Joomla Component com_jsjobs SQL Injection (CVE-2009-4599)

An SQL injection vulnerability has been reported in Joomshark Com Jsjobs. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2014-4599

CVE-2014-4599 affects the WordPress WP-Business Directory (wp-ttisbdir) plugin, specifically version 1.0.2 and earlier. The vulnerability is multiple cross-site scripting (XSS) flaws in forms/search.php that allow remote attackers to inject arbitrary script/HTML via the edit, search_term, page_id...

CVE-2014-4599

Multiple cross-site scripting XSS vulnerabilities in forms/search.php in the WP-Business Directory wp-ttisbdir plugin 1.0.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 edit, 2 searchterm, 3 pageid, 4 page, or 5 pagelinks parameter...

openSUSE Security Update : icu (openSUSE-SU-2012:0100-1)

Specially crafted strings could cause a buffer overflow in icu CVE-2011-4599. An integer overflow in the getSymbol function could crash applications using icu CVE-2010-4409 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE Security Update : icu (openSUSE-SU-2012:0100-1)

Specially crafted strings could cause a buffer overflow in icu CVE-2011-4599. An integer overflow in the getSymbol function could crash applications using icu CVE-2010-4409 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

CVE-2013-4599

The CVE-2013-4599 affects the Misery module for Drupal 6.x-2.x (pre-6.x-2.5) and 7.x-2.x (pre-7.x-2.2). The root cause is a misconfiguration of the delay misery setting, which when high can cause remote attackers to trigger denial of service by exhausting web-server processes through multiple req...

SA-CONTRIB-2013-092 - Misery - Denial of Service (DOS) vulnerability.

This module enables you to make life difficult for certain users, such as trolls, as an alternative to banning or deleting them from a community. The module provides means by which to punish members of your website. The aim of misery is to be not traceable by users on the misery list, so misery...

Amazon Linux AMI : icu (ALAS-2012-33)

A stack-based buffer overflow flaw was found in the way ICU performed variant canonicalization for some locale identifiers. If a specially crafted locale representation was opened in an application linked against ICU, it could cause the application to crash or, possibly, execute arbitrary code wi...

SuSE 11.2 Security Update : icu (SAT Patch Number 7204)

This update is rereleased because some architectures were missed on the first try. It fixes the following security issues : - Specially crafted strings could cause a buffer overflow in icu. CVE-2011-4599 - An integer overflow in the getSymbol function could crash applications using icu...

Mac OS X v10.6.8 Multiple Vulnerabilities (2012-004)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-004. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mac OS X 10.7.x < 10.7.5 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.5. The newer version contains multiple security-related fixes for the following components : - Apache - BIND - CoreText - Data Security - ImageIO - Installer - International Components for Unicode - Kernel - Mail - PHP ...

Mac OS X Multiple Vulnerabilities (Security Update 2012-004) (BEAST)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-004 applied. This update contains multiple security-related fixes for the following components : - Apache - Data Security - DirectoryService - ImageIO - International Components for Unicode - Mail - PHP ...

Scientific Linux Security Update : icu on SL5.x, SL6.x i386/x86_64

The International Components for Unicode ICU library provides robust and full-featured Unicode services. A stack-based buffer overflow flaw was found in the way ICU performed variant canonicalization for some locale identifiers. If a specially crafted locale representation was opened in an...

CentOS Update for icu CESA-2011:1815 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for icu CESA-2011:1815 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-4599

Stack-based buffer overflow in the canonicalize function in common/uloc.c in International Components for Unicode ICU before 49.1 allows remote attackers to execute arbitrary code via a crafted locale ID that is not properly handled during variant canonicalization...

CVE-2011-4599

ICU vulnerability CVE-2011-4599 is described in IBM/Intel ICU-related advisories as a stack-based buffer overflow in the _canonicalize function (common/uloc.c) of ICU prior to 49.1, allowing remote code execution via crafted locale IDs during variant canonicalization. Connected sources also refer...

[SECURITY] [DSA 2397-1] icu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2397-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 29, 2012 http://www.debian.org/security/faq -...

SuSE 11.1 Security Update : icu (SAT Patch Number 5653)

The following bugs have been fixed : - Specially crafted strings could cause a buffer overflow in icu. CVE-2011-4599 - An integer overflow in the getSymbol function could crash applications using icu CVE-2010-4409 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

[ MDVSA-2011:194 ] icu

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:194 http://www.mandriva.com/security/ Package : icu Date : December 27, 2011 Affected: 2010.1, 2011., Enterprise Server 5.0 Problem Description: A vulnerability has been discovered and corrected in icu: A...