cups-filters: texttopdf heap-based buffer overflow

A heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filter processed print jobs with a specially crafted line size. An attacker able to submit print jobs could use this flaw to crash texttopdf or, possibly, execute arbitrary code with the privileges of the "lp" us...

oysterpartnership.com XSS vulnerability

Vulnerable URL: http://www.oysterpartnership.com/jobboard/cands/jobResults.asp?c=1=Reception+Jobs%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2015 Latest check for patch:| 23.11.2015 00:10 GMT Vulnerability type:| XSS Vulnerability...

tltpmedical.co.uk XSS vulnerability

Vulnerable URL: http://www.tltpmedical.co.uk/jobs.asp?searchterm=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7992971 Google...

hungaryjobs77.com XSS vulnerability

Vulnerable URL: http://www.hungaryjobs77.com/jobs?wt=%22%3E%3Csvg/onload=prompt%28/xssposed/%29%3E=mnl Details: Description| Value ---|--- Patched:| Yes, at 21.10.2015 Latest check for patch:| 21.10.2015 10:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

middleeastjobs77.com XSS vulnerability

Vulnerable URL: http://www.middleeastjobs77.com/jobs?wt=%22%3E%3Csvg/onload=prompt%28/xssposed/%29%3E=mnl Details: Description| Value ---|--- Patched:| Yes, at 21.10.2015 Latest check for patch:| 21.10.2015 10:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

qatarjobs77.com XSS vulnerability

Vulnerable URL: http://www.qatarjobs77.com/jobs?wt=%22%3E%3Csvg/onload=prompt%28/xssposed/%29%3E=mnl Details: Description| Value ---|--- Patched:| Yes, at 21.10.2015 Latest check for patch:| 21.10.2015 10:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 889697...

thedrum.com XSS vulnerability

Vulnerable URL: http://www.thedrum.com/jobs/search/ Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21788 Google Pagerank| 6 VIP website status:| Yes Check...

74cms jobs-list.php接口sql注入

首页 招聘信息 点击搜索 http://demo.74cms.com/jobs/jobs-list.php?sort=wage&page=1&jobcategory=&education=&citycategory=&experience=&settr=3&trade=&wage=&nature= 参数sort存在SQL注入...

Debian DLA-314-1 : cups security update

Petr Sklenar of Red Hat discovered that the texttopdf tool, part of cups filters, was susceptible to multiple heap-based buffer and integer overflows due to improper handling of print jobs. This could allow remote attackers to crash texttopdf or possibly execute arbitrary code. For Debian 6...

[SECURITY] [DLA 314-1] cups security update

Package : cups Version : 1.4.4-7+squeeze10 CVE ID : CVE-2015-3258 CVE-2015-3279 Petr Sklenar of Red Hat discovered that the texttopdf tool, part of cups filters, was susceptible to multiple heap-based buffer and integer overflows due to improper handling of print jobs. This could allow remote...

SAP NetWeaver J2EE Engine BP_FIND_JOBS_WITH_PROGRAM Function Module SQL Injection Vulnerability

SAP NetWeaver J2EE Engine is a service-oriented SAP SAP company's integrated application platform J2EE engine. BPFINDJOBSWITHPROGRAM function is one of the find the request for the specified program module. A SQL injection vulnerability exists in the BPFINDJOBSWITHPROGRAM function module in SAP...

DLA-314-1 cups - security update

Bulletin has no description...

PT-2015-7488

Name of the Vulnerable Software and Affected Versions SAP NetWeaver J2EE Engine version 7.40 Description The issue allows remote attackers to execute arbitrary SQL commands. This is due to a SQL injection vulnerability in the BP FIND JOBS WITH PROGRAM function module. Recommendations For SAP...

n-ix.com XSS vulnerability

Vulnerable URL: http://n-ix.com/careers/jobs/?page=%2Fcareers%2Findex.php%3Fm%3Dportal%26a%3Ddetails%26jobOrderID%3D5167887\%2527%253Clol%253E" Details: Description| Value ---|--- Patched:| Yes, at 27.08.2015 Latest check for patch:| 27.08.2015 23:02 GMT Vulnerability type:| XSS Vulnerability...

Fedora 21 : cups-x2go-3.0.1.3-1.fc21 (2015-10450)

New upstream version 3.0.1.2 : - cups-x2go,.conf: port to File::Temp. Use Text::ParseWords to split up the ps2pdf command line correctly. Don't use system but IPC::Open2::open2. Capture the ps2pdf program's stdout and write it to the temporary file handle 'manually'. Should fix problems reported...

MGASA-2015-0270 Updated cups-filters package fixes security vulnerability

A heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filters processed print jobs with a specially crafted line size. An attacker being able to submit print jobs could exploit this flaw to crash texttopdf or, possibly, execute arbitrary code with the privileges of...

DSA-3303-1 cups-filters - security update

Bulletin has no description...

FreeBSD : cups-filters -- texttopdf integer overflow (bf1d9331-21b6-11e5-86ff-14dae9d210b8)

Stefan Cornelius from Red Hat reports : An integer overflow flaw leading to a heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filter processed print jobs with a specially crafted line size. An attacker being able to submit print jobs could exploit this flaw to...

cups-filters -- texttopdf integer overflow

Stefan Cornelius from Red Hat reports: An integer overflow flaw leading to a heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filter processed print jobs with a specially crafted line size. An attacker being able to submit print jobs could exploit this flaw to...

FreeBSD : cups-filters -- buffer overflow in texttopdf size allocation (b19da422-1e02-11e5-b43d-002590263bf5)

Stefan Cornelius from Red Hat reports : A heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filters processed print jobs with a specially crafted line size. An attacker being able to submit print jobs could exploit this flaw to crash texttopdf or, possibly, execut...