Debian DSA-3275-1 : fusionforge - security update

Ansgar Burchardt discovered that the Git plugin for FusionForge, a web-based project-management and collaboration software, does not sufficiently validate user provided input as parameter to the method to create secondary Git repositories. A remote attacker can use this flaw to execute arbitrary...

Debian: Security Advisory (DSA-3275-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3275

Cisco Identity Services Engine (ISE) is affected by CVE-2014-3275, a SQL injection in the web framework that allows an authenticated, remote attacker to execute arbitrary SQL via a crafted URL. The root cause is a failure to validate user-supplied input in SQL queries, potentially impacting integ...

CVE-2013-3275

EMC Avamar Server and Avamar Virtual Edition prior to v7.0 on Data Store Gen3, Gen4, or Gen4s platforms are affected by cross frame scripting vulnerabilities (CVE-2013-3275). The web interface does not properly restrict FRAME elements, which can allow a crafted remote site to monitor input and ex...

[security bulletin] HPSBMU02816 SSRT100949 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03507416 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03507416 Version: 1 HPSBMU02816...

CVE-2012-3275

CVE-2012-3275 affects HP Network Node Manager i (NNMi) 9.1x and 9.20 across HP-UX, Linux, Solaris, and Windows. The HP advisory notes a remote code execution possibility via unknown vectors, with CVSSv2 base score 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C). Remediation consists of platform-specific hotfixe...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5608)

This update of the SUSE Linux Enterprise 10 Service Pack 1 kernel contains lots of bugfixes and several security fixes : - Added missing capability checks in sbniioctl. CVE-2008-3525 - On AMD64 some string operations could leak kernel information into userspace. CVE-2008-0598 - Added range checki...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5605)

This kernel security update fixes lots of bugs and some %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid59130; scriptversion"1.5";...

CVE-2011-3275

Memory leak in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x, allows remote attackers to cause a denial of service memory consumption via a crafted SIP message, aka Bug ID CSCti48504...

CVE-2011-3275

CVE-2011-3275 is a memory-leak DoS in Cisco IOS and IOS XE SIP handling (crafted SIP message) affecting IOS 12.4, 15.0, 15.1 and IOS XE 2.5.x–3.2.x. Root cause: SIP processing leaks under crafted messages, potentially leading to memory exhaustion or device instability. Cisco Security Advisory CSC...

Debian DSA-2211-1 : vlc - missing input sanitising

Ricardo Narvaja discovered that missing input sanitising in VLC, a multimedia player and streamer, could lead to the execution of arbitrary code if a user is tricked into opening a malformed media file. This update also provides updated packages for oldstable lenny for vulnerabilities, which have...

[SECURITY] [DSA 2211-1] vlc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2211-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 06, 2011 http://www.debian.org/security/faq -...

CVE-2010-3275

libdirectxplugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an AMV file, related to a "dangling pointer vulnerability."...

CVE-2010-3275

CVE-2010-3275 affects VideoLAN VLC Media Player prior to 1.1.8, where libdirectx_plugin.dll can be abused by a crafted AMV file width to trigger a dangling pointer and remote code execution. Public details show exploitation activity in Metasploit and related advisories; vulnerable range includes ...

CVE-2010-3275

creationtimestamp| type| source ---|---|--- 2011-03-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17048 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/vlcamv.rb 2025-02-06 03:13:39+00:00| seen|...

VLC AMV Dangling Pointer Vulnerability

$Id: vlcamv.rb 12147 2011-03-26 12:05:48Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

VideoLAN VLC Media Player 1.1.4 - 'AMV' Dangling Pointer (Metasploit)

$Id: vlcamv.rb 12140 2011-03-26 00:07:36Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CORE-2011-0208: VLC Vulnerabilities handling .AMV and .NSV files

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - Corelabs Advisory http://corelabs.coresecurity.com/ VLC Vulnerabilities handling .AMV and .NSV files 1. Advisory Information Title: VLC Vulnerabilities handling .AMV and .NSV files Advisory ID: CORE-2011-0208 Advisory URL:...

VMSA-2009-0014 : VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues

a. Service Console update for DHCP and third-party library update for DHCP client. DHCP is an Internet-standard protocol by which a computer can be connected to a local network, ask to be given configuration information, and receive from a server enough information to configure itself as a member...

SuSE 10 Security Update : Linux Kernel (x86) (ZYPP Patch Number 5565)

This kernel security update fixes lots of bugs and some %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41534; scriptversion"1.12";...