CVE-2013-6429

The SourceHttpMessageConverter in Spring MVC in Spring Framework before 3.2.5 and 4.0.0.M1 through 4.0.0.RC1 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML, aka an XML External...

Multiple Products XML Public External Entity Information Disclosure (CVE-2013-3617; CVE-2013-4152; CVE-2013-6429; CVE-2014-0002; CVE-2014-0423)

A XML external entity XXE vulnerability exists in multiple products. The vulnerability is due to incorrectly configured XML parsing which accepts XML external entities from untrusted sources. A remote, unauthenticated attacker can leverage this vulnerability by sending a malicious request to the...

Samsung Kies 2.5.0.12114_1 Buffer Overflow Vulnerability

Samsung Kies version 2.5.0.121141 suffers from a buffer overflow vulnerability. Product: Samsung Kies Vendor: Samsung Electronics Vulnerable Versions: 2.5.0.121141 Tested Version: 2.5.0.121141 on Windows 7 SP1 and Internet Explorer 9.0 Vendor Notification: December 19, 2012 Vendor Patch: December...

Remote Buffer Overflow Vulnerability in Samsung Kies

Advisory ID: HTB23136 Product: Samsung Kies Vendor: Samsung Electronics Vulnerable Versions: 2.5.0.121141 Tested Version: 2.5.0.121141 on Windows 7 SP1 and Internet Explorer 9.0 Vendor Notification: December 19, 2012 Vendor Patch: December 27, 2012 Public Disclosure: January 9, 2013 Vulnerability...

Samsung Kies 2.5.0.12114_1 Buffer Overflow

Advisory ID: HTB23136 Product: Samsung Kies Vendor: Samsung Electronics Vulnerable Versions: 2.5.0.121141 Tested Version: 2.5.0.121141 on Windows 7 SP1 and Internet Explorer 9.0 Vendor Notification: December 19, 2012 Vendor Patch: December 27, 2012 Public Disclosure: January 9, 2013 Vulnerability...

CVE-2012-6429

creationtimestamp| type| source ---|---|--- 2013-01-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38206...

SLES9: Security update for XFree86-Xnest

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: XFree86-Xnest XFree86-Xvfb For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for XFree86-libs

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: XFree86-libs XFree86-server For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for XFree86-libs

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: XFree86-libs XFree86-server For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for XFree86-Xnest

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: XFree86-Xnest XFree86-Xvfb For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SuSE9 Security Update : XFree86-libs (YOU Patch Number 12040)

This update fixes various Xserver security issues. - File existence disclosure vulnerability. CVE-2007-5958 - XInput Extension Memory Corruption Vulnerability IDEF2888 CVE-2007-6427. - TOG-CUP Extension Memory Corruption Vulnerability IDEF2901 CVE-2007-6428. - EVI Extension Integer Overflow...

HP-UX Update for Xserver HPSBUX02381

Check for the Version of Xserver OpenVAS Vulnerability Test HP-UX Update for Xserver HPSBUX02381 Authors: System Generated Check Copyright: Copyright c 2009, 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for x11-server MDVSA-2008:023 (x11-server)

Check for the Version of x11-server OpenVAS Vulnerability Test Mandriva Update for x11-server MDVSA-2008:023 x11-server Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for x11-server MDVSA-2008:023 (x11-server)

Check for the Version of x11-server OpenVAS Vulnerability Test Mandriva Update for x11-server MDVSA-2008:023 x11-server Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Ubuntu Update for libxfont, xorg-server vulnerabilities USN-571-1

Ubuntu Update for Linux kernel vulnerabilities USN-571-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5711.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libxfont, xorg-server vulnerabilities USN-571-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for xorg-server regression USN-571-2

Ubuntu Update for Linux kernel vulnerabilities USN-571-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN5712.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for xorg-server regression USN-571-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-571-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-571-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-6429

The CVE-2008-6429 entry concerns the PrayerCenter (com_prayercenter) Joomla! component up to version 1.4.9 and earlier. The vulnerability is a SQL injection in the id parameter of the view_request action to index2.php, allowing remote attackers to execute arbitrary SQL commands. The provided docu...

CVE-2008-6429

SQL injection vulnerability in the PrayerCenter comprayercenter component 1.4.9 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewrequest action to index2.php...