3747 matches found
PT-2012-2984
Name of the Vulnerable Software and Affected Versions LuraWave JP2 Browser Plug-In versions 1.1.1.11 and prior to 2.1.1.11 Description The issue is related to a stack-based buffer overflow in the npjp2.dll component. It can be triggered by remote attackers via a specially crafted JPEG2000 JP2 fil...
Century wind enterprise website management system vulnerability-vulnerability warning-the black bar safety net
by Mr. DzY Century wind enterprise website management system of SME-oriented Web Site Management System,page fine,atmosphere. Having a stable set of strong,multi-function,Safety,code loading speed,web site content management, easy operation and other advantages. The use of div+css architecture,is...
Century wind enterprise website management system plug horse vulnerabilities and fixes-vulnerability warning-the black bar safety net
From www.0855.tv by Mr. DzY Century wind enterprise website management system of SME-oriented Web Site Management System,page fine,atmosphere. Having a stable set of strong,multi-function,Safety,code loading speed,web site content management, easy operation and other advantages. The use of div+cs...
Oracle WebLogic Plugins Unspecified Remote Issue (CVE-2008-2579)
According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host may be affected by an unspecified remote vulnerability. Note that this issue affects the WebLogic plug-ins for Apache, Sun and IIS Web included with WebLogic Server and is only exploitable if o...
CVE-2011-4107
The simplexmlloadstring function in the XML import plug-in libraries/import/xml.php in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity XXE injection...
CVE-2011-4107
CVE-2011-4107 affects phpMyAdmin 3.3.x (before 3.3.10.5) and 3.4.x (before 3.4.7.1). The vulnerability resides in the XML import plug‑in (libraries/import/xml.php) where simplexml_load_string can process XML data containing external entity references, enabling a remote authenticated user to read ...
CVE-2011-4107
The simplexmlloadstring function in the XML import plug-in libraries/import/xml.php in phpMyAdmin 3.4.x before 3.4.7.1 and 3.3.x before 3.3.10.5 allows remote authenticated users to read arbitrary files via XML data containing external entity references, aka an XML external entity XXE injection...
PT-2011-4848
Name of the Vulnerable Software and Affected Versions phpMyAdmin versions 3.3.x through 3.3.10.4 phpMyAdmin versions 3.4.x through 3.4.7.0 Description The issue allows remote authenticated users to read arbitrary files via XML data containing external entity references, also known as an XML...
Uniscan 5.2 is released - vulnerability scanner
Uniscan 5.2 is released - vulnerability scanner Uniscan is a open source vulnerability scanner for Web applications. Uniscan 2.0 is a perl vulnerability scanner for RFI, LFI, RCE, XSS and SQL-injection. features: Identification of system pages through a Web Crawler. Use of threads in the crawler...
Uniscan 5.2 is released - vulnerability scanner
Uniscan 5.2 is released - vulnerability scanner Uniscan is a open source vulnerability scanner for Web applications. Uniscan 2.0 is a perl vulnerability scanner for RFI, LFI, RCE, XSS and SQL-injection. features: Identification of system pages through a Web Crawler. Use of threads in the crawler...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which...
RHEL 6 : icedtea-web (RHSA-2011:1441)
Updated icedtea-web packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CVE-2011-3594
The gmarkupescapetext function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and possibly other products, allows remote attackers to cause a denial of service crash via invalid UTF-8 sequences that trigger use of invalid pointers and an out-of-bounds read, relate...
CVE-2011-3594
The gmarkupescapetext function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and possibly other products, allows remote attackers to cause a denial of service crash via invalid UTF-8 sequences that trigger use of invalid pointers and an out-of-bounds read, relate...
CVE-2011-3594: Improper Restriction of Operations within the Bounds of a Memory Buffer
The gmarkupescapetext function in the SILC protocol plug-in in libpurple 2.10.0 and earlier, as used in Pidgin and possibly other products, allows remote attackers to cause a denial of service crash via invalid UTF-8 sequences that trigger use of invalid pointers and an out-of-bounds read, relate...
PT-2011-4921
Name of the Vulnerable Software and Affected Versions A-Form PC and PC/Mobile plug-ins for Movable Type versions prior to 3.1 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved vi...
Design/Logic Flaw
Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to editing operations in conjunction with an unknown plug-in...
UBUNTU-CVE-2011-3888
Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to editing operations in conjunction with an unknown plug-in...
CVE-2011-3888
Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to editing operations in conjunction with an unknown plug-in...