CVE-2013-2921

Removed by vendor...

FreeBSD : chromium -- multiple vulnerabilities (e5414d0c-2ade-11e3-821d-00262d5ed8ee)

Google Chrome Releases reports : 50 security fixes in this release, including : - 223962270758271161284785284786 Medium CVE-2013-2906 : Races in Web Audio. Credit to Atte Kettunen of OUSPG. - 260667 Medium CVE-2013-2907: Out of bounds read in Window.prototype object. Credit to Boris Zbarsky. -...

Stable Channel Update

The Chrome team is excited to announce the promotion of Chrome 30 to the Stable channel for Windows, Mac, Linux and Chrome Frame. Chrome 30.0.1599.66 contains a number of fixes and improvements, including: Easier searching by image A number of new apps/extension APIs Lots of under the hood change...

Mandriva Linux Security Advisory : python-feedparser (MDVSA-2013:118)

Updated python-feedparser package fixes security vulnerability : Universal Feed Parser aka feedparser or python-feedparser before 5.1.2 allows remote attackers to cause a denial of service memory consumption via a crafted XML ENTITY declaration in a non-ASCII encoded document CVE-2012-2921...

Fedora Update for python-feedparser FEDORA-2012-8291

Check for the Version of python-feedparser OpenVAS Vulnerability Test Fedora Update for python-feedparser FEDORA-2012-8291 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for python-feedparser FEDORA-2012-8291

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : python-feedparser-5.1.2-2.fc17 (2012-8291)

Update from 5.1 to 5.1.2. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...

CVE-2012-2921

Universal Feed Parser aka feedparser or python-feedparser before 5.1.2 allows remote attackers to cause a denial of service memory consumption via a crafted XML ENTITY declaration in a non-ASCII encoded document...

CVE-2012-2921

Universal Feed Parser (python-feedparser) vulnerable to memory‑based DoS via a crafted non‑ASCII XML ENTITY declaration in documents; affected versions before 5.1.2. Root cause is parsing/expansion of a malicious XML ENTITY, enabling remote attacker to exhaust memory. Public references note the i...

CVE-2012-2921

Universal Feed Parser aka feedparser or python-feedparser before 5.1.2 allows remote attackers to cause a denial of service memory consumption via a crafted XML ENTITY declaration in a non-ASCII encoded document...

CVE-2012-2921

Universal Feed Parser aka feedparser or python-feedparser before 5.1.2 allows remote attackers to cause a denial of service memory consumption via a crafted XML ENTITY declaration in a non-ASCII encoded document...

Gentoo Security Advisory GLSA 201201-15 (ktsuss)

The remote host is missing updates announced in advisory GLSA 201201-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-201201-15 : ktsuss: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201201-15 ktsuss: Privilege escalation Two vulnerabilities have been found in ktuss: Under specific circumstances, ktsuss skips authentication and fails to change the effective UID back to the real UID CVE-2011-2921. The GTK...

ktsuss suid Privilege Escalation

This module attempts to gain root privileges by exploiting a vulnerability in ktsuss versions 1.4 and prior. The ktsuss executable is setuid root and does not drop privileges prior to executing user specified commands, resulting in command execution with root privileges. This module has been test...

CVE-2010-2921

The CVE-2010-2921 entry describes an SQL injection in the Joomla! Golf Course Guide (com_golfcourseguide) component, affecting versions 0.9.6.0 beta and 1 beta. The vulnerability allows remote attackers to execute arbitrary SQL commands via the id parameter in the golfcourses action to index.php....

CVE-2009-2921

CVE-2009-2921ffects MOC Designs PHP News 1.1. Multiple SQL injection vulnerabilities exist in login.php, exploitable via the newsuser (User) and newspassword (Password) fields. Remote attackers can cause arbitrary SQL execution. The provided documents do not specify the underlying root cause, aff...

CVE-2009-2921

creationtimestamp| type| source ---|---|--- 2009-08-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9353...

CVE-2008-2921

EZCMS 1.2 and earlier (EZTechhelp EZCMS) contain an SQL injection in index.php via the page parameter, allowing remote attackers to execute arbitrary SQL commands. Root cause: improper validation of the page parameter. Impact per sources includes potential compromise of data integrity and confide...

CVE-2007-2921

The CVE-2007-2921 entry concerns the Corel/Micrografx ActiveCGM Browser ActiveX control (acgm.dll) that contains multiple buffer overflows prior to version 7.1.4.19. The vulnerabilities allow remote code execution when a user visits a crafted page or document, with the impact described as arbitra...

CVE-2006-2921

CVE-2006-2921 affects Clan Manager Pro (CMPRO) 1.1 and earlier. The vulnerability is a PHP remote file inclusion in cmpro_header.inc.php when register_globals is enabled, enabling an attacker to run arbitrary PHP code via a URL in the (1) cm_ext_server and (2) sitepath parameters. The provided do...