117 matches found
CVE-2015-2778
Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attackers to cause a denial of service crash via a long CTCP query containing only multibyte characters...
CVE-2015-2778
Quassel before 0.12-rc1 uses an incorrect data-type size when splitting a message, which allows remote attackers to cause a denial of service crash via a long CTCP query containing only multibyte characters...
CVE-2015-2778
CVE-2015-2778 affects Quassel prior to 0.12-rc1, where an incorrect data-type size is used when splitting messages. This allows remote attackers to trigger a denial of service (crash) via a long CTCP query containing only multibyte characters. Public reports in OSV and vendor advisories confirm t...
openSUSE Security Update : quassel (openSUSE-2015-294)
The IRC client quassel was updated to fix two security issues. The following vulnerabilities were fixed : - quassel could crash when receiving an overlength CTCP query containing only multibyte characters bnc924930 CVE-2015-2778 - quassel could incorrectly split a message in the middle of a...
CVE-2014-2778
CVE-2014-2778 affects Word 2007 SP3 and Office Compatibility Pack SP3. It allows remote attackers to execute arbitrary code or cause a denial of service through a crafted embedded font in a .doc/.docx document due to memory corruption. Affected products include Word 2007 SP3 and Office Compatibil...
Microsoft Office Word Remote Code Execution Vulnerability (2969261)
This host is missing an important security update according to Microsoft Bulletin MS14-034. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2013-2778
The CVE-2013-2778 entry describes a CSRF vulnerability in PHP Address Book 8.2.5, specifically in addressbook/register/delete_user.php, that allows remote attackers to hijack administrator authentication to delete accounts. This is distinct from CVE-2013-0135. Available connected documents (e.g.,...
Debian: Security Advisory (DSA-2363-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-2778
Tor vulnerability CVE-2011-2778 involves a heap-based buffer overflow in or/buffers.c that could allow remote code execution or memory corruption when using SocksPort or SOCKS proxy configuration. Affected product: Tor. Impact: remote attacker may cause memory corruption or execute arbitrary code...
[SECURITY] [DSA 2363-1] tor security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2363-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 16, 2011 http://www.debian.org/security/faq -...
CVE-2010-2778
This entry concerns CVE-2010-2778, a Cross-site Scripting (XSS) vulnerability in Novell GroupWise WebAccess. The affected products are GroupWise WebAccess 7.x prior to 7.0 post-SP4 FTF and 8.x prior to 8.0 SP2. The underlying issue is improper handling/sanitization of HTML in messages, allowing r...
CVE-2009-2778
Cross-site scripting XSS vulnerability in visitor/view.php in GarageSales Script allows remote attackers to inject arbitrary web script or HTML via the key parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-2778
CVE-2009-2778 describes a cross-site scripting (XSS) vulnerability in the GarageSales Script, specifically in the file visitor/view.php, exploitable via the key parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The cited sources confirm the vulnerable component ...
CVE-2009-2778
Cross-site scripting XSS vulnerability in visitor/view.php in GarageSales Script allows remote attackers to inject arbitrary web script or HTML via the key parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-2778
creationtimestamp| type| source ---|---|--- 2009-07-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9262...
Gentoo Security Advisory GLSA 200703-05 (mozilla)
The remote host is missing updates announced in advisory GLSA 200703-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200606-21 (mozilla-thunderbird)
The remote host is missing updates announced in advisory GLSA 200606-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-2778
SQL injection vulnerability in inc/classsearch.php in the Search System in RevokeBB 1.0 RC11 allows remote attackers to execute arbitrary SQL commands via the search parameter...
CVE-2008-2778
CVE-2008-2778 describes a SQL injection vulnerability in the RevokeBB 1.0 RC11 Search System, specifically in the file inc/class_search.php . The vulnerability allows remote attackers to send a crafted value to the search parameter and cause the application to execute arbitrary SQL commands. The ...