178 matches found
Scientific Linux Security Update : pcre on SL5.x i386/x86_64
This importance of this has been reduced to 'Important' We have renumbered the release for SL5 so that it doesn't conflict with the previous pcre security update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'deprecatednasllevel.inc';...
CVE-2011-4872
The CVE-2011-4872 issue affects multiple HTC Android devices (e.g., Desire HD FRG83D/GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation lines, EVO lines). A remote attacker with android.permission.ACCESS_WIFI_STATE can call WifiConfiguration.toString() to reveal 802.1X...
802.1X password exploit on many HTC Android devices
Overview A user's 802.1X WiFi credentials and SSID information may be exposed to any application with basic WiFi permissions on certain HTC builds of Android. Description Any Android application on an affected HTC build with the android.permission.ACCESSWIFISTATE permission can use the .toString...
CVE-2009-4872
Multiple SQL injection vulnerabilities in globepersonnellogin.asp in Logoshows BBS 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...
CVE-2009-4872
CVE-2009-4872 affects Logoshows BBS 2.0, specifically globepersonnel_login.asp. The vulnerability is multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL via the username or password fields. The connected records confirm the affected component/file and the underlying ...
CentOS 4 : pcre (CESA-2007:1052)
Updated pcre packages that correct security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 15 November 2007 Further analysis of these flaws in PCRE has led to the single C...
CVE-2008-4872
Cross-site scripting XSS vulnerability in bidhistory.php in iTechBids Gold 5.0 allows remote attackers to inject arbitrary web script or HTML via the itemid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-4872
The CVE-2008-4872 entry describes a Cross-site scripting (XSS) vulnerability in the iTechBids Gold 5.0 product, specifically in the bidhistory.php script, where an attacker can inject arbitrary web script or HTML through the item_id parameter. The affected component is the bidhistory.php code pat...
SuSE 10 Security Update : PHP5 (ZYPP Patch Number 4808)
This update fixes multiple bugs in php : - use system pcre library to fix several pcre vulnerabilities. CVE-2007-1659 / CVE-2006-7230 / CVE-2007-1660 / CVE-2006-7227 / CVE-2005-4872 / CVE-2006-7228 - Flaws in processing multi byte sequences in htmlentities/htmlspecialchars. CVE-2007-5898 - overly...
CVE-2005-4872
Perl-Compatible Regular Expression PCRE library before 6.2 does not properly count the number of named capturing subpatterns, which allows context-dependent attackers to cause a denial of service crash via a regular expression with a large number of named subpatterns, which triggers a buffer...
CVE-2005-4872
The CVE-2005-4872 issue affects the PCRE library (pre-6.2) where counting of named capturing subpatterns is incorrect, allowing a context-dependent attacker to trigger a buffer overflow and cause a denial of service (crash). The vulnerability is tied to related CVEs (e.g., CVE-2006-7224) and is a...
RHEL 4 / 5 : pcre (RHSA-2007:1052)
Updated pcre packages that correct security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 15 November 2007 Further analysis of these flaws in PCRE has led to the single C...
Important: Red Hat Security Advisory: pcre security update
Updated pcre packages that correct security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 15 November 2007 Further analysis of these flaws in PCRE has led to the single C...
CVE-2006-7224
The connected advisories confirm that CVE-2006-7224 is part of PCRE-related vulnerabilities addressed in Oracle Linux/RHEL advisories (e.g., ELSA-2007-1052, ELSA-2007-1059, and related entries). These entries cite CVE-2006-7224 alongside other CVEs (e.g., 2006-7225, 2006-7226, 2006-7228, 2006-723...
CVE-2007-4872
CVE-2007-4872 affects SimpNews 2.41.03. The vulnerability is a path-disclosure flaw allowing remote attackers to learn server-side paths via errors from admin/index.php (invalid lang) and direct requests to admin/dbg_infos.php, admin/heading.php, or evsearch.php, exposing partial confidentiality....
CVE-2006-4872
The CVE-2006-4872 entry describes an SQL injection in Keyvan1 (Keyvan Janghorbani) ECardPro 2.0, exploitable via the keyword parameter in search.asp. The affected component is the search functionality (search.asp) and the underlying cause is an SQL injection allowing remote execution of arbitrary...
CVE-2005-4872
Perl-Compatible Regular Expression PCRE library before 6.2 does not properly count the number of named capturing subpatterns, which allows context-dependent attackers to cause a denial of service crash via a regular expression with a large number of named subpatterns, which triggers a buffer...