1507 matches found
Debian: Security Advisory (DSA-2350-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
freetype: Multiple security flaws when loading CID-keyed Type 1 fonts
FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font in a document...
PT-2011-5166 · Xt:Commerce · Xt:Commerce
Name of the Vulnerable Software and Affected Versions: xt:Commerce versions 3.0.4 SP2.1 and earlier Description: The issue allows remote attackers to hijack the authentication of admins for specific requests. This can be achieved through cross-site request forgery CSRF vulnerabilities. The...
CentOS Update for freetype CESA-2011:1455 centos4 i386
Check for the Version of freetype OpenVAS Vulnerability Test CentOS Update for freetype CESA-2011:1455 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
[SECURITY] [DSA 2350-1] freetype security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2350-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 20, 2011 http://www.debian.org/security/faq -...
DSA-2350-1 freetype - missing input sanitising
Bulletin has no description...
Important: freetype
Issue Overview: Multiple input validation flaws were found in the way FreeType processed CID-keyed fonts. If a specially-crafted font file was loaded by an application linked against FreeType, it could cause the application to crash or, potentially, execute arbitrary code with the privileges of t...
USN-1267-1: FreeType vulnerabilities
It was discovered that FreeType did not correctly handle certain malformed Type 1 font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges. CVE-2011-3256 It was discovered...
Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : freetype vulnerabilities (USN-1267-1)
It was discovered that FreeType did not correctly handle certain malformed Type 1 font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges. CVE-2011-3256 It was discovered...
freetype: Multiple security flaws when loading CID-keyed Type 1 fonts
FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font in a document...
CVE-2010-5043
SQL injection vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid parameter in an editItem action to administrator/index.php...
CVE-2010-5042
Cross-site scripting XSS vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the cid parameter in an editItem action to administrator/index.php. NOTE: some of these details are obtained from third party...
Sql injection
SQL injection vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid parameter in an editItem action to administrator/index.php...
CVE-2010-5043
SQL injection vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid parameter in an editItem action to administrator/index.php...
CVE-2010-5042: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the cid parameter in an editItem action to administrator/index.php. NOTE: some of these details are obtained from third party...
CVE-2010-5043: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid parameter in an editItem action to administrator/index.php...
PT-2011-1977
Name of the Vulnerable Software and Affected Versions DJ-ArtGallery com djartgallery version 0.9.1 for Joomla! Description The issue allows remote attackers to inject arbitrary web script or HTML via the cid parameter in an editItem action to "administrator/index.php". This is a cross-site...
PT-2011-1978
Name of the Vulnerable Software and Affected Versions DJ-ArtGallery com djartgallery version 0.9.1 for Joomla! Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved by exploiting the cid parameter in an editItem action to...