CVE-2010-4767

CVE-2010-4767 affects Open Ticket Request System (OTRS) prior to version 2.3.6. The issue arises in how the system processes email messages where the From header contains UTF-8 characters with diacritical marks alongside an invalid charset, enabling a remote attacker to cause a DoS by sending a c...

Mac OS X Security Update 2007-009

The remote host is missing Security Update 2007-009. One or more of the following components are affected: Address Book CFNetwork ColorSync Core Foundation CUPS Desktop Services Flash Player Plug-in GNU Tar iChat IO Storage Family Launch Services Mail perl python Quick Look ruby Safari Safari RSS...

CVE-2009-4767

Technical details, affected versions, exploit steps, and remediation are not provided in the connected documents; monitor for updates.

CVE-2009-4767

creationtimestamp| type| source ---|---|--- 2009-11-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10168...

MyBB < 1.4.4 CSRF

Binary data 4767.prm...

CVE-2008-4767

Unrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote attackers to execute arbitrary code by uploading a file with 1 .htm, 2 .html, or 3 .txt extensions, then accessing it via a direct request to the file. NOTE: the provenance of this information is unknown;...

CVE-2008-4767

The CVE-2008-4767 entry describes an unrestricted file upload vulnerability in the DownloadsPlus module of PHP-Nuke. An attacker could upload a file with .htm, .html, or .txt extensions and then access it directly to trigger arbitrary code execution. The description notes uncertainty about how .h...

Gentoo Security Advisory GLSA 200805-11 (chicken)

The remote host is missing updates announced in advisory GLSA 200805-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200801-19 (goffice)

The remote host is missing updates announced in advisory GLSA 200801-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200711-30 (libpcre)

The remote host is missing updates announced in advisory GLSA 200711-30. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-4767

creationtimestamp| type| source ---|---|--- 2008-04-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31702...

Fedora 7 : pcre-7.3-3.fc7 (2008-1842)

This update re-based pcre to version 7.3 as used in Fedora 8 to address multiple security issues that cause memory corruption, leading to application crash or possible execution of arbitrary code. CVE-2007-1659 315871, CVE-2007-1661 392931, CVE-2007-1662 392921, CVE-2007-4766 392891, CVE-2007-476...

Debian Security Advisory DSA 1399-1 (pcre3)

The remote host is missing an update to pcre3 announced via advisory DSA 1399-1. OpenVAS Vulnerability Test $Id: deb13991.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1399-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1399-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PCRE: Multiple vulnerabilities

Background PCRE is a library providing functions for Perl-compatible regular expressions. Description Tavis Ormandy Google Security discovered multiple vulnerabilities in PCRE. He reported an error when processing "\Q\E" sequences with unmatched "\E" codes that can lead to the compiled bytecode...

openSUSE 10 Security Update : pcre (pcre-4683)

Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code. CVE-2007-1659, CVE-2007-1660, CVE-2007-1661,...

CVE-2007-4767

CVE-2007-4767 affects PCRE prior to 7.3, where length computation for \p, \P, and \P{x} sequences can be flawed. This can cause DoS via infinite loops or crashes, and may allow arbitrary code execution. Affected component: PCRE regex engine; root cause: incorrect length calculations for the liste...

Debian DSA-1399-1 : pcre3 - several vulnerabilities

Tavis Ormandy of the Google Security Team has discovered several security issues in PCRE, the Perl-Compatible Regular Expression library, which potentially allow attackers to execute arbitrary code by compiling specially crafted regular expressions. Version 7.0 of the PCRE library featured a majo...

DSA-1399-1 pcre3 - arbitrary code execution

Bulletin has no description...

CVE-2006-4767

The CVE-2006-4767 entry concerns Stefan Ernst Newsscript (aka WM-News) 0.5beta. The described vulnerabilities are directory traversal flaws caused by improper handling of a .. sequence: (1) in modify.php with the ide parameter could allow reading arbitrary local files, and (2) in add_go.php with ...