CVE-2011-3814

WebCalendar 1.2.3 (and earlier up to 1.2.4/1.2.5 line) is affected by an information-disclosure vulnerability where remote attackers can obtain sensitive data by directly requesting certain PHP files, exposing the installation path in error messages (notably ws/user_mod.php). Affected version ran...

openSUSE Security Update : freetype2 (openSUSE-SU-2011:0361-1)

Specially crafted font files could crash applications that use freetype2 to render the fonts CVE-2010-3814, CVE-2010-3855. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update freetype2-4080. The...

openSUSE Security Update : hplip (openSUSE-SU-2011:0068-1)

Specially crafted SNMP replies could cause a buffer overflow in hplip's sane backend CVE-2010-4267. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update hplip-3814. The text description of this...

SuSE 10 Security Update : freetype2 (ZYPP Patch Number 7366)

Specially crafted font files could crash applications that use freetype2 to render the fonts. CVE-2010-3814 / CVE-2010-3855 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 11.1 Security Update : freetype2 (SAT Patch Number 4089)

Specially crafted font files could crash applications that use freetype2 to render the fonts. CVE-2010-3814 / CVE-2010-3855 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself i...

Mac OS X Multiple Vulnerabilities (Security Update 2011-001)

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2011-001 applied. This security update contains fixes for the following products : - Apache - bzip2 - ClamAV - ImageIO - Kerberos - Libinfo - libxml - Mailman - PHP - QuickLook - Ruby - X11 C Tenable Network...

[SECURITY] [DSA 2155-1] freetype security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2155-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 30, 2011 http://www.debian.org/security/faq -...

CVE-2010-3814

CVE-2010-3814 describes a heap-based buffer overflow in the FreeType 2 font engine (Ins_SHZ in ttinterp.c) affecting FreeType 2.4.3 and earlier. The flaw can be triggered by a crafted SHZ bytecode instruction, related to TrueType opcodes, allowing remote attackers to execute arbitrary code or cau...

Ubuntu: Security Advisory (USN-1013-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : freetype vulnerabilities (USN-1013-1)

Marc Schoenefeld discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges. This issue only affected Ubunt...

USN-1013-1: FreeType vulnerabilities

Marc Schoenefeld discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges. This issue only affected Ubunt...

CVE-2009-3814

CVE-2009-3814 describes a static code injection in RunCMS 2M1. The vulnerability allows remote authenticated administrators to execute arbitrary PHP code through the ilter/Banningeature, demonstrated by modifying modules/system/cache/bademails.php via the "Prohibited: Emails" action and other u...

Cisco Unity远程管理验证绕过漏洞

BUGTRAQ ID: 31638 CVE ID：CVE-2008-3814 CNCVE ID：CNCVE-20083814 Cisco Unity是一款面向企业级机构的统一通信解决方案。 Cisco Unity WEB接口验证实现存在问题，远程攻击者可以利用漏洞访问受限制资源。 第一次尝试连接任意特定链接，会重定向到验证页，但是任意后续的尝试会导致无需要合法登录验证凭证而成功访问，攻击者借此可获得敏感信息或可编辑配置。 Cisco Unity 7.0 Cisco Unity 5.0 Cisco Unity 4.0 Cisco将发布补丁来提供解决方案，请用户关注供应商进度：...

CVE-2007-3814

CVE-2007-3814 documents multiple SQL injection vulnerabilities in MKPortal 1.1.1 that allow remote attackers to execute arbitrary SQL commands through numerous parameters in index.php across several modules (urlobox, reviews, news, gallery, downloads), including idurlo, iden, idnews, idcomm, ide,...

[SECURITY] [DSA 1166-2] New cheesetraceker packages fix buffer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-1166-2 [email protected] http://www.debian.org/security/ Steve Kemp October 13, 2006 - ------------------------------------------------------------------------ Package : cheesetracker...

[SECURITY] [DSA 1166-1] New cheesetraceker packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 1166-1 [email protected] http://www.debian.org/security/ Steve Kemp September 3rd, 2006 http://www.debian.org/security/faq -...

CVE-2006-3814

Cheese Tracker (up to version 0.9.9) is affected by a buffer overflow in the XM loader component (loader_xm.cpp). The vulnerability, described in CVE-2006-3814, allows a crafted input file with a large amount of data to potentially execute arbitrary code. Connected advisories (Gentoo GLSA 200610-...

CVE-2005-3814

CVE-2005-3814 affects SmartPPC Pro with multiple XSS flaws accessible through the username parameter in directory.php, frames.php, and search.php. The PT-2005-4562 entry confirms the vulnerabilities, noting no specific affected versions and indicating that a fix/version with patches is not listed...