CVE-2012-4014

CVE-2012-4014 affects McAfee Email Anti-virus (formerly WebShield SMTP). The vulnerability enables remote denial of service via unspecified vectors; impact is DoS as described by multiple sources. Public details are consistent across NVD, Red Hat, JVN entries, and CVE listings. Remediation is not...

CVE-2011-4014

CVE-2011-4014 affects Cisco Wireless Control System (WCS) 7.0, via the TAC Case Attachment tool. The vulnerability allows remote authenticated users to read arbitrary files under webnms/Temp/ through unspecified vectors (Bug ID CSCtq86807). The available sources (NVD entry and Cisco notes) confir...

openSUSE Security Update : postgresql (openSUSE-SU-2011:0254-1)

A buffer overflow in the intarray module potentially allowed attackers to execute arbitrary code as the user running postgresql CVE-2010-4015:CVSS v2 Base Score: 4.9. Additionally a possible log forging problem was fixed too. CVE-2010-4014 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 7341)

A buffer overflow in the intarray module potentially allowed attackers to execute arbitrary code as the user running postgresql CVE-2010-4015:CVSS v2 Base Score: 4.9. Additionally a possible log forging problem was fixed too. CVE-2010-4014 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-1979-1 : lintian - multiple vulnerabilities

Multiple vulnerabilities have been discovered in lintian, a Debian package checker. The following Common Vulnerabilities and Exposures project ids have been assigned to identify them : - CVE-2009-4013: missing control files sanitation Control field names and values were not sanitised before using...

CVE-2009-4014

Multiple format string vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to have an unspecified impact via vectors involving 1 check scripts and 2 the Lintian::Schedule module...

CVE-2009-4014

CVE-2009-4014 affects Lintian: multiple format-string vulnerabilities in check scripts and the Lintian::Schedule module across Lintian 1.23.x (through 1.23.28), 1.24.x (through 1.24.2.1), and 2.x before 2.3.2. The Debian advisory and related NASL/OpenVAS entries confirm this class of issue. Impac...

Debian Lintian多个本地安全漏洞

Bugraq ID: 37975 CVE ID：CVE-2009-4013 CVE-2009-4014 CVE-2009-4015 Debian Lintian是一款软件包检查程序。 Debian Lintian存在多个安全漏洞，本地攻击者可以利用这些漏洞执行任意代码或者提升特权或获得敏感信息。 CVE-2009-4013：控制文件过滤缺失 CNCVE ID：CNCVE-20094013 CNCVE-20094014 CNCVE-20094015 CNCVE-20094013 控制字段名称和值在使用前没有充分过滤，在部分操作下可导致目录遍历。 Patch...

Ubuntu: Security Advisory (USN-891-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA-1979-1] New lintian packages fix multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1979-1 [email protected] http://www.debian.org/security/ Raphael Geissert January 27, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1979-1] New lintian packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1979-1 [email protected] http://www.debian.org/security/ Raphael Geissert January 27, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA-1979-1] New lintian packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1979-1 [email protected] http://www.debian.org/security/ Raphael Geissert January 27, 2009 http://www.debian.org/security/faq -...

Oracle Application Server BPEL Module Cross Site Scripting (CVE-2008-4014)

Oracle Application Server is a multi-platform solution for developing and deploying enterprise applications and web sites. The server ships with several additional components that extend its functionality. BPEL Business Process Execution Language is an XML based language used for describing...

Oracle Application Server Cross Site Scripting

Digital Security Research Group DSecRG Advisory DSECRG-09-001 Application: Oracle Application Server SOA Versions Affected: Oracle Application Server SOA version 10.1.3.1.0 Vendor URL: http://www.oracle.com Bugs: XSS Exploits: YES Reported: 10.01.2008 Vendor response: 11.01.2008 Date of Public...

CVE-2008-4014

The CVE-2008-4014 issue affects Oracle Application Server’s BPEL (Business Process Execution Language) component, specifically the BPEL Console/Activities.jsp page, where a Linked XSS vulnerability was identified in the DSecRG advisory (DSecRG-09-001). Exploitation was demonstrated via crafted UR...

[SECURITY] Fedora 8 Update: xterm-238-1.fc8

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly...

[SECURITY] Fedora 10 Update: xterm-238-1.fc10

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly...

CVE-2007-4165

Cross-site scripting XSS vulnerability in index.php in the Blue Memories theme 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757 and CVE-2007-4014. NOTE: the provenance of this information is unknown; th...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in the Blue Memories theme 1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757 and CVE-2007-4014. NOTE: the provenance of this information is unknown; th...

CVE-2007-4166

Cross-site scripting XSS vulnerability in index.php in the Unnamed theme 1.217, and Special Edition SE 1.02, before 20070804 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757, CVE-2007-4014, and CVE-2007-416...