CVE-2016-2570

The Edge Side Includes ESI parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP servers to cause a denial of service assertion failure and daemon exit via a crafted XML document, related to esi/CustomParser.cc and...

CVE-2014-2570

Cross-site scripting XSS vulnerability in www/makesubset.php in PHP Font Lib before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2014-2570

CVE-2014-2570 is an XSS in PHP Font Lib prior to 0.3.1. The vulnerability affects www/make_subset.php and allows remote injection of script/HTML via the name parameter. The affected library/version is PHP Font Lib before 0.3.1; a fix is available in the 0.3.1 release (e.g., commit d13682b7e27d14a...

Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2570-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2570-1 advisory. An issue was discovered in the HTML parser in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially...

CVE-2015-2570

Oracle Supply Chain Products Suite – Demand Planning component contains a vulnerability in the Security subcomponent that could let a remote attacker read, update, insert, or delete data and potentially cause denial of service. Affected: Demand Planning in the Oracle Supply Chain Products Suite (...

Zavio IP Cameras Firmware 1.6.03 - Multiple Vulnerabilities

No description provided by source. Core Security - Corelabs Advisory http://corelabs.coresecurity.com Zavio IP Cameras multiple vulnerabilities 1. Advisory Information Title: Zavio IP Cameras multiple vulnerabilities Advisory ID: CORE-2013-0302 Advisory URL:...

CVE-2014-2570 - php-font-lib 0.3 www/make_subset.php Reflected Cross Site Scripting

========================================================== php-font-lib - Subset maker makesubset.php Reflected Cross-site Scripting Revision 1.0 ========================================================== Author: Daniel C. Marques @0xc0da Release date: 2014-03-23 Reference:...

php-font-lib 'name'参数跨站脚本漏洞

Bugtraq ID:66380 CVE ID:CVE-2014-2570 php-font-lib是一款读取，解析，导出不同字体类型文件的PHP库。 通过"name" GET参数传递给www/makesubset.php的输入在返回用户之前缺少过滤，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可获取敏感信息或劫持用户会话。 0 php-font-lib 0.x php-font-lib 0.3.1已经修复该漏洞，建议用户下载更新： https://github.com/PhenX/php-font-lib...

php-font-lib 0.3 Cross Site Scripting

========================================================== php-font-lib - Subset maker makesubset.php Reflected Cross-site Scripting Revision 1.0 ========================================================== Author: Daniel C. Marques @0xc0da Release date: 2014-03-23 Reference:...

CVE-2013-2570

creationtimestamp| type| source ---|---|--- 2013-05-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25815...

Zavio IP Cameras Firmware 1.6.03 - Multiple Vulnerabilities

Core Security - Corelabs Advisory http://corelabs.coresecurity.com Zavio IP Cameras multiple vulnerabilities 1. Advisory Information Title: Zavio IP Cameras multiple vulnerabilities Advisory ID: CORE-2013-0302 Advisory URL:...

Zavio IP Cameras Firmware 1.6.03 - Multiple Vulnerabilities

Zavio IP Cameras Firmware 1.6.03 - Multiple Vulnerabilities Core Security - Corelabs Advisory http://corelabs.coresecurity.com Zavio IP Cameras multiple vulnerabilities 1. Advisory Information Title: Zavio IP Cameras multiple vulnerabilities Advisory ID: CORE-2013-0302 Advisory URL:...

Zavio IP Cameras multiple vulnerabilities

Advisory ID Internal CORE-2013-0302 1. Advisory Information Title: Zavio IP Cameras multiple vulnerabilities Advisory ID: CORE-2013-0302 Advisory URL:http://www.coresecurity.com/advisories/zavio-IP-cameras-multiple-vulnerabilities Date published: 2013-05-28 Date of last update: 2013-05-28 Vendors...

CVE-2012-2570

Cross-site scripting XSS vulnerability in productsmap.php in X-Cart Gold 4.5 allows remote attackers to inject arbitrary web script or HTML via the symb parameter...

CVE-2012-2570

CVE-2012-2570: X-Cart Gold 4.5 has an XSS in products_map.php via the symb parameter, allowing remote injection of arbitrary script/HTML. Impact stated as partial integrity; no exploitation details or patch/version remediation provided in the documents.

CVE-2012-2570

creationtimestamp| type| source ---|---|--- 2012-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20010 2012-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37522...

CVE-2010-2570

CVE-2010-2570 : A heap-based buffer overflow in pubconv.dll (Publisher Converter DLL) of Microsoft Publisher affects 2002 SP3, 2003 SP3, 2007 SP2, and 2010. A crafted Publisher file using an old format can trigger arbitrary code execution remotely. The issue is documented under MS10-103, which pr...

Microsoft Publisher Remote Code Execution Vulnerability (2292970)

This host is missing a critical security update according to Microsoft Bulletin MS10-103. OpenVAS Vulnerability Test $Id: secpodms10-103.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Publisher Remote Code Execution Vulnerability 2292970 Authors: Antu Sanadi Copyright: Copyright c 2010 SecPo...

Microsoft Office Publisher pubconv.dll Heap Overrun (MS10-103; CVE-2010-2570)

Microsoft Publisher is a desktop publishing application for creating marketing materials, managing customer lists and more. The vulnerability is due to an error in pubconv.dll, Publisher Converter DLL that is used to open Publisher files created in versions earlier than Microsoft Publisher 2007. ...

CVE-2009-2570

CVE-2009-2570: A stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control (WinFax\DCCFAXVW.DLL) in Symantec WinFax Pro 10.03 allows remote attackers to execute arbitrary code via a long argument to the AppendFax method. The connected Nessus/NASL entries confirm the affected ...