Fedora 17 : rubygem-actionpack-3.0.11-7.fc17 (2012-11885)

Fixes for CVE-2012-3463, CVE-2012-3464 and CVE-2012-3465. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 17 : rubygem-activesupport-3.0.11-6.fc17 (2012-11888)

Fixes for CVE-2012-3464. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

CVE-2012-3464

Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a ' quote character...

CVE-2012-3464

Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a ' quote character...

CVE-2012-3464

Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a ' quote character...

CVE-2012-3464

CVE-2012-3464 is a cross-site scripting (XSS) vulnerability in Rails where activesupport/lib/active_support/core_ext/string/output_safety.rb permits remote injection via a single quote character. Affected Rails versions are 3.0.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8. The impa...

FreeBSD Ports: rubygem-rails

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-3464 rubygem-actionpack: potential XSS vulnerability

Cross-site scripting XSS vulnerability in activesupport/lib/activesupport/coreext/string/outputsafety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a ' quote character...

CVE-2011-3464

CVE-2011-3464 concerns libpng 1.5.4–1.5.7, where an off-by-one error in png_formatted_warning in pngerror.c can trigger a stack-based buffer overflow, allowing a remote attacker to cause an application crash and potentially execute arbitrary code. Fed/OSS advisories indicate a fix was applied in ...

Adobe Shockwave Player Multiple Remote Code Execution Vulnerabilities

This host is installed with Adobe Shockwave Player and is prone to Multiple Remote Code Execution Vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayermultcodeexevuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Adobe Shockwave Player Multiple Remote Code Execution Vulnerabilities...

Security updates available for Shockwave Player

Security updates available for Shockwave Player Release date: November 3, 2009 Vulnerability identifier: APSB09-16 CVE number: CVE-2009-3244, CVE-2009-3463, CVE-2009-3464, CVE-2009-3465, CVE-2009-3466 Platform: Windows and Macintosh Summary Critical vulnerabilities have been identified in Adobe...

VUPEN Security - Adobe Shockwave Player Multiple Code Execution Vulnerabilities

VUPEN Vulnerability Research - Adobe Shockwave Player Multiple Code Execution Vulnerabilities I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to some of the best the Web has to offer including...

CVE-2009-3464

CVE-2009-3464 affects Adobe Shockwave Player prior to 11.5.2.602. The vulnerability is described as an invalid pointer vulnerability in the processing of crafted Shockwave content, which could allow remote code execution. Some sources group this with multiple related issues under APSB09-16. The d...

SLES9: Security update for libtiff

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libtiff For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5020045 within the SuS...

SLES9: Security update for libtiff

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libtiff For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5020045 within the SuS...

CVE-2008-3464

afd.sys in the Ancillary Function Driver AFD component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user mode to the kernel, which allows local users to gain privileges via a crafted application, as demonstrated using crafted...

MS08-066: Microsoft Windows Ancillary Function Driver (afd.sys) Local Privilege Escalation (956803)

The remote host contains a version of Windows that is vulnerable to a security flaw that could allow a local user to elevate his privileges or to crash it therefore causing a denial of service. Tenable Network Security, Inc. include"compat.inc"; if description scriptid34411; scriptversion"1.28";...

CVE-2008-3464

creationtimestamp| type| source ---|---|--- 2008-10-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6757...

Gentoo Security Advisory GLSA 200608-07 (tiff)

The remote host is missing updates announced in advisory GLSA 200608-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

openSUSE 10 Security Update : libtiff (libtiff-1907)

This update of libtiff is the result of a source-code audit done by Tavis Ormandy. It fixes various bugs that can lead to denial-of-service conditions as well as to remote code execution while parsing a tiff image. CVE-2006-3459, CVE-2006-3460, CVE-2006-3461, CVE-2006-3462, CVE-2006-3463,...