[SECURITY] [DSA 2555-1] libxslt security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2555-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 05, 2012 http://www.debian.org/security/faq -...

USN-1595-1: libxslt vulnerabilities

Chris Evans discovered that libxslt incorrectly handled generate-id XPath functions. If a user or automated system were tricked into processing a specially crafted XSLT document, a remote attacker could obtain potentially sensitive information. This issue only affected Ubuntu 8.04 LTS, Ubuntu 10....

Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

An updated rhev-hypervisor6 package that fixes multiple security issues and one bug is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Google Chrome Multiple Vulnerabilities - Sep12 (Windows-01)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnsep12win01.nasl 5888 2017-04-07 09:01:53Z teissa $ Google Chrome Multiple Vulnerabilities - Sep12 Windows-01 Authors: Madhuri D Copyright: Copyright c 2012...

Google Chrome Multiple Vulnerabilities - Sep12 (Mac OS X-01)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnsep12macosx01.nasl 5963 2017-04-18 09:02:14Z teissa $ Google Chrome Multiple Vulnerabilities - Sep12 Mac OS X-01 Authors: Madhuri D Copyright: Copyright c 2012...

FreeBSD : chromium -- multiple vulnerabilities (5bae2ab4-0820-11e2-be5f-00262d5ed8ee)

Google Chrome Releases reports : 143439 High CVE-2012-2889: UXSS in frame handling. Credit to Sergey Glazunov. 143437 High CVE-2012-2886: UXSS in v8 bindings. Credit to Sergey Glazunov. 139814 High CVE-2012-2881: DOM tree corruption with plug-ins. Credit to Chamal de Silva. 135432 High...

CVE-2012-2893

Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XSL transforms...

CVE-2012-2893

CVE-2012-2893 is a Double free vulnerability in libxslt, impacting Google Chrome (before 22.0.1229.79) via XSLT transforms. Exploitation could cause a denial of service and potentially other impacts; CVSS v2 base score 6.8 (Medium) from NVD. Related Nessus/Gentoo/Debian advisories enumerate libxs...

IBM Lotus Symphony < 3.0 Fix Pack 3 Multiple Vulnerabilities

The version of IBM Lotus Symphony was found to be less than 3.0 Fix Pack 3. Such versions are affected by multiple vulnerabilities: - Multiple unspecified vulnerabilities. CVE-2011-2884 - Opening a .doc document with a user defined toolbar can cause an application crash. CVE-2011-2885 - Opening a...

CVE-2011-2893

IBM Lotus Symphony DataPilot in version 3 before FP3 is affected by a denial of service when processing a large .xls with an invalid Value reference, allowing a user-assisted remote attacker to crash the application. The issue is tied to DataPilot parsing/handling of malformed Excel content. Reme...

CVE-2009-2893

Multiple cross-site scripting XSS vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote attackers to inject arbitrary web script or HTML via 1 the postevent parameter in a post action or 2 the xzcaly parameter...

CVE-2009-2893

CVE-2009-2893 affects XZero Community Classifieds 4.97.8. The vulnerability is a cross-site scripting (XSS) flaw in index.php that allows remote attackers to inject arbitrary script or HTML via (1) the postevent parameter in a post action, or (2) the _xzcal_y parameter. The public descriptions id...

CVE-2009-2893

creationtimestamp| type| source ---|---|--- 2009-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33110...

Fedora Update for bochs FEDORA-2007-1153

Check for the Version of bochs OpenVAS Vulnerability Test Fedora Update for bochs FEDORA-2007-1153 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for bochs FEDORA-2007-1778

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 200711-21 (bochs)

The remote host is missing updates announced in advisory GLSA 200711-21. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-2893

CVE-2008-2893 and CVE-2008-2532 describe SQL injection flaws in AJ Square AJ HYIP (aj-hyip). Affected software: AJ HYIP/AJ Square scripts (components cited include news.php and forum/topic_detail.php). Vulnerability: unsafely constructed SQL queries via the id parameter, enabling remote attackers...

CVE-2008-2893

creationtimestamp| type| source ---|---|--- 2008-06-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5890...

GLSA-200711-21 : Bochs: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200711-21 Bochs: Multiple vulnerabilities Tavis Ormandy of the Google Security Team discovered a heap-based overflow vulnerability in the NE2000 driver CVE-2007-2893. He also discovered a divide-by-zero error in the emulated flopp...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-2893. Reason: this candidate was intended for one issue, but some sources used this identifier for a separate issue, and a duplicate identifier had also been created by the time dual use was detected. Notes: All CVE users...