RHEL 3 : freetype (RHSA-2010:0577)

Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Important: Red Hat Security Advisory: freetype security update

Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

freetype security update

2.1.4-15.el3 - Add freetype-2.1.4-axis-name-overflow.patch Avoid overflow when dealing with names of axes - Resolves: 614014 2.1.4-14.el3 - Add freetype-2.1.4-CVE-2010-2527.patch Use precision for '%s' where appropriate to avoid buffer overflows - Resolves: 614014 2.1.4-13.el3 - Add...

Debian Security Advisory DSA 2070-1 (freetype)

The remote host is missing an update to freetype announced via advisory DSA 2070-1. OpenVAS Vulnerability Test $Id: deb20701.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2070-1 freetype Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Default credentials

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other...

CVE-2010-0595

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other...

Solaris Update for Sun XVR-2500 Graphics Accelerator 120927-16

Check for the Version of Sun XVR-2500 Graphics Accelerator OpenVAS Vulnerability Test Solaris Update for Sun XVR-2500 Graphics Accelerator 120927-16 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for Sun XVR-2500 Graphics Accelerator 120928-32

Check for the Version of Sun XVR-2500 Graphics Accelerator OpenVAS Vulnerability Test Solaris Update for Sun XVR-2500 Graphics Accelerator 120928-32 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for Sun XVR-2500 Graphics Accelerator 120928-32

Check for the Version of Sun XVR-2500 Graphics Accelerator OpenVAS Vulnerability Test Solaris Update for Sun XVR-2500 Graphics Accelerator 120928-32 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for Sun XVR-2500 Graphics Accelerator 120927-16

Check for the Version of Sun XVR-2500 Graphics Accelerator OpenVAS Vulnerability Test Solaris Update for Sun XVR-2500 Graphics Accelerator 120927-16 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for Sun XVR-2500 Graphics Accelerator 120928-31

Check for the Version of Sun XVR-2500 Graphics Accelerator OpenVAS Vulnerability Test Solaris Update for Sun XVR-2500 Graphics Accelerator 120928-31 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for Sun XVR-2500 Graphics Accelerator 120928-31

Check for the Version of Sun XVR-2500 Graphics Accelerator OpenVAS Vulnerability Test Solaris Update for Sun XVR-2500 Graphics Accelerator 120928-31 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Microsoft GDI+库图形文件处理多个缓冲区溢出和内存破坏漏洞(MS09-062)

BUGTRAQ ID: 36619,36645,36646,36648,36649,36650,36651,36647 CVE ID: CVE-2009-2500,CVE-2009-2501,CVE-2009-2502,CVE-2009-2503,CVE-2009-2504,CVE-2009-3126,CVE-2009-2528,CVE-2009-2518 Microsoft产品中所使用的GDI+库（GdiPlus.dll）通过基于类的API提供对各种图形方式的访问。...

CVE-2009-2500

This CVE corresponds to MS09-062: GDI+ WMF Integer Overflow Vulnerability. Affected are Microsoft GDI+ image-processing paths used by WMF, PNG, TIFF, BMP handling across Windows components and Office/Viewer products (e.g., IE6, Office suites, Visio, Project, SQL/Report Viewer, Forefront Client Se...

CVE-2008-2500

MOStlyContent Editor (MOStlyCE) for Mambo, prior to version 3.0, is affected by a Cross-site Scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The documents do not specify affected build numbers beyond “before 3.0,” no...

openSUSE 10 Security Update : gnash (gnash-3447)

This update fixes a denial of service problem in the free flash player gnash. CVE-2007-2500 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnash-3447. The text description of this plugin is C...

CVE-2007-2500

CVE-2007-2500 affects GNU Gnash 0.7.2 where a large number of SHOWFRAME elements inside a DEFINESPRITE in server/parser/sprite_definition.cpp triggers memory corruption and allows code execution by calling free with an arbitrary address. Public reports (NVD, SUSE, openSUSE NASL) describe memory c...

CVE-2007-2500

Removed by vendor...

CVE-2006-2500

Cross-site scripting XSS vulnerability in addnews.asp in CodeAvalanche News CANews 1.2 allows remote attackers to inject arbitrary web script or HTML via the Headline field. NOTE: if this issue is limited to administrators, and if it is expected behavior for administrators to be able to generate...

CVE-2006-2500

CANews 1.2 is affected by a Cross-Site Scripting (XSS) vulnerability in add_news.asp where the Headline field accepts input that can inject arbitrary script/HTML. The root cause is insufficient input sanitization for that field, enabling remote attackers to execute script in a victim’s browser. T...