Adobe AIR <= 18.0.0.180 Multiple Vulnerabilities (APSB15-19)

According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...

XChat Bounds Checking Buffer Overflow (CVE-2011-5129)

A buffer overflow vulnerability exists in XChat. Successful exploitation of this vulnerability will cause a crash, and may allow injection and execution of arbitrary code. The vulnerability is due to insufficient bounds checking. A remote attacker could exploit this vulnerability by sending a...

Avolve Software ProjectDox Multiple Vulnerability Disclosure

--------------------------------------------------------------------- Product: ProjectDox Vendor: Avolve Software Vulnerable Version: 8.1 Tested Version: 8.1 Vendor Notification: May 30, 2014 Public Disclosure: September 3, 2014 Vulnerability Type: Cross-Site Scripting CWE-79 CVE Reference:...

CVE-2014-5129

Cross-site scripting XSS vulnerability in Avolve Software ProjectDox 8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-5129

CVE-2014-5129: Avolve Software ProjectDox 8.1 suffers cross-site scripting (XSS). Descriptions indicate unsanitized input in ProjectDox may allow injection of arbitrary script/HTML via unspecified vectors. Connected docs confirm the product/version and vulnerability type but do not provide concre...

GLSA-201404-06 : Mesa: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201404-06 Mesa: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mesa. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with...

CVE-2013-5129

CVE-2013-5129 affects WebKit in Apple iOS prior to 7. It describes two user-assisted XSS vectors: (1) drag-and-drop and (2) copy-and-paste, allowing an attacker to inject arbitrary script/HTML via data handled by WebKit. The vulnerability arises from how WebKit processes dragged/pasted content an...

Mandriva Linux Security Advisory : mesa (MDVSA-2013:164)

Updated mesa packages fix security vulnerability : It was discovered that Mesa incorrectly handled certain arrays. An attacker could use this issue to cause Mesa to crash, resulting in a denial of service, or possibly execute arbitrary code CVE-2012-5129. Mesa has also been updated to version...

Ubuntu Update for mesa USN-1818-1

Check for the Version of mesa OpenVAS Vulnerability Test $Id: gbubuntuUSN18181.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for mesa USN-1818-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

OpenEMR 4.1.1 Cross Site Scripting Vulnerability

OpenEMR version 4.1.1 suffers from a cross site scripting vulnerability. OpenEMR 4.1.1 site param Remote XSS Vulnerability Vendor: OpenEMR Product web page: http://www.open-emr.org Affected version: 4.1.1 Summary: OpenEMR is a Free and Open Source electronic health records and medical practice...

CVE-2012-5129

Heap-based buffer overflow in the WebGL subsystem in Google Chrome OS before 23.0.1271.94 allows remote attackers to cause a denial of service GPU process crash or possibly have unspecified other impact via unknown vectors...

CVE-2012-5129

CVE-2012-5129 describes a heap-based buffer overflow in the WebGL subsystem of Google Chrome OS prior to 23.0.1271.94. The vulnerability can allow a remote attacker to cause a denial-of-service via a GPU process crash and may have unspecified other impact via unknown vectors. The provided connect...

CVE-2012-5129

Heap-based buffer overflow in the WebGL subsystem in Google Chrome OS before 23.0.1271.94 allows remote attackers to cause a denial of service GPU process crash or possibly have unspecified other impact via unknown vectors...

CVE-2011-5129

CVE-2011-5129 affects XChat 2.8.9 and earlier, with a heap-based buffer overflow caused by insufficient bounds checking in processing a long response string. Impact described as remote denial of service (crash) and potentially arbitrary code execution. Several connected advisories confirm the sam...

CVE-2009-5129

CVE-2009-5129 affects the Websense V10000 appliance prior to version 1.0.1. The issue allows a remote attacker to cause a denial of service (intermittent LDAP authentication outage) by sending a login attempt with an incorrect password. A fix is available in version 1.0.1 (per the V10000 release ...

CVE-2011-5129

creationtimestamp| type| source ---|---|--- 2011-11-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18159...

CVE-2008-5129

CVE-2008-5129 affects Ocean12 Poll Manager Pro 1.00. The issue is insufficient access control, with sensitive data stored under the web root and exposed via a direct request to o12poll.mdb. This enables partial disclosure of data to remote attackers. Exploitation details, affected versions beyond...

CVE-2007-5129

SimpGB 1.46.02 is affected by improper access control where sensitive information is stored under the web root. An attacker can directly request admin/cfginfo.php to obtain configuration details and can download arbitrary .inc files (e.g., admin/includes/dbtables.inc). The root cause is insuffici...

CVE-2006-5129

CVE-2006-5129 affects ph03y3nk just another flat file (JAF) CMS 4.0 RC1. The vulnerabilities are cross-site scripting in two spots: (1) module/shout/jafshout.php (the shoutbox) via the message parameter and related name/email/title/date/ldate/lname variables, and (2) the message body in a forum p...