Ubuntu: Security Advisory (USN-1542-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PostgreSQL 'xslt_process()'任意文件创建或覆盖漏洞

Bugtraq ID:55072 CVE ID: CVE-2012-3488 PostgreSQL是一款对象关系型数据库管理系统，支持扩展的SQL标准子集。 PostgreSQL解析XSLT样式表时"xsltprocess"函数存在错误，允许攻击者利用漏洞创建或覆盖任意文件。 0 PostgreSQL 8.x PostgreSQL 9.x 厂商解决方案 PostgreSQL 9.1.5, 9.0.9, 8.4.13或8.3.20已经修复此漏洞，建议用户下载使用： http://www.postgresql.org...

Mandriva Update for postgresql MDVSA-2012:139 (postgresql)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-3488

The CVE affects Equis MetaStock 11 and earlier, where a use-after-free in the parser for four UI components (mwc chart, mws chart, mwt template, mwl layout) can allow remote code execution. Root cause is a use-after-free condition in handling these malformed inputs; no exploitation details are pr...

CVE-2010-3488

CVE-2010-3488 affects QuickShare 1.0 with a directory-traversal vulnerability caused by insufficient input sanitization in the web interface. This allows remote attackers to read arbitrary files outside the webroot by crafting a special URL. OpenVAS entries describe active checks and identify the...

CVE-2009-3488

CVE-2009-3488 describes a cross-site scripting (XSS) vulnerability in Drupal’s Bibliography (Biblio) module, version 6.x-1.6, where remote authenticated users with content-creation privileges can inject arbitrary scripts or HTML via the Title field. The connected records corroborate a related XSS...

CVE-2008-3488

CVE-2008-3488 affects Novell iManager prior to 2.7 SP1 (2.7.1). An unspecified remote vulnerability allows an attacker to delete Property Book Pages created with Plug-in Studio. Impact is unauthorized deletion of those pages; exploitation details are not disclosed in the provided documents. Remed...

CVE-2007-3488

Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS10 and SNC-CS11 before 1.06; SNC-DF40N and SNC-DF70N before 1.18; SNC-RZ50N and SNC-CS50N before 2.22; SNC-DF85N, SNC-DF80N, and SNC-DF50N before 1.12; and...

CVE-2007-3488

CVE-2007-3488 is a heap-based buffer overflow in the viewer ActiveX control of Sony Network Cameras. Affected models include SNC-RZ25N (pre-1.30), SNC-P1/P5 (pre-1.29), SNC-CS10/CS11 (pre-1.06), SNC-DF40N/DF70N (pre-1.18), SNC-RZ50N/CS50N (pre-2.22), SNC-DF85N/DF80N/DF50N (pre-1.12), and SNC-RX57...

CVE-2006-3488

The CVE-2006-3488 entry concerns an absolute path traversal in VirtuaStore 2.0, specifically the administrador.asp component. According to the provided documents, the vulnerability allows remote attackers to read arbitrary directories or files by supplying an absolute path with a Windows drive le...

phpPGAds/phpAdNew < 2.0.8 Multiple Injection Vulnerabilities

Binary data 3488.prm...

CVE-2005-3488

Scorched 3D 39.1 bf and earlier allows remote attackers to cause a denial of service long loop and server hang via a negative numplayers value that bypasses a signed check in ServerConnectHandler.cpp...

CVE-2005-3488

The CVE-2005-3488 entry concerns Scorched 3D version 39.1 (bf) and earlier. A remote attacker could cause a denial of service by sending a negative numplayers value that bypasses a signed check in ServerConnectHandler.cpp, leading to a long loop and server hang. Public sources identify this vulne...