135 matches found
CVE-2012-4262
CVE-2012-4262 affects the myCare2x CMS with multiple XSS vulnerabilities. The CFP vectors are injected via parameters in several modules: name_last/name_first/name_middle/name_maiden (modules/patient/mycare_pid.php), favorites/lang (modules/nursing/mycare_ward_print.php), aktion/callurl (modules/...
CVE-2012-4262
creationtimestamp| type| source ---|---|--- 2012-05-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18844...
RealNetworks RealPlayer Multiple Vulnerabilities Nov - 11 (Windows)
This host is installed with RealPlayer which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodrealplayermultvulnnov11win.nasl 7052 2017-09-04 11:50:51Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Nov - 11 Windows Authors: Madhuri D Copyright: Copyright c...
CVE-2011-4262
Unspecified vulnerability in RealNetworks RealPlayer before 15.0.0 allows remote attackers to execute arbitrary code via a crafted MP4 file...
CVE-2011-4262
RealPlayer for Windows prior to 15.0.0 is affected by CVE-2011-4262 due to a flaw in MP4 file handling (mp4fformat) where an incorrect size value allows remote code execution when parsing crafted MP4 files. The vulnerability stack is corroborated by multiple sources (ZDI-12-050 describing the mp4...
Mandriva Update for xfig MDVSA-2011:010 (xfig)
Check for the Version of xfig OpenVAS Vulnerability Test Mandriva Update for xfig MDVSA-2011:010 xfig Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Fedora Update for xfig FEDORA-2010-18589
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2010-4262
CVE-2010-4262 describes a stack-based buffer overflow in Xfig 3.2.4/3.2.5 triggered by a crafted FIG image color definition, leading to remote denial of service and potential arbitrary code execution. Several open advisories reference this vulnerability along with CVEs-2009-4227/-4228, indicating...
CVE-2009-4262
HB-NS NewsScript 1.3 is affected by CVE-2009-4262, where remote attackers can obtain access to the admin control panel by making a direct request to admin.php. The vulnerability is described in multiple sources (NVD) with a CVSS v2 base score of 7.5 (HIGH) and an attack vector of NETWORK, requiri...
RedHat Security Advisory RHSA-2009:1101
The remote host is missing updates announced in advisory RHSA-2009:1101. cscope is a mature, ncurses-based, C source-code tree browsing tool. Multiple buffer overflow flaws were found in cscope. An attacker could create a specially crafted source code file that could cause cscope to crash or,...
[SECURITY] [DSA 1186-1] New cscope packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1186-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 30th, 2006 http://www.debian.org/security/faq -...
CVE-2006-4262
Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via multiple vectors including 1 a long pathname that is not properly handled during file list parsing, 2 long pathnames that result from path...
CVE-2006-4262
cscope versions 15.5 and earlier are affected by multiple buffer overflow flaws (CVE-2006-4262). The vulnerabilities allow a user-assisted attacker to crash the program or possibly execute arbitrary code via (1) long pathnames in file list parsing, (2) long pathnames from HOME tilde expansion, an...
CVE-2005-4262
CVE-2005-4262 is described as a cross-site scripting (XSS) vulnerability in the Envolution News module. The issue allows remote attackers to inject arbitrary web script or HTML through the (1) startrow and (2) catid parameters. The description notes this issue may be related to an SQL injection p...
