CVE-2014-5656

The Android app TRA Auctions for Buyers (com.manheim.tra) version 2.6 does not verify X.509 SSL server certificates, enabling man-in-the-middle attacks to spoof servers and access sensitive information via crafted certificates. This affects confidentiality and integrity (partial) with a CVSS v2 b...

TYPO3 Felogin System Extension Cross Site Scripting Vulnerability

TYPO3 is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3";...

FuzeZip 1.0 SEH Buffer Overflow Vulnerability

FuzeZip version 1.0.0.131625 suffers from a SEH based overflow and stack based overflow which is protected by stack cookies. Title: SEH BUFFER OVERFLOW IN FUZEZIP V.1.0 Severity: High History: 16.Apr.2013 Vulnerability reported Authors: Josep Pi Rodriguez, Pedro Guillen Nuñez , Miguel Angel de...

CVE-2013-5656

creationtimestamp| type| source ---|---|--- 2013-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25130...

SuSE 11.2 Security Update : inkscape (SAT Patch Number 7380)

inkscape was updated to fix a XXE Xml eXternal Entity attack during rasterization of SVG images CVE-2012-5656, where the rendering of malicious SVG images could have connected from inkscape to internal hosts. Also inkscape would have loaded .EPS files from untrusted /tmp occasionaly instead from...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : inkscape vulnerabilities (USN-1712-1)

It was discoverd that Inkscape incorrectly handled XML external entities in SVG files. If a user were tricked into opening a specially crafted SVG file, Inkscape could possibly include external files in drawings, resulting in information disclosure. CVE-2012-5656 It was discovered that Inkscape...

CVE-2012-5656

CVE-2012-5656 concerns Inkscape ≤ 0.48.3 (up to 0.48.4) where the rasterization of SVGs can be abused via an XML external entity (XXE) in a crafted SVG, allowing a local attacker to read arbitrary files. The issue stems from the rasterization path processing external entities. Public advisories c...

Fedora 17 : inkscape-0.48.4-1.fc17 (2012-20620)

Fix XXE flaw, man page ownership. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

Fedora 18 : inkscape-0.48.4-1.fc18 (2012-20643)

Fix XXE flaw, man page ownership. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

CVE-2008-5656

Cross-site scripting XSS vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-5656

Cross-site scripting XSS vulnerability in the frontend plugin for the felogin system extension in TYPO3 4.2.0, 4.2.1 and 4.2.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2008-5656

TYPO3 Felogin Frontend Plugin vulnerability (CVE-2008-5656): A cross-site scripting (XSS) flaw in the felogin system extension frontend plugin affects TYPO3 versions 4.2.0, 4.2.1 and 4.2.2. The description indicates remote attackers can inject arbitrary web script or HTML via unknown vectors. The...

CVE-2007-5656

CVE-2007-5656 affects TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and EMS 4.0.0–4.4.1. A remote attacker can send crafted requests that control the iteration counts of loops used during memory operations, potentially crashing RTserver and possibly allowing arbitrary code ...

CVE-2006-5656

Vulistextum vulnerability CVE-2006-5656: A memory leak in the push_align function (src/util.c) of Vilistextum before 2.6.9 can cause denial of service via memory consumption related to tmp_align. The description specifies a potential DoS but does not detail exploit vectors, affected platforms, or...