140 matches found
kdelibs security update
6:4.3.4-14.2 - fix multilib conflict 6:4.3.4-14.1 - Resolves: bz866228, CVE-2012-4512 CVE-2012-4513...
CVE-2011-4513
CVE-2011-4513 affects Siemens WinCC Flexible (2004–2008), WinCC V11 (TIA Portal), SIMATIC HMI panels (TP/OP/MP/Comfort/Mobile), and WinCC Runtime Advanced/Flexible Runtime. The vulnerability allows user-assisted remote attackers to execute arbitrary code via a crafted project file, related to the...
CVE-2010-4513
Zimplit CMS 3.0 (and possibly earlier) contains cross-site scripting (XSS) vulnerabilities (CVE-2010-4513) in two parameters: the file parameter of zimplit.php when action=load, and the client parameter of English_manual_version_2.php. The root cause is input sanitation errors that allow remote a...
CVE-2009-4513
Multiple cross-site scripting XSS vulnerabilities in the Workflow module 5.x before 5.x-2.4 and 6.x before 6.x-1.2, a module for Drupal, allow remote authenticated users, with "administer workflow" privileges, to inject arbitrary web script or HTML via the name of a 1 workflow or 2 workflow state...
CVE-2009-4513
CVE-2009-4513 affects the Drupal Workflow module: 5.x before 5.x-2.4 and 6.x before 6.x-1.2. An XSS vulnerability allows remote authenticated users with the administer workflow privilege to inject arbitrary script/HTML via the name of a workflow or a workflow state. Root cause is insufficient san...
CVE-2009-4513
Multiple cross-site scripting XSS vulnerabilities in the Workflow module 5.x before 5.x-2.4 and 6.x before 6.x-1.2, a module for Drupal, allow remote authenticated users, with "administer workflow" privileges, to inject arbitrary web script or HTML via the name of a 1 workflow or 2 workflow state...
CVE-2008-4513
CVE-2008-4513 describes a cross-site scripting (XSS) vulnerability in the BBcode API module of Phorum 5.2.8. The issue allows remote attackers to inject arbitrary web script or HTML via nested BBcode image tags. This is documented in multiple sources (NVD entry and related CVE records). The provi...
Gentoo Security Advisory GLSA 200612-01 (wv library)
The remote host is missing updates announced in advisory GLSA 200612-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
SuSE 10 Security Update : wv (ZYPP Patch Number 2280)
Two integer overflows were found in the Microsoft Word converter library 'wv', which could potentially be used to crash programs using this library or to even execute code. - A LVL Count Integer Overflow Vulnerability was fixed. - A LFO Count Integer Overflow Vulnerability was fixed. Both problem...
Immunity Canvas: CVE_2007_4513
Name| CVE20074513 ---|--- CVE| CVE-2007-4513 Exploit Pack| CANVAS Description| CVE-2007-4513: lquerypv Notes| CVE Name: CVE-2007-4513 VENDOR: IBM VersionsAffected: 5.X Repeatability: unlimited CVE URL: https://vulners.com/cve/CVE-2007-4513 CVSS: 7.2...
CVE-2007-4513
Summary: CVE-2007-4513 affects IBM AIX 5.2/5.3. The vulnerable components are the AIX utilities lqueryvg (option -p) and lquerypv (option -V). The root cause is a stack-based buffer overflow caused by copying an overly long argument into a fixed-size buffer via sprintf. This enables local privile...
openSUSE 10 Security Update : wv (wv-2279)
Two integer overflows were found in the Microsoft Word converter library 'wv', which could potentially be used to crash programs using this library or to even execute code. - A LVL Count Integer Overflow Vulnerability was fixed. - A LFO Count Integer Overflow Vulnerability was fixed. Both problem...
iDefense Security Advisory 10.26.06: Multiple Vendor wvWare LVL Count Integer Overflow Vulnerability
Multiple Vendor wvWare LVL Count Integer Overflow Vulnerability iDefense Security Advisory 10.26.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 26, 2006 I. BACKGROUND The WV library provides an interface to facilitate access to binary file format Microsoft Word documents. The projec...
CVE-2006-4513
Multiple integer overflows in the WV library in wvWare formerly mswordview before 1.2.3, as used by AbiWord, KWord, and possibly other products, allow user-assisted remote attackers to execute arbitrary code via a crafted Microsoft Word DOC file that produces 1 large LFO clfolvl values in the...
CVE-2006-4513
Multiple integer overflows in the WV library in wvWare formerly mswordview before 1.2.3, as used by AbiWord, KWord, and possibly other products, allow user-assisted remote attackers to execute arbitrary code via a crafted Microsoft Word DOC file that produces 1 large LFO clfolvl values in the...
CVE-2006-4513
CVE-2006-4513 affects the WV library used by wvWare (formerly mswordview). The issue is two integer overflow flaws in the Word converter: LVL count and LFO count (wvGetLFO_records and wvGetFLO_PLF), exploitable via crafted DOC files to execute code. Affected products include AbiWord and KWord (an...
CVE-2006-4513
Multiple integer overflows in the WV library in wvWare formerly mswordview before 1.2.3, as used by AbiWord, KWord, and possibly other products, allow user-assisted remote attackers to execute arbitrary code via a crafted Microsoft Word DOC file that produces 1 large LFO clfolvl values in the...
CVE-2005-4513
The CVE-2005-4513 entry describes a Cross-site Scripting (XSS) vulnerability in the product WANDSOFT e-SEARCH . An attacker could trigger the issue by supplying crafted input in the search parameters (possibly the keywords parameter) that is reflected in the web page, enabling remote script/HTML ...