openSUSE Security Update : gimp (openSUSE-SU-2010:0110-1)

Integer overflows in the BMP plug-in potentially allowed attackers to execute arbitrary code on the victim's system by tricking the victim to open specially crafted files CVE-2009-1570. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

Debian DSA-1941-1 : poppler - several vulnerabilities

Several integer overflows, buffer overflows and memory allocation errors were discovered in the Poppler PDF rendering library, which may lead to denial of service or the execution of arbitrary code if a user is tricked into opening a malformed PDF document. An update for the old stable distributi...

Ubuntu Update for gimp vulnerabilities USN-880-1

Ubuntu Update for Linux kernel vulnerabilities USN-880-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN8801.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for gimp vulnerabilities USN-880-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-880-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : gimp vulnerabilities (USN-880-1)

Stefan Cornelius discovered that GIMP did not correctly handle certain malformed BMP files. If a user were tricked into opening a specially crafted BMP file, an attacker could execute arbitrary code with the user's privileges. CVE-2009-1570 Stefan Cornelius discovered that GIMP did not correctly...

Debian Security Advisory DSA 1941-1 (poppler)

The remote host is missing an update to poppler announced via advisory DSA 1941-1. OpenVAS Vulnerability Test $Id: deb19411.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1941-1 poppler Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] [DSA 1941-1] New poppler packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1941-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 25, 2009 http://www.debian.org/security/faq -...

CVE-2009-3909

Integer overflow in the readchanneldata function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a crafted PSD file that triggers a heap-based buffer overflow...

CVE-2009-3909

The CVE-2009-3909 issue affects GIMP (2.6.x) and is caused by an integer overflow in the read_channel_data function within the PSD loader (psd-load.c) of the plug-ins/file-psd module. The vulnerability can be triggered by processing a specially crafted PSD file, leading to a heap-based buffer ove...

Secunia Research: Gimp PSD Image Parsing Integer Overflow Vulnerability

====================================================================== Secunia Research 17/11/2009 - Gimp PSD Image Parsing Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Mandriva Linux Security Advisory : python-django (MDVSA-2008:185)

A cross-site request forgery vulnerability was discovered in Django that, if exploited, could be used to perform unrequested deletion or modification of data. Updated versions of Django will now discard posts from users whose sessions have expired, so data will need to be re-entered in these case...

Debian Security Advisory DSA 1640-1 (python-django)

The remote host is missing an update to python-django announced via advisory DSA 1640-1. OpenVAS Vulnerability Test $Id: deb16401.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1640-1 python-django Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...

Debian DSA-1640-1 : python-django - several vulnerabilities

Simon Willison discovered that in Django, a Python web framework, the feature to retain HTTP POST data during user reauthentication allowed a remote attacker to perform unauthorized modification of data through cross site request forgery. This is possible regardless of the Django plugin to preven...

DSA-1640-1 python-django - cross site request forgery

Bulletin has no description...

CVE-2008-3909

Django CSRF issue (CVE-2008-3909) in the admin app affects Django 0.91.x, 0.95.x, and 0.96.x where unauthenticated POST data is stored and later processed after authentication, enabling remote CSRF attacks that can delete or modify data via unspecified requests. Connected sources (GHSA, Debian/Ne...

CVE-2007-3909

CVE-2007-3909 describes multiple SQL injection vulnerabilities in Bandersnatch 0.4. The affected component is the web application logic handling input parameters, with confirmed vectors including the (1) date and (2) limit parameters to index.php, plus other unspecified vectors. The underlying im...

CVE-2006-3909

CVE-2006-3909 is a Cross-site Scripting (XSS) vulnerability in calendar.php of WWWthreads, exploitable by remote attackers who can inject arbitrary web script or HTML through the week parameter. Affects the WWWthreads calendar.php component; root cause is improper handling of user-supplied week d...