Sun JDK image parsing vulnerabilities

Hi, A couple more JPEG ICC parsing bugs were fixed in the latest JDK updates. Full technical details: http://scary.beasts.org/security/CESA-2007-005.html The most interesting part is the faulty code: Limit = SpGetUInt32 Buf; ... UInt16Ptr = KpUInt16t SpMalloc Limit KpInt32tsizeof UInt16Ptr; ... f...

CVE-2006-6925

Multiple cross-site scripting XSS vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the message title field when submitting an article to articles/edit.php, 2 the message title field when submitting a blog post to blogs/post.php, or...

CVE-2006-4829

Multiple cross-site scripting XSS vulnerabilities in David Czarnecki Blojsom 2.31 allow remote attackers to inject arbitrary web script or HTML via the 1 blog-category-description, 2 blog-entry-title, 3 rss-enclosure-url, 4 technorati-tagsi, or 5 blog-category-name parameter in a blog post...

CVE-2006-1072

Cross-site scripting XSS vulnerability in Daverave Simplog 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a blog post...

Cross site scripting

Cross-site scripting XSS vulnerability in Daverave Simplog 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a blog post...

PT-2006-2100 · Daverave · Daverave Simplog

Name of the Vulnerable Software and Affected Versions: Daverave Simplog versions 1.0.2 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a blog post. This could potentially lead to unauthorized actions on the affected...