105 matches found
PHP 'libxmlrpc/xmlrpc. c'buffer overflow vulnerability(CVE-2 0 1 4-3 6 6 8)-vulnerability warning-the black bar safety net
Affected system: PHP PHP Not affected system: PHP PHP 5. x Description: BUGTRAQ ID: 7 0 6 6 6 CVECAN ID: CVE-2 0 1 4-3 6 6 8 PHP is a widely-used General-purpose scripting language that is especially suited for Web development and can be embedded into HTML. PHP in...
CVE-2012-3668
WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1...
CVE-2012-3668
WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1...
CVE-2012-3668
Technical details for CVE-2012-3668 are not publicly available in the provided connected documents. Monitor for updates.
Fedora Update for bugzilla FEDORA-2012-0301
Check for the Version of bugzilla OpenVAS Vulnerability Test Fedora Update for bugzilla FEDORA-2012-0301 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for bugzilla FEDORA-2012-0301
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for bugzilla FEDORA-2012-0328
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 15 : bugzilla-3.6.7-1.fc15 (2012-0328)
These new versions fix the following securtiy flaws : - CVE-2011-3657 - CVE-2011-3667 - CVE-2011-3668 - CVE-2011-3669 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...
Fedora 16 : bugzilla-4.0.3-1.fc16 (2012-0301)
These new versions fix the following securtiy flaws : - CVE-2011-3657 - CVE-2011-3667 - CVE-2011-3668 - CVE-2011-3669 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...
CVE-2011-3668
Cross-site request forgery CSRF vulnerability in postbug.cgi in Bugzilla 2.x, 3.x, and 4.x before 4.2rc1 allows remote attackers to hijack the authentication of arbitrary users for requests that create bug reports...
CVE-2011-3668
The CVE-2011-3668 entry describes a cross-site request forgery (CSRF) in Bugzilla’s post_bug.cgi function affecting Bugzilla 2.x, 3.x, and 4.x prior to 4.2rc1. Exploitation would allow remote attackers to hijack the authentication of arbitrary users to perform actions that create bug reports. The...
CVE-2009-3668
CVE-2009-3668 describes a cross-site scripting (XSS) vulnerability in Ardguest 1.8, specifically in the file ardguest.php where the page parameter可 allows remote attackers to inject arbitrary web script or HTML. The condition is input reflected to the user, enabling script execution in the victim...
Gentoo Security Advisory GLSA 200608-14 (dumb)
The remote host is missing updates announced in advisory GLSA 200608-14. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-3668
The CVE-2008-3668 entry concerns multiple XSS vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS. The affected component is the module’s PHP pages (friends.php, seutubo.php, album.php, scrapbook.php, index.php, tribes.php) and the description field of a new scrap, where the uid...
CVE-2008-3668
creationtimestamp| type| source ---|---|--- 2008-08-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32199 2008-08-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32202 2008-08-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32203 2008-08-09...
Debian DSA-1123-1 : libdumb - buffer overflow
Luigi Auriemma discovered that DUMB, a tracker music library, performs insufficient sanitising of values parsed from IT music files, which might lead to a buffer overflow and execution of arbitrary code if manipulated files are read. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
[Full-disclosure] [SECURITY] [DSA 1123-1] New libdumb packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1123-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 24th, 2006 http://www.debian.org/security/faq -...
CVE-2006-3668
Heap-based buffer overflow in the itreadenvelope function in Dynamic Universal Music Bibliotheque DUMB 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a ".it" Impulse Tracker file with an envelope with a large numbe...
CVE-2006-3668
CVE-2006-3668 describes a heap-based buffer overflow in DUMB (Dynamic Universal Music Bibliotheque) libdumb affecting 0.9.3 and earlier (CVSS shows high impact). The vulnerability occurs in it_read_envelope when parsing IT files with a large number of nodes, potentially allowing arbitrary code ex...