95 matches found
SuSE 11.1 Security Update : gimp (SAT Patch Number 4107)
Several gimp plugins were prone to buffer overflows. CVE-2010-4540 / CVE-2010-4541 / CVE-2010-4542 / CVE-2010-4543 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyrig...
CVE-2010-4543
Heap-based buffer overflow in the readchanneldata function in file-psp.c in the Paint Shop Pro PSP plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a PSPCOMPRLE aka RLE compression image file that begins a long run...
CVE-2010-4543
Heap-based buffer overflow in the readchanneldata function in file-psp.c in the Paint Shop Pro PSP plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a PSPCOMPRLE aka RLE compression image file that begins a long run...
CVE-2010-4543
CVE-2010-4543 affects the GIMP 2.6.11 PSP plugin. The issue is a heap-based buffer overflow in the read_channel_data function (file-psp.c) that can be triggered by a PSP_COMP_RLE image file with a long run count at the end of the image. This may allow a remote attacker to crash the application or...
CVE-2010-4543
creationtimestamp| type| source ---|---|--- 2010-12-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35162...
CVE-2009-4543
CVE-2009-4543 affects Cromosoft Technologies Facil Helpdesk 2.3 Lite. The issue is a PHP remote file inclusion in index.php via the lng parameter, which can also be triggered to include and execute local files through .. sequences. Documented impact is arbitrary PHP code execution with network ac...
CVE-2009-4543
creationtimestamp| type| source ---|---|--- 2009-08-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9396...
CVE-2008-4543
Cisco Unity in 4.x (before 4.2(1)ES161), 5.x (before 5.0(1)ES53), and 7.x (before 7.0(2)ES8) is affected when using anonymous/native Unity authentication. A remote attacker can cause a denial of service by exhausting sessions via a large number of connections. Root cause is an authentication/conf...
CVE-2008-4543
Cisco Unity 4.x before 4.21ES161, 5.x before 5.01ES53, and 7.x before 7.02ES8, when using anonymous authentication aka native Unity authentication, allows remote attackers to cause a denial of service session exhaustion via a large number of connections...
Gentoo Security Advisory GLSA 200709-18 (bugzilla)
The remote host is missing updates announced in advisory GLSA 200709-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
FreeBSD Ports: bugzilla, ja-bugzilla
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2007-4543
Cross-site scripting XSS vulnerability in enterbug.cgi in Bugzilla 2.17.1 through 2.20.4, 2.22.x before 2.22.3, and 3.x before 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the buildid field in the "guided form."...
CVE-2007-4543
CVE-2007-4543 is a cross-site scripting (XSS) vulnerability in Bugzilla. According to the provided sources, it affects the bug filing form in Bugzilla’s guided form via the buildid parameter. A remote attacker could inject arbitrary script/HTML, enabling credential theft or session compromise. Af...
CVE-2006-4543
CVE-2006-4543 is an XSS vulnerability in HLStats 1.34 (index.php). The issue allows remote attackers to inject arbitrary script or HTML via specific parameters across multiple modes: (1) game in players mode, (2) weapon in weaponinfo mode, (3) st in search mode, (4) action in actioninfo mode, and...