191 matches found
openSUSE Security Update : LibreOffice (openSUSE-SU-2014:1126-1)
This update fixes memory corruption vulnerability in DOCM import and data exposure using crafted OLE objects. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-540. The text...
SuSE 11.3 Security Update : LibreOffice (SAT Patch Number 9677)
LibreOffice was updated to version 4.0.3.3.26. SUSE 4.0-patch26, tag suse-4.0-26, based on upstream 4.0.3.3. Two security issues have been fixed : - DOCM memory corruption vulnerability. CVE-2013-4156, bnc831578 - Data exposure using crafted OLE objects. CVE-2014-3575, bnc893141 The following...
LibreOffice < 3.6.7 / 4.0.4 / 4.1.0 .docm Import DoS
A version of LibreOffice prior to 3.6.7 / 4.0.4 / 4.1.0 is installed on the remote Windows host. It is, therefore, reportedly affected by a denial of service vulnerability. A flaw exists in the .docm import filter that could cause a NULL dereference. This could allow a remote attacker with a...
HP Network Node Manager Cross-Site Scripting - Ver2 (CVE-2011-4156)
A cross-site scripting vulnerability has been reported in Hp Network Node Manager I. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
CVE-2013-4156
CVE-2013-4156 affects Apache OpenOffice.org prior to 4.0, where a crafted OOXML document element can trigger memory corruption, enabling remote denial of service (and possibly other impact). The provided connected docs reference LibreOffice/OpenOffice patches but do not specify a confirmed OpenOf...
KLA10243 DoS vulnerability in LibreOffice
An unspecified vulnerability was found in LibreOffice. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed XML document. Original advisories LibreOffice advisory Related products LibreOffice CVE list...
Apache OpenOffice DOCM内存破坏漏洞(CVE-2013-4156)
BUGTRAQ ID: 61468 CVECAN ID: CVE-2013-4156 Apache OpenOffice是开源办公软件套装。 OpenOffice 3.4.0、3.4.1处理畸形OOXML文件内的XML元素不当会造成内存破坏，导致拒绝服务。 0 OpenOffice 3.4.0 - 3.4.1 厂商补丁： OpenOffice ---------- OpenOffice已经为此发布了一个安全公告（CVE-2013-4156）以及相应补丁: CVE-2013-4156：CVE-2013-4156...
Oracle Linux 5 : php53 (ELSA-2011-0196)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0196 advisory. 5.3.3-1.1 - add security fixes for CVE-2010-3710, CVE-2010-4156, CVE-2010-4645 670463 Tenable has extracted the preceding description block directly fr...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject arbitrary web script or HTML via the 1 node parameter to nnm/mibdiscover; 2 nodename parameter to nnm/protected/configurationpoll.jsp, 3 nnm/protected/ping.jsp, 4...
CVE-2011-5184
Multiple cross-site scripting XSS vulnerabilities in HP Network Node Manager i 9.10 allow remote attackers to inject arbitrary web script or HTML via the 1 node parameter to nnm/mibdiscover; 2 nodename parameter to nnm/protected/configurationpoll.jsp, 3 nnm/protected/ping.jsp, 4...
Adobe Acrobat Multiple Vulnerabilities - Windows
This host is installed with Adobe Acrobats and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeacrobatmultvulnaug12win.nasl 8210 2017-12-21 10:26:31Z cfischer $ Adobe Acrobat Multiple Vulnerabilities - Windows Authors: Thanga Prakash S Copyright: Copyright c 2013...
Adobe Acrobat < 10.1.4 / 9.5.2 Multiple Vulnerabilities (APSB12-16)
The version of Adobe Acrobat installed on the remote host is earlier than 10.1.4 / 9.5.2 and is, therefore, affected by multiple vulnerabilities : - An unspecified stack-based buffer overflow error exists. CVE-2012-2049 - An unspecified buffer overflow error exists. CVE-2012-2050 - Numerous...
Adobe Reader < 10.1.4 / 9.5.2 Multiple Vulnerabilities (APSB12-16) (Mac OS X)
The version of Adobe Reader installed on the remote Mac OS X host is prior to 10.1.4 or 9.5.2. It is, therefore, affected by the following vulnerabilities : - An unspecified stack-based buffer overflow condition exists that allows an attacker to execute arbitrary code. CVE-2012-2049 - An...
CVE-2012-4156
CVE-2012-4156 affects Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X. The issue allows executing arbitrary code or causing a memory corruption denial of service via unspecified vectors (distinct from listed CVEs). The provided sources do not specify the r...
Scientific Linux Security Update : php53 on SL5.x i386/x86_64
A flaw was found in the way PHP converted certain floating point values from string representation to a number. If a PHP script evaluated an attacker's input in a numeric context, the PHP interpreter could cause high CPU usage until the script execution time limit is reached. This issue only...
CentOS Update for php53 CESA-2011:0196 centos5 x86_64
Check for the Version of php53 OpenVAS Vulnerability Test CentOS Update for php53 CESA-2011:0196 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
CentOS Update for php53 CESA-2011:0196 centos5 x86_64
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
PHP < 5.3.4 Multiple Vulnerabilities
PHP is prone to multiple vulnerabilities. Copyright C 2012 NopSec Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...
[security bulletin] HPSBMU02708 SSRT100633 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Cross Site Scripting (XSS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03035744 Version: 1 HPSBMU02708 SSRT100633 rev.1 - HP Network Node Manager i NNMi for HP-UX, Linux, Solaris, and Windows, Remote Cross Site Scripting XSS NOTICE: The information in this Security...
Cross site scripting
Cross-site scripting XSS vulnerability in HP Network Node Manager i NNMi 9.0x and 9.1x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4156...