135 matches found
CVE-2013-2893
Summary of CVE-2013-2893 from provided sources : The Linux kernel HID subsystem (through version 3.11) with CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF enabled is vulnerable to a denial of service via a crafted USB HID device. The issue manifests as a heap-based out-of-bounds ...
Fedora 19 : kernel-3.10.11-200.fc19 (2013-16379)
The 3.10.11 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
SuSE Update for update openSUSE-SU-2012:1376-1 (update)
Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201213761.nasl 8352 2018-01-10 07:01:57Z teissa $ SuSE Update for update openSUSE-SU-2012:1376-1 update Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...
Debian Security Advisory DSA 2555-1 (libxslt)
The remote host is missing an update to libxslt announced via advisory DSA 2555-1. OpenVAS Vulnerability Test $Id: deb25551.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2555-1 libxslt Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Mandriva Update for libxslt MDVSA-2012:164 (libxslt)
Check for the Version of libxslt OpenVAS Vulnerability Test Mandriva Update for libxslt MDVSA-2012:164 libxslt Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Mandriva Update for libxslt MDVSA-2012:164 (libxslt)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Debian DSA-2555-1 : libxslt - several vulnerabilities
Nicholas Gregoire and Cris Neckar discovered several memory handling bugs in libxslt, which could lead to denial of service or the execution of arbitrary code if a malformed document is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
[SECURITY] [DSA 2555-1] libxslt security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2555-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 05, 2012 http://www.debian.org/security/faq -...
USN-1595-1: libxslt vulnerabilities
Chris Evans discovered that libxslt incorrectly handled generate-id XPath functions. If a user or automated system were tricked into processing a specially crafted XSLT document, a remote attacker could obtain potentially sensitive information. This issue only affected Ubuntu 8.04 LTS, Ubuntu 10....
Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update
An updated rhev-hypervisor6 package that fixes multiple security issues and one bug is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
Google Chrome Multiple Vulnerabilities - Sep12 (Mac OS X-01)
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnsep12macosx01.nasl 5963 2017-04-18 09:02:14Z teissa $ Google Chrome Multiple Vulnerabilities - Sep12 Mac OS X-01 Authors: Madhuri D Copyright: Copyright c 2012...
Google Chrome Multiple Vulnerabilities - Sep12 (Windows-01)
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnsep12win01.nasl 5888 2017-04-07 09:01:53Z teissa $ Google Chrome Multiple Vulnerabilities - Sep12 Windows-01 Authors: Madhuri D Copyright: Copyright c 2012...
FreeBSD : chromium -- multiple vulnerabilities (5bae2ab4-0820-11e2-be5f-00262d5ed8ee)
Google Chrome Releases reports : 143439 High CVE-2012-2889: UXSS in frame handling. Credit to Sergey Glazunov. 143437 High CVE-2012-2886: UXSS in v8 bindings. Credit to Sergey Glazunov. 139814 High CVE-2012-2881: DOM tree corruption with plug-ins. Credit to Chamal de Silva. 135432 High...
CVE-2012-2893
Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XSL transforms...
CVE-2012-2893
CVE-2012-2893 is a Double free vulnerability in libxslt, impacting Google Chrome (before 22.0.1229.79) via XSLT transforms. Exploitation could cause a denial of service and potentially other impacts; CVSS v2 base score 6.8 (Medium) from NVD. Related Nessus/Gentoo/Debian advisories enumerate libxs...
IBM Lotus Symphony < 3.0 Fix Pack 3 Multiple Vulnerabilities
The version of IBM Lotus Symphony was found to be less than 3.0 Fix Pack 3. Such versions are affected by multiple vulnerabilities: - Multiple unspecified vulnerabilities. CVE-2011-2884 - Opening a .doc document with a user defined toolbar can cause an application crash. CVE-2011-2885 - Opening a...
CVE-2011-2893
IBM Lotus Symphony DataPilot in version 3 before FP3 is affected by a denial of service when processing a large .xls with an invalid Value reference, allowing a user-assisted remote attacker to crash the application. The issue is tied to DataPilot parsing/handling of malformed Excel content. Reme...
CVE-2009-2893
Multiple cross-site scripting XSS vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote attackers to inject arbitrary web script or HTML via 1 the postevent parameter in a post action or 2 the xzcaly parameter...
CVE-2009-2893
CVE-2009-2893 affects XZero Community Classifieds 4.97.8. The vulnerability is a cross-site scripting (XSS) flaw in index.php that allows remote attackers to inject arbitrary script or HTML via (1) the postevent parameter in a post action, or (2) the _xzcal_y parameter. The public descriptions id...
