9606 matches found
CVE-2012-0019
Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0020...
CVE-2012-0020
Microsoft Visio Viewer 2010 Gold/SP1 and related Visio components are affected by a memory-corruption vulnerability when parsing VSD files, enabling remote code execution via crafted attributes. The issue covers multiple CVEs (CVE-2012-0019, -0020, -0136, -0137, -0138) and is addressed by Microso...
CVE-2012-0137
Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019...
CVE-2012-0138: Improper Control of Generation of Code
Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019...
CVE-2012-0137: Improper Control of Generation of Code
Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019...
CVE-2011-4194
Buffer overflow in Novell iPrint Server in Novell Open Enterprise Server 2 OES2 through SP3 on Linux allows remote attackers to execute arbitrary code via a crafted attributes-natural-language field...
CVE-2011-4194: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in Novell iPrint Server in Novell Open Enterprise Server 2 OES2 through SP3 on Linux allows remote attackers to execute arbitrary code via a crafted attributes-natural-language field...
Important: Red Hat Security Advisory: jbossweb security update
Updated jbossweb packages that fix multiple security issues are now available for JBoss Enterprise Application Platform 5.1.2 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System...
Moderate: Red Hat Security Advisory: jbossweb security update
An update for JBoss Enterprise Application Platform 4.3.0 CP10 that fixes multiple security issues is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...
MS12-006: Description of the security update for Webio, Winhttp, and schannel in Windows: January 10, 2012
None None...
OpenSSL 0.9.8 < 0.9.8k Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 0.9.8k. It is, therefore, affected by multiple vulnerabilities as referenced in the 0.9.8k advisory. - OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remo...
CVE-2011-2771
Multiple cross-site scripting XSS vulnerabilities in Mahara before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 URI attributes and 2 the External Feed component, as demonstrated by the guid element in an RSS feed...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Mahara before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 URI attributes and 2 the External Feed component, as demonstrated by the guid element in an RSS feed...
CVE-2011-2771
Multiple cross-site scripting XSS vulnerabilities in Mahara before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 URI attributes and 2 the External Feed component, as demonstrated by the guid element in an RSS feed...
CVE-2011-2771: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Mahara before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 URI attributes and 2 the External Feed component, as demonstrated by the guid element in an RSS feed...
Ubuntu Update for tomcat6 USN-1252-1
Ubuntu Update for Linux kernel vulnerabilities USN-1252-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12521.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for tomcat6 USN-1252-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...
MS11-074: Description of the security update for SharePoint Workspace 2010: September 13, 2011
None None...
[SECURITY] Fedora 16 Update: rubygem-activemodel-3.0.10-1.fc16
Rich support for attributes, callbacks, validations, observers, serialization, internationalization, and testing. It provides a known set of interfaces for usage in model classes. It also helps building custom ORMs for use outside of the Rails framework...
Android Browser Cross-Application Scripting (CVE-2011-2357)
============================================================= Android Browser Cross-Application Scripting CVE-2011-2357 ============================================================= 1 Background -------------- Android applications are executed in a sandbox environment, to ensure that no applicati...
Pandora FMS Monitoring 2.1 1.3.x - Multiple Vulnerabilities
Document Title: =============== Pandora FMS Monitoring 2.1 1.3.x - Multiple Vulnerabilities Release Date: ============= 2011-07-18 Vulnerability Laboratory ID VL-ID: ==================================== 105 Product & Service Introduction: =============================== Pandora FMS is a monitorin...