198 matches found
CVE-2014-4035
Cross-site scripting XSS vulnerability in bookingdetails.php in Best Soft Inc. BSI Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter...
CVE-2014-4035
CVE-2014-4035 affects Best Soft Inc. (BSI) Advance Hotel Booking System 2.0. The vulnerability is a cross-site scripting (XSS) in booking_details.php where the attacker can inject arbitrary script via the title parameter. Public materials (exploits and writeups) indicate a persistent XSS variant ...
Oracle Linux 4 : gpdf (ELSA-2009-1681)
From Red Hat Security Advisory 2009:1681 : An updated gpdf package that fixes a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. GPdf is a viewer for Portable Document Format PDF...
Oracle Linux 4 : xpdf (ELSA-2009-1680)
From Red Hat Security Advisory 2009:1680 : An updated xpdf package that fixes a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System based viewer for Portabl...
Multiple vulnerabilities in PBBoard
Advisory ID: HTB23101 Product: PBBoard Vendor: www.pbboard.com Vulnerable Versions: 2.1.4 and probably prior Tested Version: 2.1.4 Vendor Notification: July 18, 2012 Public Disclosure: August 8, 2012 Vulnerability Type: SQL Injection CWE-89, Improper Authentication CWE-287, Improper Access Contro...
CVE-2012-4035
PBBoard 2.1.4 is affected by multiple CVEs including CVE-2012-4035 (Improper Authentication) and CVE-2012-4036 (Improper Access Control). The CVE-2012-4035 issue arises from lack of verification of the user-supplied member_id in the password-change flow, enabling remote attackers to change arbitr...
PBBoard 2.1.4 SQL Injection / Improper Authentication / Broken Access Control
Exploit for php platform in category web applications Vendor: www.pbboard.com Vulnerable Versions: 2.1.4 and probably prior Tested Version: 2.1.4 Vendor Notification: July 18, 2012 Public Disclosure: August 8, 2012 Vulnerability Type: SQL Injection CWE-89, Improper Authentication CWE-287, Imprope...
PBBoard 2.1.4 SQL Injection / Improper Authentication / Broken Access Control
Advisory ID: HTB23101 Product: PBBoard Vendor: www.pbboard.com Vulnerable Versions: 2.1.4 and probably prior Tested Version: 2.1.4 Vendor Notification: July 18, 2012 Public Disclosure: August 8, 2012 Vulnerability Type: SQL Injection CWE-89, Improper Authentication CWE-287, Improper Access Contro...
Scientific Linux Security Update : kdegraphics on SL4.x i386/x86_64
Petr Gajdos and Christian Kornacker of SUSE reported a buffer overflow flaw in KPDF's Type 1 font parser. A specially crafted PDF file with an embedded Type 1 font could cause KPDF to crash or, possibly, execute arbitrary code when opened. CVE-2009-4035 %NASLMINLEVEL 70300 C Tenable Network...
CVE-2011-4035
CVE-2011-4035 describes a Cross-Site Scripting (XSS) vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADA Reports 4.10 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. ...
CentOS Update for kdegraphics CESA-2009:1682 centos4 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for gpdf CESA-2009:1681 centos4 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Google Chrome multiple vulnerabilities - October 10(Windows)
The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnoct10win.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - October 10Windows Authors: Madhuri D Copyright: Copyright c 2010 Greenbone...
CVE-2010-4035
CVE-2010-4035 affects Google Chrome prior to 7.0.517.41. The flaw is in autofill handling for forms, allowing a crafted HTML document to cause a crash (DoS) and potentially other unspecified impacts. The NVD entry assigns a high base score (9.3) with network access, no user interaction, and compl...
SuSE 10 Security Update : poppler (ZYPP Patch Number 6743)
This update of poppler fixes two security issues : - Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via ...
openSUSE Security Update : libpoppler-devel (libpoppler-devel-1735)
This update of libpoppler5 fixes various security issues. CVE-2009-0791: Fix multiple integer overflows in 'pdftops' filter that could be used by attackers to execute code. CVE-2009-3607: Integer overflow in the createsurfacefromthumbnaildata function in glib/poppler-page.cc in Poppler 0.x allows...
SuSE 11.2 Security Update: libpoppler-devel (2009-12-22)
This update of libpoppler5 fixes various security issues. CVE-2009-0791: Fix multiple integer overflows in 'pdftops' filter that could be used by attackers to execute code. CVE-2009-3607: Integer overflow in the createsurfacefromthumbnaildata function in glib/poppler-page.cc in Poppler 0.x allows...
SuSE 10 Security Update : poppler (ZYPP Patch Number 6751)
This update of poppler fixes two security issues : - Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, CUPS pdftops, and teTeX, might allow remote attackers to execute arbitrary code via ...
CentOS Security Advisory CESA-2009:1681 (gpdf)
The remote host is missing updates to gpdf announced in advisory CESA-2009:1681. CESA-2009:1681 66625 2 $Id: ovcesa20091681.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1681 gpdf Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...