170 matches found
CVE-2011-3092
CVE-2011-3092 : The Google V8 regex implementation (as used by Google Chrome prior to 19.0.1084.46) contains an invalid write in the regex engine, enabling a remote attacker to cause a denial of service. The description notes possible unspecified additional impact; no exploit vectors are detailed...
Debian: Security Advisory (DSA-2113-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-3092
CVE-2010-3092 affects Drupal 5.x before 5.23 and 6.x before 6.18. The issue arises in the upload module due to improper case-insensitive filename handling in a database configuration, allowing remote authenticated users to bypass file-download restrictions by uploading a differently named file wi...
[SECURITY] [DSA 2113-1] New drupal6 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-2113-1 [email protected] http://www.debian.org/security/ Steffen Joeris September 20, 2010 http://www.debian.org/security/faq -...
CVE-2008-3092
The CVE-2008-3092 entry concerns the Drupal Taxonomy Autotagger module (5.x) with versions before 5.x-1.8. The vulnerability is an SQL injection that remote authenticated users with create/edit post permissions can trigger via unspecified vectors, potentially allowing arbitrary SQL execution. Aff...
openSUSE 10 Security Update : cron (cron-3092)
By setting hard links to /etc/crontab users were able to prevent cron from running scheduled jobs CVE-2007-1856. A re-emerged symlink bug allowed users to edit the crontab of other users CVE-2005-1038. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
CVE-2007-3092
CVE-2007-3092 affects Microsoft Internet Explorer 6. The vulnerability allows remote attackers to spoof the URL bar and page properties (including SSL certificates) by interrupting page loading with certain uses of location DOM objects and setTimeout calls, enabling phishing-like attacks. Exploit...
CVE-2006-3092
PhpMyFactures 1.2 and earlier is affected: remote attackers can bypass authentication and modify data by sending modified parameters to specific endpoints (tva/ajouter_tva.php, remises/ajouter_remise.php, pays/ajouter_pays.php, pays/modifier_pays.php, produits/ajouter_cat.php, produits/ajouter_pr...
CVE-2005-3092
CVE-2005-3092 describes a heap-based buffer overflow in Image-Line Software FL Studio 5.0.1. A crafted .flp file with an excessively long path to a referenced (1) .mid or (2) .wav file can allow a remote attacker to execute arbitrary code. Documents do not provide a specific patch or remediation;...