USN-2306-3: GNU C Library regression

USN-2306-1 fixed vulnerabilities in the GNU C Library. On Ubuntu 10.04 LTS, the fix for CVE-2013-4357 introduced a memory leak in getaddrinfo. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Maksymilian Arciemowicz discovered that the GNU C Library...

SOL15546 - glibc vulnerability CVE-2014-4043

Recommended Action None Supplemental Information CVE-2014-4043 SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

[ MDVSA-2014:152 ] glibc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:152 http://www.mandriva.com/en/support/security/ Package : glibc Date : August 6, 2014 Affected: Business Server 1.0 Problem Description: Updated glibc packages fix security issues: Stephane Chazelas...

Ubuntu: Security Advisory (USN-2306-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : GNU C Library vulnerabilities (USN-2306-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2306-1 advisory. Maksymilian Arciemowicz discovered that the GNU C Library incorrectly handled the getaddrinfo function. An attacker could use this issue to cause a denia...

Ubuntu: Security Advisory (USN-2306-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2306-1: GNU C Library vulnerabilities

Maksymilian Arciemowicz discovered that the GNU C Library incorrectly handled the getaddrinfo function. An attacker could use this issue to cause a denial of service. This issue only affected Ubuntu 10.04 LTS. CVE-2013-4357 It was discovered that the GNU C Library incorrectly handled the...

CVE-2013-4043

IBM SPSS Collaboration and Deployment Services has an unauthenticated file-disclosure vulnerability (CVE-2013-4043) affecting 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1. A remote attacker can issue an HTTP request to retrieve arbitrary server files. The IBM Security Bullet...

ARC PcVue ActiveX Control SCADA Remote Code Execution (CVE-2011-4042; CVE-2011-4043 ; CVE-2011-4044; CVE-2011-4045)

A buffer overflow vulnerability has been reported in SCADA ARC PcVue...

CVE-2012-4043

Cross-site scripting XSS vulnerability in global-protect/login.esp in Palo Alto Networks Global Protect Portal, Global Protect Gateway, and SSL VPN portals 3.1.x through 3.1.11 and 4.0.x through 4.0.5 allows remote attackers to inject arbitrary web script or HTML via the inputStr parameter in a...

CVE-2012-4043

CVE-2012-4043 is an XSS vulnerability in Palo Alto Networks GlobalProtect portals (Portal, Gateway, SSL VPN) where the inputStr parameter in the Login action can be abused to inject arbitrary script/HTML. Affected versions are GlobalProtect 3.1.x up to 3.1.11 and 4.0.x up to 4.0.5. The provided d...

CVE-2011-4043

CVE-2011-4043 is a buffer overflow in ARC Informatique PcVue’s SVUIGrd.ocx ActiveX control. A crafted large integer input can trigger memory corruption and remote code execution. Affected products include PcVue 6.0–10.0, FrontVue, and PlantVue. Red Hat and ICS-CERT sources corroborate the vulnera...

KLA10292 Multiple vulnerabilities in PcVue

Multiple critical vulnerabilities have been found in PcVue. Malicious users can exploit these vulnerabilities to execute arbitrary code, modify local files or cause denial of service. Below is a complete list of vulnerabilities 1. Unspecified vectors can be exploited remotely; 2. A buffer overflo...

Arc Informatique产品多个ActiveX控件漏洞

CVE ID: CVE-2011-4042,CVE-2011-4043,CVE-2011-4044,CVE-2011-4045 ARC Informatique是开发人机接口、监控和数据捕获HMI/SCADA软件的法国公司。 多个Arc Informatique产品在实现上存在多个安全漏洞，可被恶意用户利用操作某些数据并控制用户系统。 1）处理"SaveObject"和"LoadObject"方法SVUIGrd.ocx时存在的错误可被利用通过特制的"aStream"参数执行虚拟函数调用任意内存位置； 2）"GetExtendedColor"方法SVUIGrd.ocx中的错误可被利用破坏内...

CVE-2011-4043

creationtimestamp| type| source ---|---|--- 2011-09-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17896 2026-07-09 17:48:08+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mqa6x36n5527...

CVE-2010-4043

Technical details (affected product/version/root cause/impact) for CVE-2010-4043 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2010-2049

Cross-site scripting XSS vulnerability in jsp/audit/reports/ExportReport.jsp in ManageEngine ADAudit Plus 4.0.0 build 4043 allows remote attackers to inject arbitrary web script or HTML via the reportList parameter. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2009-4043

Cross-site scripting XSS vulnerability in the AddToAny module 5.x before 5.x-2.4 and 6.x before 6.x-2.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via a node title...

CVE-2009-4043

CVE-2009-4043 is a cross-site scripting (XSS) vulnerability in the Drupal AddToAny module (5.x before 5.x-2.4 and 6.x before 6.x-2.4). An attacker can inject arbitrary web script or HTML via a node title. root cause is insufficient input sanitization in the AddToAny integration, enabling script e...

CVE-2009-4043

Cross-site scripting XSS vulnerability in the AddToAny module 5.x before 5.x-2.4 and 6.x before 6.x-2.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via a node title...