64 matches found
CVE-2015-5317
The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2010-5317
SweetRice CMS (PHP) contains multiple SQL injection vulnerabilities in index.php prior to version 0.6.7.1. The issues allow remote attackers to inject arbitrary SQL via: (1) file_name in an attachment action, (2) post in show_comment, (3) sys-name in rssfeed, and (4) sys-name in view. Exploitatio...
CVE-2010-5317
Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute arbitrary SQL commands via 1 the filename parameter in an attachment action, 2 the post parameter in a showcomment action, 3 the sys-name parameter in an rssfeed action, or 4 the...
CVE-2011-5317
The CVE-2011-5317 entry describes an XSS vulnerability in WonderCMS prior to version 0.4, exploitable through the content parameter in editText.php. Affected software: WonderCMS (pre-0.4); vulnerable component: editText.php. Root cause: cross-site scripting via unescaped content input. Impact: al...
CVE-2014-5317
The CVE-2014-5317 issue affects the Php365 365 Links family: 365 Links (Ver.3.11 and earlier), 365 Links2 (Ver.3.11 and earlier), 365 Links+ (Ver.2.10 and earlier), and 365 Links2+ (Ver.2.10 and earlier). It is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbi...
CVE-2013-5317
Cross-site scripting XSS vulnerability in RiteCMS 1.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the mode parameter to cms/index.php...
CVE-2013-5317
CVE-2013-5317 describes a reflected/stored cross-site scripting vulnerability in RiteCMS 1.0.0. The issue allows remote authenticated users to inject arbitrary web script or HTML by manipulating the mode parameter in cms/index.php. The affected component is RiteCMS 1.0.0 (cms/index.php, mode para...
CVE-2012-5317
Summary : CVE-2012-5317 is a SQL injection vulnerability in the Bigware Shop software prior to version 2.1.5. The flaw resides in the script main_bigware_43.php, where the lastname parameter in a process action can be manipulated to execute arbitrary SQL commands. Affected software : Bigware Shop...
Scientific Linux Security Update : lcms on SL5.x i386/x86_64
Multiple insufficient input validation flaws were discovered in LittleCMS. An attacker could use these flaws to create a specially crafted image file which could cause an application using LittleCMS to crash, or, possibly, execute arbitrary code when opened. CVE-2008-5316, CVE-2008-5317...
FreeBSD : chromium -- multiple vulnerabilities (fe1976c2-5317-11e1-9e99-00262d5ed8ee)
Google Chrome Releases reports : 73478 Low CVE-2011-3953: Avoid clipboard monitoring after paste event. Credit to Daniel Cheng of the Chromium development community. 92550 Low CVE-2011-3954: Crash with excessive database usage. Credit to Collin Payne. 93106 High CVE-2011-3955: Crash aborting an...
CentOS Update for lcms CESA-2009:0011 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2010-5317
creationtimestamp| type| source ---|---|--- 2010-11-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15413...
CentOS 5 : lcms (CESA-2009:0011)
Updated lcms packages that resolve several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Little Color Management System LittleCMS, or simply 'lcms' is a small-footprint,...
lcms, python security update
CentOS Errata and Security Advisory CESA-2009:0011 Updated lcms packages that resolve several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Little Color Management System...
RHEL 5 : lcms (RHSA-2009:0011)
Updated lcms packages that resolve several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Little Color Management System LittleCMS, or simply 'lcms' is a small-footprint,...
RedHat Security Advisory RHSA-2009:0011
The remote host is missing updates announced in advisory RHSA-2009:0011. Little Color Management System LittleCMS, or simply lcms is a small-footprint, speed-optimized open source color management engine. Multiple insufficient input validation flaws were discovered in LittleCMS. An attacker could...
[SECURITY] [DSA 1684-1] New lcms packages fix multiple vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1684 [email protected] http://www.debian.org/security/ Devin Carraway December 10, 2008 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1684-1] New lcms packages fix multiple vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1684 [email protected] http://www.debian.org/security/ Devin Carraway December 10, 2008 http://www.debian.org/security/faq -...
Debian DSA-1684-1 : lcms - multiple vulnerabilities
Two vulnerabilities have been found in lcms, a library and set of commandline utilities for image color management. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-5316 Inadequate enforcement of fixed-length buffer limits allows an attacker to...
CVE-2008-5317
Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine aka lcms before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient...