Microsoft Internet Explorer 8 - Fixed Col Span ID (Full ASLR + DEP + EMET 4.1.x Bypass) (MS12-037)

function strtointstr return str.charCodeAt10x10000 + str.charCodeAt0; var free = "EEEE"; while free.length 500 free += free; var string1 = "AAAA"; while string1.length 500 string1 += string1; var string2 = "BBBB"; while string2.length 500 string2 += string2; var fr = new Array; var al = new Array...

RHEL 6 : tomcat6 (RHSA-2013:0005)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0005 advisory. Apache Tomcat is a servlet container. It was found that when an application used FORM authentication, along with another component that calls...

RHEL 5 / 6 : JBoss Web Server (RHSA-2013:0268)

Updated tomcat7 packages that fix one security issue are now available for JBoss Enterprise Web Server 2.0.0 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

CVE-2012-6422

creationtimestamp| type| source ---|---|--- 2014-06-24 12:15:23+00:00| seen| MISP/53a969b9-5de0-42b3-a45e-439d950d210b 2020-10-09 17:22:05+00:00| seen| MISP/cd859b7a-5c1d-47e8-a4a1-6e3392cd4707 2020-10-09 17:30:38+00:00| seen| MISP/ca4273b3-6a01-4306-94a5-0e8d010a3fd1 2025-08-31 03:13:01+00:00|...

FreeBSD-SA-14:16.file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-14:16.file Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in file1 and libmagic3 Category: contrib Module: file Announced: 2014-06-24...

CVE-2012-5106

CVE-2012-5106 affects FreeFloat FTP Server 1.0. The vulnerability is a stack-based buffer overflow in the handling of the PUT command, allowing remote authenticated users to execute arbitrary code by sending a long string. Exploitation exists (e.g., Exploit-DB entry 22351) and has been demonstrat...

openssl security update

Package: openssl Version: 0.9.8o-4squeeze16 CVE ID: CVE-2014-0224 CVE-2012-4929 CVE-2014-0224 This update updates the upstream fix for CVE-2014-0224 to address problems with renegotiation under some conditions. original text: KIKUCHI Masashi discovered that carefully crafted handshakes can force...

openssl security update

Package: openssl Version: 0.9.8o-4squeeze16 CVE ID: CVE-2014-0224 CVE-2012-4929 CVE-2014-0224 This update updates the upstream fix for CVE-2014-0224 to address problems with renegotiation under some conditions. original text: KIKUCHI Masashi discovered that carefully crafted handshakes can force...

CVE-2012-0273

CVE-2012-0273 describes multiple stack-based buffer overflows in MinaliC 2.0.0, allowing remote code execution via (1) a session_id cookie in the get_cookie_value function of response.c, (2) a directory name in add_default_file in response.c, or (3) a file name in retrieve_physical_file_name_or_b...

CVE-2012-2579

CVE-2012-2579 concerns the WordPress plugin WP SimpleMail (version 1.0.6) which is affected by stored XSS via the email fields To, From, Date and Subject. The vulnerability arises from insufficient input sanitization when these fields are displayed, enabling an attacker to inject arbitrary script...

CVE-2012-2580

Postie WordPress plugin (v1.4.3, possibly prior to v1.5.15) is affected by a stored XSS vulnerability (CVE-2012-2580). An attacker can inject arbitrary JavaScript via the From field of an emailed message, leading to script execution in the victim’s browser on the affected site. The root cause is ...

CVE-2012-2052

Stack-based buffer overflow in the U3D.8BI library plugin in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via a long Collada asset element in a DAE file, as demonstrated by the cameraYFov value in the contributor comments...

CVE-2012-2052

CVE-2012-2052 affects Adobe Photoshop CS5 (12.x) before 12.0.5 and CS5.1 (12.1.x) before 12.1.1, due to a stack-based buffer overflow in the U3D.8BI library plugin. The vulnerability can be triggered by processing a crafted Collada (.dae) asset, specifically via a long Collada asset element in th...

CVE-2012-2572

Cross-site scripting XSS vulnerability in the ThreeWP Email Reflector plugin before 1.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Subject of an email...

CVE-2012-2572

The CVE-2012-2572 entry affects the ThreeWP Email Reflector plugin for WordPress (versions before 1.16). The vulnerability is a Cross-Site Scripting (XSS) flaw in the Subject field of emails, due to insufficient input sanitization, allowing remote attackers to inject arbitrary web script or HTML....

CVE-2012-1621

Apache OFBiz 10.04.x prior to 10.04.02 is affected by multiple XSS vulnerabilities. The issues arise from improper handling of user input in error messages and in requests using (1) parameter arrays in freemarker templates, (2) contentId, and (3) mapKey in cms events, plus (4) ajax inputs to getS...

CVE-2012-2592

CVE-2012-2592 affects Axigen Mail Server 8.0.1 and is a Cross-site Scripting (XSS) vulnerability where an attacker can inject arbitrary web script or HTML via the body of an email. Connected sources confirm the affected product and vulnerability class, but do not provide a patch version or remedi...

Fedora Update for mingw-libtiff FEDORA-2014-6837

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mingw-libtiff FEDORA-2014-6831

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2963-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...