63 matches found
Ubuntu 14.04 LTS / 16.04 LTS : w3m vulnerabilities (USN-3555-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3555-1 advisory. It was discovered that w3m incorrectly handled certain inputs. An attacker could possibly use this to cause a denial of service. CVE-2018-619...
USN-3555-1: w3m vulnerabilities
It was discovered that w3m incorrectly handled certain inputs. An attacker could possibly use this to cause a denial of service. CVE-2018-6196, CVE-2018-6197 It was discovered that w3m incorrectly handled temporary files. An attacker could possibly use this to overwrite arbitrary files...
CVE-2018-6196
CVE-2018-6196 affects w3m up to version 0.5.3. The underlying issue is an infinite recursion in HTMLlineproc0 caused by feed_table_block_tag not preventing a negative indent value in table.c. Public advisories and patches across distros confirm the fix in multiple releases: OpenSUSE/SUSE update (...
CVE-2018-6196
w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feedtableblocktag function in table.c does not prevent a negative indent value...
CVE-2018-6196
w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feedtableblocktag function in table.c does not prevent a negative indent value...
CVE-2018-6196
w3m through 0.5.3 is prone to an infinite recursion flaw in HTMLlineproc0 because the feedtableblocktag function in table.c does not prevent a negative indent value...
Fedora Update for ghostscript FEDORA-2017-c9b0c406b3
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for poppler-data FEDORA-2017-c9b0c406b3
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-6196
CVE-2015-6196 entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-6196
CVE-2017-6196 is a Ghostscript vulnerability described in the Mageia advisory MGASA-2017-0430 and related OpenVAS/Fedora entries. It covers multiple use-after-free defects in the GX image enumeration path (base/gxipixel.c: gx_image_enum_begin) that may be exploitable via a crafted PostScript docu...
CVE-2014-6196
Cross-site scripting XSS vulnerability in IBM Web Experience Factory WEF 6.1.5 through 8.5.0.1, as used in WebSphere Dashboard Framework WDF and Lotus Widget Factory LWF, allows remote attackers to inject arbitrary web script or HTML by leveraging a Dojo builder error in an unspecified WebSphere...
CVE-2014-6196
Cross-site scripting XSS vulnerability in IBM Web Experience Factory WEF 6.1.5 through 8.5.0.1, as used in WebSphere Dashboard Framework WDF and Lotus Widget Factory LWF, allows remote attackers to inject arbitrary web script or HTML by leveraging a Dojo builder error in an unspecified WebSphere...
CVE-2014-6196
The CVE-2014-6196 entry affects IBM Web Experience Factory (WEF) versions 6.1.5 through 8.5.0.1, as used in WebSphere Dashboard Framework (WDF) and Lotus Widget Factory (LWF). The root cause is a Dojo builder error in an unspecified WebSphere Portal configuration, which leads to improper construc...
[security bulletin] HPSBGN02950 rev.1 - HP Autonomy Ultraseek, Cross-Site Scripting (XSS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04041082 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04041082 Version: 1 HPSBGN02950 rev....
CVE-2013-6196
HP Autonomy Ultraseek 5.x is affected by CVE-2013-6196: a cross-site scripting (XSS) vulnerability that allows remote authenticated users to inject arbitrary script/HTML via unspecified vectors. Root cause involves improper input handling in Ultraseek 5, with impact limited to authenticated users...
SuSE 11.2 Security Update : cifs-utils (SAT Patch Number 6196)
The following issue has been fixed : - Don't allow unprivileged users to mount onto dirs to which they can't chdir. CVE-2012-1586 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...
Successful Shell Attack Detected - Windows 'route print' Command
Binary data 6196.prm...
CVE-2008-6196
Multiple PHP remote file inclusion vulnerabilities affect Philippe CROCHAT EasySite 2.0, allowing an attacker to execute arbitrary PHP code via a URL parameter (EASYSITE_BASE) passed to configuration/. scripts browser.php, image_editor.php, and skin_chooser.php. Underlying issue: remote file incl...