CVE-2012-3476

CVE-2012-3476 concerns multiple XSS flaws in Ushahidi Platform

Fedora 14 : libwmf-0.2.8.4-27.fc14 (2010-19033)

Mon Dec 6 2010 Caolan McNamara - 0.2.8.4-27 - Resolves: rhbz660161 security issues Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 13 : libwmf-0.2.8.4-22.fc13 (2010-19022)

Mon Dec 6 2010 Caolan McNamara - 0.2.8.4-22 - Resolves: rhbz660161 security issues Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2010-3476

Open Ticket Request System OTRS 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Perl regular expressions against HTML e-mail messages, which allows remote attackers to cause a denial of service CPU consumption via a large message, a different vulnerability than...

CVE-2010-3476

OTRS contains a DoS vulnerability (CVE-2010-3476) where Perl regex handling of HTML email messages can cause CPU exhaustion. Affected versions are OTRS 2.3.x before 2.3.6 and 2.4.x before 2.4.8; exploit requires processing a very large HTML message. This is reported as a separate issue from CVE-2...

CVE-2010-3476

Open Ticket Request System OTRS 2.3.x before 2.3.6 and 2.4.x before 2.4.8 does not properly handle the matching of Perl regular expressions against HTML e-mail messages, which allows remote attackers to cause a denial of service CPU consumption via a large message, a different vulnerability than...

USN-854-1: GD library vulnerabilities

Tomas Hoger discovered that the GD library did not properly handle the number of colors in certain malformed GD images. If a user or automated system were tricked into processing a specially crafted GD image, an attacker could cause a denial of service or possibly execute arbitrary code...

SLES9: Security update for gd

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gd gd-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5018750 within the...

CVE-2009-3476

CVE-2009-3476 affects OpenSAML prior to 1.1.3 when used in Internet2 Shibboleth Service Provider (SP) software 1.3.x before 1.3.4, and XMLTooling prior to 1.2.2 as used in Shibboleth SP 2.x before 2.2.1. Description: a malformed encoded URL may be exploited by remote attackers to cause a denial o...

CVE-2009-3476

Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, and XMLTooling before 1.2.2 as used in Internet2 Shibboleth Service Provider software 2.x before 2.2.1, allows remote attackers to cause a denial of service and possibly execute...

Debian: Security Advisory (DSA-1895-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE9 Security Update : PHP4 (YOU Patch Number 11666)

This update fixes multiple bugs in PHP : - Predictable generaton of an initialization vector IV in the mcrypt extension - Additional cookie attributes could be injected via a session ID. - Specially crafted files could cause integer overflows in gd and leverage them to at least crash gd based...

Mandriva Update for tetex MDKSA-2007:164 (tetex)

Check for the Version of tetex OpenVAS Vulnerability Test Mandriva Update for tetex MDKSA-2007:164 tetex Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for gd MDKSA-2007:153 (gd)

Check for the Version of gd OpenVAS Vulnerability Test Mandriva Update for gd MDKSA-2007:153 gd Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

RedHat Update for gd RHSA-2008:0146-01

Check for the Version of gd OpenVAS Vulnerability Test RedHat Update for gd RHSA-2008:0146-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of th...

Fedora Update for gd FEDORA-2007-692

Check for the Version of gd OpenVAS Vulnerability Test Fedora Update for gd FEDORA-2007-692 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

Fedora Update for gd FEDORA-2007-2055

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for gd CESA-2008:0146 centos4 x86_64

Check for the Version of gd OpenVAS Vulnerability Test CentOS Update for gd CESA-2008:0146 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Microsoft IE多个跨域信息泄露和内存破坏漏洞（MS08-058）

BUGTRAQ ID: 31615,31616,31654,31618 CVECAN ID: CVE-2008-3472,CVE-2008-3473,CVE-2008-3474,CVE-2008-3476 Internet Explorer是Windows操作系统中捆绑的非常流行的WEB浏览器。 Internet Explorer中的多个安全漏洞可能允许恶意攻击者执行跨站脚本攻击，完全入侵用户的系统。 1 处理某些HTML元素或事件时的漏洞可能导致Internet Explorer错误的解释脚本来源，导致以其他域或安全区的环境执行脚本代码，或允许脚本访问另一个域或Internet...

MS08-058: Microsoft Internet Explorer Multiple Vulnerabilities (956390)

The remote host is missing the IE cumulative security update 956390. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34403;...