Microsoft Office Memory Corruption (MS16-099: CVE-2016-3313)

A memory corruption vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

[SECURITY] [DSA 3313-1] linux security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3313-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 23, 2015 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-3313-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Community Events Plugin 1.3.5 - SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================================= title: SQL Injection product: WordPress Community Events Plugin vulnerable version: 1.3.5 and probably below fixed version: 1.4 CVE number: CVE-2015-3313 impact: CVSS Base...

WordPress Plugin Community Events 1.3.5 - SQL Injection

WordPress Plugin Community Events 1.3.5 - SQL Injection ======================================================================= title: SQL Injection product: WordPress Community Events Plugin vulnerable version: 1.3.5 and probably below fixed version: 1.4 CVE number: CVE-2015-3313 impact: CVSS Ba...

WordPress Plugin Community Events 1.3.5 - SQL Injection

======================================================================= title: SQL Injection product: WordPress Community Events Plugin vulnerable version: 1.3.5 and probably below fixed version: 1.4 CVE number: CVE-2015-3313 impact: CVSS Base Score 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P homepage:...

WordPress Community Events 1.3.5 SQL Injection

======================================================================= title: SQL Injection product: WordPress Community Events Plugin vulnerable version: 1.3.5 and probably below fixed version: 1.4 CVE number: CVE-2015-3313 impact: CVSS Base Score 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P homepage:...

CVE-2014-3313

Cisco Small Business SPA300/SPA500 Series IP Phones are affected by CVE-2014-3313: an XSS in the web UI allows remote attackers to inject arbitrary script via a crafted URL due to insufficient input validation. Impact is limited to the affected devices’ web interface; Cisco and CERT advisories in...

Fedora Core 3 : ethereal-0.10.14-1.FC3.1 (2006-005)

Tue Jan 3 2006 Radek Vokal 0.10.14-1.FC4.1 - upgrade to 0.10.14 - fix CVE-2005-3313 Ethereal IRC dissector DoS 172298 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

CVE-2010-3313

CVE-2010-3313 affects EGroupware and EPL components: the spellchecker PHP script (spellchecker.php) in phpgwapi/js/fckeditor/.../spellchecker.php allows remote command execution via shell metacharacters in the aspell_path and spellchecker_lang parameters. Affected: EGroupware 1.4.001+.002 and 1.6...

CVE-2010-3313

phpgwapi/js/fckeditor/editor/dialog/fckspellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 before 9.2.20100309; allows remote attackers to execute arbitrary commands v...

CVE-2010-3313

creationtimestamp| type| source ---|---|--- 2010-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11777...

FreeBSD Ports: egroupware

The remote host is missing an update to the system as announced in the referenced advisory. VID e39caf05-2d6f-11df-aec2-000c29ba66d2 OpenVAS Vulnerability Test $ Description: Auto generated from VID e39caf05-2d6f-11df-aec2-000c29ba66d2 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

FreeBSD Ports: egroupware

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian DSA-2013-1 : egroupware - several vulnerabilities

Nahuel Grisolia discovered two vulnerabilities in Egroupware, a web-based groupware suite: Missing input sanitising in the spellchecker integration may lead to the execution of arbitrary commands and a cross-site scripting vulnerability was discovered in the login page. %NASLMINLEVEL 70300 C...

SLES9: Security update for ethereal

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5021746 within the Su...

Gentoo Security Advisory GLSA 200510-25 (Ethereal)

The remote host is missing updates announced in advisory GLSA 200510-25. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3313

CVE-2008-3313 affects CreaCMS 1.0 with multiple PHP remote file inclusion vulnerabilities. The underlying issue allows an attacker to execute arbitrary PHP code by supplying a URL to two parameters: (1) cfg[document_uri] to _administration/edition_article/edition_article.php and (2) cfg[base_uri_...

CVE-2008-3313

creationtimestamp| type| source ---|---|--- 2008-07-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32079 2008-07-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32080...

CVE-2006-3313

Netsoft smartNet 2.0 is affected by a cross-site scripting (XSS) vulnerability in search.jsp that allows remote attackers to inject arbitrary web script or HTML via the keyWord parameter. Affected component: search.jsp in Netsoft smartNet 2.0; root cause: unsanitized/unsafely handled keyWord inpu...