GLSA-201406-33 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201406-33 Wireshark: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details. Impact : A remote attacker can cause arbitrary code executio...

CVE-2014-4174

CVE-2014-4174 affects the Wireshark libpcap parser (wiretap/libpcap.c) in Wireshark 1.10.x prior to 1.10.4. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted packet-trace file that includes a large packet, leading to memory corruption and appli...

CVE-2014-4174

wiretap/libpcap.c in the libpcap file parser in Wireshark 1.10.x before 1.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted packet-trace file that includes a large packet...

CVE-2010-4174

...

CVE-2010-4174

CVE-2010-4174 is rejected/not used; refer to CVE-2010-3282.

CVE-2013-4174

Multiple cross-site scripting XSS vulnerabilities in the Scald module 7.x-1.x before 7.x-1.1 for Drupal allow remote attackers to inject arbitrary web script or HTML via the 1 flashuri, 2 flashwidth, or 3 flashheight in the scaldflashscaldprerender function in...

CVE-2013-4174

The CVE-2013-4174 entry affects Drupal Scald module 7.x-1.x prior to 7.x-1.1, with multiple XSS vulnerabilities in the Scald Flash and Scald Image prerender paths. Specifically, user-supplied values in flash_uri, flash_width, and flash_height (scald_flash_scald_prerender) and caption (scald_image...

SA-CONTRIB-2013-060 - Scald - Cross Site Scripting (XSS)

This module enables you to handle media assets atoms in Drupal with a Views-based library, drag and drop interface and manage content attribution/licensing/distribution. The module doesn't sufficiently filter atom properties such as the atom title when outputting atoms, thereby exposing a Cross...

Fedora Update for glibc FEDORA-2013-4174

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Buffer overflow

Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4174, and CVE-2012-5273...

CVE-2012-4174

Adobe Shockwave Player before 11.6.8.638 is vulnerable to CVE-2012-4174 due to a buffer overflow in Shockwave, allowing arbitrary code execution. Connected docs corroborate this family of vulnerabilities (including CVE-2012-4172/4173/4175/5273) and list affected versions; remediation guidance in ...

CVE-2012-4174

Buffer overflow in Adobe Shockwave Player before 11.6.8.638 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2012-4172, CVE-2012-4173, CVE-2012-4175, and CVE-2012-5273...

Adobe Plugs Several Buffer Overflow Holes in Shockwave Player

Adobe announced today it has repaired a host of critical buffer overflow vulnerabilities and an array out of bounds vulnerability in Shockwave Player and urges users to update to the latest version of the software, version 11.6.8.638. The company said it is not aware of active exploits. Both the...

Adobe Shockwave 11.6.7.637 contains multiple exploitable vulnerabilities

Overview Adobe Shockwave Player 11.6.7.637 and earlier versions on the Windows and Macintosh operating systems contain critical vulnerabilities that can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Adobe Macromedia Shockwave Player is...

CuteNews/UTF-8 CuteNews Multiple Vulneablities

The host is running CuteNews/UTF-8 CuteNews and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbcutenewsnutf8cutenewsmultvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ CuteNews/UTF-8 CuteNews Multiple Vulneablities Authors: Antu Sanadi Udated By: Antu Sanadi on 2009-12-10 61...

CVE-2009-4174

The editnews module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b, when magicquotesgpc is disabled, allows remote authenticated users with Journalist or Editor access to bypass administrative moderation and edit previously submitted articles via a modified id parameter in a doeditnews...

CVE-2009-4174

CVE-2009-4174 affects CuteNews: the editnews module in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews prior to 8b. When magic_quotes_gpc is disabled, remote authenticated users with Journalist or Editor access can bypass administrative moderation and edit previously submitted articles by modifying the...

CVE-2008-4174

CVE-2008-4174 affects Dynamic MP3 Lister 2.0.1. The vulnerabilities are multiple XSS in index.php, allowing remote attackers to inject arbitrary web script or HTML via the parameters currentpath, invert, search, and sort. The root cause is input handling in index.php leading to script injection. ...

CVE-2008-4174

creationtimestamp| type| source ---|---|--- 2008-09-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32364...

CVE-2007-4174

CVE-2007-4174 affects Tor prior to 0.1.2.16, where enabling ControlPort allows remote commands to be sent via HTTP POST without authentication to localhost port 9051, enabling modification of torrc and potential anonymity compromise. Public feeds confirm the issue and reference Fedora advisories ...