CVE-2012-5101

The affected software is Joomla! JE Poll component (before version 1.1). It has an SQL injection vulnerability that can allow remote attackers to execute arbitrary SQL commands via unspecified vectors. The root cause is a flaw in JE Poll prior to 1.1 that enables injection and data access/modific...

Monstra 1.2.1 Cross Site Scripting

Monstra 1.2.1 Multiple HTML Injection Vulnerabilities input type="hidden" name="menu...

CVE-2011-5101

The CVE-2011-5101 entry concerns the Rumor technology in McAfee SaaS Endpoint Protection (pre-5.2.4). The available documents specify that this component allows remote attackers to relay email messages via unspecified vectors, demonstrated by relaying spam. The exact affected versions are McAfee ...

CVE-2010-5101

Directory traversal vulnerability in the TypoScript setup in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated administrators to read arbitrary files via unspecified vectors related to the "file inclusion functionality."...

CVE-2010-5101

The TYPO3 CVE-2010-5101 entry documents a directory traversal vulnerability in TypoScript setup affecting TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5. The issue allows remote authenticated administrators to read arbitrary files via unspecified vectors related to the file...

CVE-2009-5101

Pentaho BI Server 1.7.0.1062 and earlier is affected by CVE-2009-5101 due to including the JSESSIONID in the URL. The session ID can be obtained from session history, Referer headers, or by sniffing web traffic, enabling an attacker to hijack a user session. The CVSS base score is 5.0 (Medium) wi...

openSUSE Security Update : optipng (optipng-572)

Specially crafted BMP files could overflow a buffer in optipng CVE-2008-5101, specially crafted GIF files could crash optipng CVE-2009-0749. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

SuSE Security Summary SUSE-SR:2009:006

The remote host is missing updates announced in advisory SUSE-SR:2009:006. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

openSUSE 10 Security Update : optipng (optipng-6038)

Specially crafted BMP files could overflow a buffer in optipng CVE-2008-5101, specially crafted GIF files could crash optipng CVE-2009-0749. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

FreeBSD : optipng -- arbitrary code execution via crafted BMP image (2bc960c4-e665-11dd-afcd-00e0815b8da8)

Secunia reports : A vulnerability has been reported in OptiPNG, which potentially can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error in the BMP reader and can be exploited to cause a buffer overflow by tricking a user into...

[ GLSA 200812-01 ] OptiPNG: User-assisted execution of arbitrary code

Gentoo Linux Security Advisory GLSA 200812-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Gentoo Security Advisory GLSA 200812-01 (optipng)

The remote host is missing updates announced in advisory GLSA 200812-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-5101

OptiPNG vulnerability CVE-2008-5101: A buffer overflow in the BMP reader of OptiPNG 0.6 and 0.6.1 can be triggered by a crafted BMP image, enabling user-assisted arbitrary code execution. OpenVAS/Nessus entries link this to BMP-induced heap/buffer overflow and note affected packages across OpenSU...

CVE-2007-5101

ChironFS before 1.0 RC7 contains a local privilege escalation vulnerability. When files are created, the system sets user/group ownership to the mounter account instead of the creator account, enabling local users to gain privileges. Affected component: ChironFS (before 1.0 RC7). The issue stems ...

CVE-2006-5101

CVE-2006-5101 is a PHP remote file inclusion vulnerability in Comdev CSV Importer 3.1 (and possibly 4.1) used across multiple Comdev components (Contact Form, Helpdesk, Events Calendar, FAQ/Support, Guestbook, Links Directory, News Publisher, Newsletter, Photo Gallery, Vote Caster, Web Blogger, e...