CVE-2014-5109

SQL injection vulnerability in maint/modules/endpointcfg/endpointgeneric.php in Fonality trixbox allows remote attackers to execute arbitrary SQL commands via the mac parameter in a Submit action...

CVE-2014-5109

CVE-2014-5109 describes a SQL injection in Fonality trixbox: vulnerable in maint/modules/endpointcfg/endpoint_generic.php, where the mac parameter in a Submit action can be exploited remotely to execute arbitrary SQL commands. Affected software is Fonality trixbox (Trixbox), with the vulnerabilit...

CVE-2014-5109

creationtimestamp| type| source ---|---|--- 2014-07-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39347...

ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability

No description provided by source. ?php / ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability Vendor: ViArt Software Product web page: http://www.viart.com Affected version: 4.1, 4.0.8, 4.0.5 Summary: Viart Shop is a PHP based e-commerce suite, aiming to provide everything you nee...

CVE-2010-5109

Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service crash via a crafted TNEF file, which triggers a buffer overflow...

CVE-2010-5109

CVE-2010-5109 is an off-by-one error in the DecompressRTF function (ytnef.c) of Yerase’s TNEF Stream Reader that allows remote attackers to crash the application by processing a crafted TNEF file, effectively a denial of service. Public disclosures and vendor advisories reference an embedded liby...

Mandriva Linux Security Advisory : libytnef (MDVSA-2013:099)

Updated libytnef package fixes security vulnerability : Function DecompressRTF in libytnef 1.5 leads to a buffer overflow on certain TNEF files presumably, on files, generated by some recent versions of MS software. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Google Chrome < 22.0.1229.92 Multiple Vulnerabilities

Binary data 800947.prm...

CVE-2012-5109

CVE-2012-5109 affects Google Chrome’s ICU functionality. The available documents specify that ICU in Chrome before 22.0.1229.92 is vulnerable to a denial-of-service caused by an out-of-bounds read via regex-related vectors. The OpenVAS/Nessus entries in connected documents reference the same CVE ...

FreeBSD : chromium -- multiple vulnerabilities (e6161b65-1187-11e2-afe3-00262d5ed8ee)

Google Chrome Releases reports : 138208 High CVE-2012-2900: Crash in Skia text rendering. Credit to Atte Kettunen of OUSPG. 147499 Critical CVE-2012-5108: Race condition in audio device handling. Credit to Atte Kettunen of OUSPG. 148692 Medium CVE-2012-5109: OOB read in ICU regex. Credit to Arthu...

Stable Channel Update

The Stable channel has been updated to 22.0.1229.92 for Windows, Mac, and Linux. This update contains a number of stability fixes, including an issue with multiple profiles on Mac OS X 10.8.2. It also contains a fix for text display on the Mac, as well as the security updates listed below. Securi...

CVE-2011-5109

CVE-2011-5109 describes multiple SQL injection vulnerabilities in Freelancer calendar 1.01 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the SearchField parameter in a search action to (1) category_list.php, (2) Copy_of_calendar_list.php, (3) customer_s...

Fedora 16 : libytnef-1.5-8.fc16 (2012-10286)

Fix possible buffer overflow. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

CVE-2009-5109

CVE-2009-5109 is a stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 that permits remote code execution through a crafted long entry in a .pls file. Public references describe attacking via specially crafted .pls files, with exploit code and proof-of-concept material (exploit-db, Metasplo...

Mini-Stream 3.0.1.1 Buffer Overflow

This module exploits a stack buffer overflow in Mini-Stream 3.0.1.1 By creating a specially crafted pls file, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

CVE-2009-5109

creationtimestamp| type| source ---|---|--- 2009-12-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10745 2009-12-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10747 2009-12-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10782 2011-11-04...

CVE-2008-5109

The default configuration of Adobe Flash Media Server FMS 3.0 does not enable SWF Verification for 1 RTMPE and 2 RTMPTE sessions, which makes it easier for remote attackers to make copies of video content via stream-capture software...

openSUSE 10 Security Update : moodle (moodle-5109)

A bug in the smarty version contained in moodle could be exploited by attackers to execute arbitrary php code CVE-2008-1066. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update moodle-5109. The te...

CVE-2007-5109

Cross-site request forgery CSRF vulnerability in index.php in FlatNuke 2.6, and possibly 3, allows remote attackers to change the password and privilege level of arbitrary accounts via the user parameter and modified 1 regpass and 2 level parameters in a noneLogin action, as demonstrated by using...