CVE-2014-2577

CVE-2014-2577 affects Bottomline Transform Foundation Server: multiple XSS vulnerabilities in Transform Content Center. Affected: Transform Foundation Server 4.3.1 (Patch 8) and 5.x (5.2 Patch 7). Vulnerable components/parameters include pn (document.pdf), db, referer (index.fsp), and PATH_INFO t...

Transform Foundation Server 4.3.1 / 5.2 Cross Site Scripting

I. VULNERABILITY ------------------------- Reflected XSS Attacks vulnerabilities in Transform Foundation server 4.3.1 and 5.2 from Bottomline Technologies II. BACKGROUND ------------------------- Bottomline offers powerful, next-generation electronic document solutions for formatting, personalizi...

Oracle Linux 6 : unbreakable enterprise kernel (ELSA-2013-2577)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-2577 advisory. kernel-uek 3.8.13-16.1.1.el6uek - dm snapshot: fix data corruption Mikulas Patocka Orabug: 17617582 CVE-2013-4299 Tenable has extracted the preceding descriptio...

XnView PCT File Processing Buffer Overflow (CVE-2013-2577)

A buffer overflow vulnerability exists in XnView. The vulnerability is due to a boundary error in processing image data in certain PCT files. An attacker can exploit this vulnerability by enticing a user to open a maliciously crafted file. A successful attack can lead to arbitrary code execution ...

XnView PCT File Handling Buffer Overflow Vulnerability

XnView is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xnview:xnview"; ifdescription...

CVE-2013-2577

CVE-2013-2577 is a buffer overflow in XnView’s PCT file handling affecting 2.03 and earlier. A crafted PCT file can cause remote code execution, as demonstrated by Core Security/CoreLabs advisories and public proofs of concept. Public exploits exist (e.g., Exploit-DB CORE-2013-0705/27049), with v...

KLA10403 ACE vulnerability in XnView

A buffer overflow was found in XnView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed PCT file. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products...

XnView 2.x < 2.04 Multiple Buffer Overflow Vulnerabilities

The version of XnView installed on the remote Windows host is 2.x, earlier than 2.04. It is, therefore, reportedly affected by the following overflow vulnerabilities: - An unspecified error exists that could allow a buffer overflow during 'PCT' file handling. CVE-2013-2577 - Unspecified errors...

CORE-2013-0705 - XnView Buffer Overflow Vulnerability

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ XnView Buffer Overflow Vulnerability 1. Advisory Information Title: XnView Buffer Overflow Vulnerability Advisory ID: CORE-2013-0705 Advisory URL: http://www.coresecurity.com/advisories/xnview-buffer-overflow-vulnerability Date...

XnView 2.03 - .pct Buffer Overflow

XnView 2.03 - .pct Buffer Overflow Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ XnView Buffer Overflow Vulnerability 1. Advisory Information Title: XnView Buffer Overflow Vulnerability Advisory ID: CORE-2013-0705 Advisory URL:...

CVE-2013-2577

creationtimestamp| type| source ---|---|--- 2013-07-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27049...

XnView 2.03 - '.pct' Buffer Overflow

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ XnView Buffer Overflow Vulnerability 1. Advisory Information Title: XnView Buffer Overflow Vulnerability Advisory ID: CORE-2013-0705 Advisory URL: http://www.coresecurity.com/advisories/xnview-buffer-overflow-vulnerability Date...

XnView 2.03 (.PCT) - Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc XnView Buffer Overflow Vulnerability 1. Advisory Information Title: XnView Buffer Overflow Vulnerability Advisory ID: CORE-2013-0705 Advisory URL: http://www.coresecurity.com/advisories/xnview-buffer-overflow-vulnerability Date published:...

XnView Buffer Overflow Vulnerability

Advisory ID Internal CORE-2013-0705 1. Advisory Information Title: XnView Buffer Overflow Vulnerability Advisory ID: CORE-2013-0705 Advisory URL:http://www.coresecurity.com/advisories/xnview-buffer-overflow-vulnerability Date published: 2013-07-22 Date of last update: 2013-07-22 Vendors contacted...

Debian DSA-2577-1 : libssh - several vulnerabilities

Multiple vulnerabilities were discovered in libssh by Florian Weimer and Xi Wang : - CVE-2012-4559: multiple double free flaws - CVE-2012-4561: multiple invalid free flaws - CVE-2012-4562: multiple improper overflow checks Those could lead to a denial of service by making an SSH client linked to...

SolarWinds Orion NPM < 10.3.1 Multiple Vulnerabilities

The remote web server hosts a version of SolarWinds Orion NPM prior to 10.3.1. It is, therefore, affected by the following vulnerabilities : - Multiple cross-site scripting vulnerabilities exist that allow arbitrary web scripts to be injected via the 'syslocation', 'syscontact', or 'sysName' fiel...

CVE-2012-2577

creationtimestamp| type| source ---|---|--- 2012-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20011...

Cisco TelePresence Multiple Vulnerabilities - SOS-11-010

Sense of Security - Security Advisory - SOS-11-010 Release Date. 19-Sep-2011 Last Update. - Vendor Notification Date. 21-Feb-2011 Product. Cisco TelePresence Series Platform. Cisco Affected versions. C = TC4.1.2, MXP = F9.1 Severity Rating. Low - Medium Impact. Cookie/credential theft,...

CVE-2011-2577

The CVE-2011-2577 issue affects Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs running TC

Sql injection

SQL injection vulnerability in groupadmin.php in Pligg before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the role parameter, a different vulnerability than CVE-2010-2577...