CVE-2014-5022

CVE-2014-5022 is a Drupal 7.x XSS vulnerability in the Ajax form subsystem (Ajax-enabled textfield and file field) exploited remotely to inject script/HTML. Affected software: Drupal core prior to 7.29. Root cause: cross-site scripting in Ajax form handling that can leak or alter content in the b...

CVE-2014-5022

Cross-site scripting XSS vulnerability in the Ajax system in Drupal 7.x before 7.29 allows remote attackers to inject arbitrary web script or HTML via vectors involving forms with an Ajax-enabled textfield and a file field...

Drupal 6.x < 6.32 / 7.x < 7.29 Multiple Vulnerabilities

The remote web server is running a version of Drupal that is 6.x prior to 6.32 or 7.x prior to 7.29. It is, therefore, potentially affected by the following vulnerabilities : - The HTTP Host header, which determines the configuration file used by Drupal core's multisite feature, does not properly...

Debian DSA-2983-1 : drupal7 - security update

Multiple security issues have been discovered in the Drupal content management system, ranging from denial of service to cross-site scripting. More information can be found at https://www.drupal.org/SA-CORE-2014-003. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Valve Steam Client Application 1559/1559 - Local Privilege Escalation

No description provided by source. Valve Steam Client Application v1559/1559 Local Privilege Escalation Vendor: Valve Corporation Product web page: http://www.steampowered.com Affected version: Built: Jun 1, 2011 at 15:31:24 Steam API: v010 Steam package versions 1559 / 1559 File version:...

Oracle Linux 6 : libtiff (ELSA-2011-0452)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0452 advisory. 3.9.4-1.el60.3 - Add fix for CVE-2009-5022 Resolves: 696143 Tenable has extracted the preceding description block directly from the Oracle Linux security...

CVE-2009-5022

creationtimestamp| type| source ---|---|--- 2012-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22681...

Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey. CVE-2008-0017, CVE-2008-5013, CVE-2008-5014, CVE-2008-5016, CVE-2008-5017,...

Scientific Linux Security Update : thunderbird on SL4.x, SL5.x i386/x86_64

Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code as the user running Thunderbird. CVE-2008-5014, CVE-2008-5016, CVE-2008-5017, CVE-2008-5018,...

Scientific Linux Security Update : libtiff on SL6.x i386/x86_64

A heap-based buffer overflow flaw was found in the way libtiff processed certain TIFF image files that were compressed with the JPEG compression algorithm. An attacker could use this flaw to create a specially crafted TIFF file that, when opened, would cause an application linked against libtiff ...

RedHat Update for libtiff RHSA-2011:0452-01

Check for the Version of libtiff OpenVAS Vulnerability Test RedHat Update for libtiff RHSA-2011:0452-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for libtiff RHSA-2011:0452-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-5022

Summary: CVE-2011-5022 affects Pligg CMS 1.1.2, with an SQL injection in search.php via the status parameter. The root cause is improper handling of user-supplied input in the search functionality, enabling arbitrary SQL execution by remote attackers. Impact (as stated): Remote attackers can exec...

CVE-2011-5022

creationtimestamp| type| source ---|---|--- 2011-12-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36495...

CVE-2010-5022

CVE-2010-5022 affects Joomla! with the JExtensions JE Story Submit (com_jesubmit) component version 1.4. The vulnerability is an SQL injection in the view parameter to index.php, enabling remote attackers to execute arbitrary SQL commands. This is supported by multiple sources (NVD, Red Hat, CVE ...

CVE-2010-5022

SQL injection vulnerability in the JExtensions JE Story Submit comjesubmit component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...

Valve Steam Client Application 15591559 - Local Privilege Escalation

Valve Steam Client Application 15591559 - Local Privilege Escalation Valve Steam Client Application v1559/1559 Local Privilege Escalation Vendor: Valve Corporation Product web page: http://www.steampowered.com Affected version: Built: Jun 1, 2011 at 15:31:24 Steam API: v010 Steam package versions...

Valve Steam Client Application v1559/1559 Local Privilege Escalation

Exploit for windows platform in category local exploits Valve Steam Client Application v1559/1559 Local Privilege Escalation Vendor: Valve Corporation Product web page: http://www.steampowered.com Affected version: Built: Jun 1, 2011 at 15:31:24 Steam API: v010 Steam package versions 1559 / 1559...

Valve Steam Client Application 1559/1559 - Local Privilege Escalation

Valve Steam Client Application v1559/1559 Local Privilege Escalation Vendor: Valve Corporation Product web page: http://www.steampowered.com Affected version: Built: Jun 1, 2011 at 15:31:24 Steam API: v010 Steam package versions 1559 / 1559 File version: 1.0.968.628 Summary: Steam is a digital...

[SECURITY] [DSA 2256-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2256-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 9, 2011 http://www.debian.org/security/faq -...