context of the affected site. Public references (including Exploit-DB) document a browser-executabl...

CVE-2004-2394

CVE-2004-2394 affects the passwd program (versions 0.68 and earlier). The root cause is an off-by-one error in the --stdin path, causing passwords to be truncated to the first 78 characters instead of 79, which reduces the brute-force search space. Remediation appears in connected advisories: Man...

CVE-2005-2394

The CVE-2005-2394 entry concerns CuteNews 1.3.6: the show_news.php script can disclose the server’s full path through an invalid archive parameter. This is a path disclosure vulnerability (network access, low complexity) with partial confidentiality impact and no integrity or availability impact ...

CVE-2004-2394

Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password instead of the first 79, which results in a small reduction of the search space required for brute force attacks...