Google Chrome multiple unspecified vulnerabilities - October 10(Windows)

The host is running Google Chrome and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultunspecifiedvulnoct10win.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple unspecified vulnerabilities - October 10Windows Authors: Madhuri D...

Google Chrome < 6.0.472.62 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 6.0.472.62. Such versions are reportedly affected by multiple vulnerabilities : - There is a bad cast with malformed SVGs. Issue 55114 - The buffer is mismanaged in the SPDY protocol. Issue 55119 - A cross-origin property...

CVE-2010-3114: Undefined Security Weakness

The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact and attack vectors related to 1 DeleteSelectionCommand.cpp, 2 InsertLineBreakCommand.cpp, or 3...

Panda Antivirus Buffer Overflow

Buffer overflow in Panda Antivirus before 20-07-2007 allows remote attackers to execute arbitrary code via a crafted EXE file, resulting from an Integer Cast Around. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Panda Antivirus Buffer Overflow

Buffer overflow in Panda Antivirus before 20-07-2007 allows remote attackers to execute arbitrary code via a crafted EXE file, resulting from an Integer Cast Around. OpenVAS Vulnerability Test Panda Antivirus Buffer Overflow LSS-NVT-2010-041 Developed by LSS Security Team Copyright C 2010 LSS Thi...

OpenJDK No ClassCastException for HashAttributeSet constructors if run with -Xcomp (6894807)

Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

Woven dream management system Background The find-a vulnerability warning-the black bar safety net

Sometimes in the by injection to give the weave the dream program's administrative password, but found that can't find the backend address. This time we can try the following in the address followed by: the/include/dialog/selectmedia. php? f=form1. murl But not necessarily pass to kill it.. By:th...

Woven dream management system Background The find-a vulnerability warning-the black bar safety net

Sometimes in the by injection to give the weave the dream program's administrative password, but found that can't find the backend address. This time we can try the following in the address followed by: the/include/dialog/selectmedia. php? f=form1. murl But not necessarily pass to kill it.. By:th...

kernel security and bug fix update

2.6.9-89.0.7.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race avoidanc...

Winamp gen_ff.dll Buffer Overflow Vulnerability

This host is installed with Winamp and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodwinampgenffbofvuln.nasl 6530 2017-07-05 06:23:50Z cfischer $ Winamp genff.dll Buffer Overflow Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...

CVE-2009-1036: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Plus 1 module before 6.x-2.6, a module for Drupal, allows remote attackers to cast votes for content via unspecified aspects of the URI...

Double free

The pngcheckkeyword function in pngwutil.c in libpng before 1.0.42, and 1.2.x before 1.2.34, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0'...

lcms: unsigned -> signed integer cast issue in cmsAllocGamma

Integer signedness error in the cmsAllocGamma function in src/cmsgamma.c in Little cms color engine aka lcms before 1.17 allows attackers to have an unknown impact via a file containing a certain "number of entries" value, which is interpreted improperly, leading to an allocation of insufficient...

lcms security update

1.15-1.2.2.el52.2 - Fix Requires to ensure subpackages match the parent package 1.15-1.2.2.el52.1 - Fix insufficient input validation in ReadEmbeddedTextTag - Fix unsigned - signed integer cast issue in cmsAllocGamma - Resolves: 473469...

CVE-2008-4633: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Node Vote 5.x before 5.x-1.1 and 6.x before 6.x-1.0, a module for Drupal, when "Allow user to vote again" is enabled, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to a "previously cast vote."...

pSys 0.7.0.a (shownews) Remote SQL Injection Vulnerability

No description provided by source. pSys - 0.7.0. alpha shownews SQL Injection Bug by: h0yt3r Bug in here: if isset$REQUEST'shownews' && $REQUEST'shownews' != "" $sqlbefehl="Select titel from $tabnews Where id = '".intval$REQUEST'shownews'."'"; $gettitel = mysqlquery$sqlbefehl,$serverid;...

psys-sql.txt

pSys - 0.7.0. alpha shownews SQL Injection Bug by: h0yt3r Bug in here: if isset$REQUEST'shownews' && $REQUEST'shownews' != "" $sqlbefehl="Select titel from $tabnews Where id = '".intval$REQUEST'shownews'."'"; $gettitel = mysqlquery$sqlbefehl,$serverid; $news=mysqlfetcharray$gettitel; $pagetitle =...

pSys 0.7.0.a - 'shownews' SQL Injection

pSys - 0.7.0. alpha shownews SQL Injection Bug by: h0yt3r Bug in here: if isset$REQUEST'shownews' && $REQUEST'shownews' != "" $sqlbefehl="Select titel from $tabnews Where id = '".intval$REQUEST'shownews'."'"; $gettitel = mysqlquery$sqlbefehl,$serverid; $news=mysqlfetcharray$gettitel; $pagetitle =...

Design/Logic Flaw

Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the...

CVE-2007-4578: Undefined Security Weakness

Sophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted UPX packed file, resulting from an "integer cast around". NOTE: as of 20070828, the vendor says this is a DoS and the...