Debian Security Advisory DSA 2782-1 (polarssl - several vulnerabilities)

Multiple security issues have been discovered in PolarSSL, a lightweight crypto and SSL/TLS library: CVE-2013-4623 Jack Lloyd discovered a denial of service vulnerability in the parsing of PEM-encoded certificates. CVE-2013-5914 Paul Brodeur and TrustInSoft discovered a buffer overflow in the...

DSA-2782-1 polarssl - several

Bulletin has no description...

Debian: Security Advisory (DSA-2782-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-5914

Multiple cross-site scripting XSS vulnerabilities in the sedimport function in system/functions.php in Neocrome Seditio build 160 and 161 allow remote attackers to inject arbitrary web script or HTML via the 1 newmsg or 2 rtext parameter. NOTE: some of these details are obtained from third party...

CVE-2012-5914

Neocrome Seditio builds 160 and 161 contain multiple XSS vulnerabilities in the sed_import function (system/functions.php), exploitable via the newmsg or rtext parameters. Remote attackers could inject arbitrary web script or HTML. No explicit remediation information is provided in the connected ...

CVE-2008-5914

An unspecified function in the JavaScript implementation in Apple Safari creates and exposes a "temporary footprint" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting upon a spoofed pop-up message, aka an "in-session phishing...

CVE-2008-5914

The CVE-2008-5914 entry describes an Apple Safari JavaScript Engine cross-domain information disclosure. The vulnerability arises from an unspecified function in Safari’s JavaScript implementation that creates and exposes a “temporary footprint” when there is an active login to a site, enabling i...

CVE-2008-2983

creationtimestamp| type| source ---|---|--- 2008-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5914...

CVE-2007-5914

Direct static code injection vulnerability in dirsys/modules/config/post.php in JBC Explorer 7.20 RC1 and earlier allows remote authenticated administrators to inject arbitrary PHP code via the DEBUG parameter, which can be executed by accessing config.inc.php. NOTE: this can be exploited by...

CVE-2007-5914

CVE-2007-5914 | Affects JBC Explorer 7.20 RC1 and earlier. Vulnerability in dirsys/modules/config/post.php allows direct static code injection if the DEBUG parameter is manipulated, enabling arbitrary PHP code execution via config.inc.php. The issue is tied to an upstream condition where an authe...

CVE-2006-5914

SQL injection vulnerability in ls.php in SAMEDIA LandShop allows remote attackers to execute arbitrary SQL commands via the infield parameter. NOTE: the start, searchorder, searchtype, and searcharea parameters are already covered by CVE-2005-4018...

CVE-2006-5914

The CVE-2006-5914 entry describes an SQL injection in ls.php of SAMEDIA LandShop (Landshop Real Estate Commerce System) that lets remote attackers execute arbitrary SQL via the infield parameter. The note indicates that related parameters (start, search_order, search_type, search_area) are alread...