CVE-2014-1841: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home folder via a Move action with a .. dot dot in the src parameter...

PT-2014-4325

Name of the Vulnerable Software and Affected Versions Titan FTP Server versions prior to 10.40 build 1829 Description The issue allows remote attackers to copy an arbitrary user's home folder via a Move action with a .. dot dot in the src parameter. This is a result of a directory traversal...

PT-2014-1485

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 28.0 SeaMonkey version 2.25 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service by painting on a CANVAS element, resulting in an out-of-bounds write and application cras...

PT-2014-4327

Name of the Vulnerable Software and Affected Versions Titan FTP Server versions prior to 10.40 build 1829 Description The issue allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. dot dot in the src parameter. This is a director...

CVE-2014-1843: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. dot dot in the src parameter...

CVE-2014-2994

Stack-based buffer overflow in Acunetix Web Vulnerability Scanner WVS 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL src attribute...

CVE-2014-2994: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Acunetix Web Vulnerability Scanner WVS 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL src attribute...

PT-2014-5009

Name of the Vulnerable Software and Affected Versions Acunetix Web Vulnerability Scanner WVS version 8 build 20120704 Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This can be achieved by using an HTML file that contains an IMG...

java-1.6.0-openjdk security and bug fix update

1:1.6.0.1-5.1.13.3 - updated to icedtea 1.13.3 - updated to openjdk-6-src-b31-15apr2014 - renmoved upstreamed patch7, 1.13fixes.patch - Resolves: rhbz1085009...

Security fix for the ALT Linux 7 package kernel-src-kvm version 3.10.21-alt5

March 4, 2014 Led 3.10.21-alt5 - updates from linux-3.10.33: + kvm: x86: fix emulator buffer overflow CVE-2014-0049...

CVE-2013-3294: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Exponent CMS before 2.2.0 release candidate 1 allow remote attackers to execute arbitrary SQL commands via the 1 src or 2 username parameter to index.php...

PT-2014-2674

Name of the Vulnerable Software and Affected Versions Exponent CMS versions prior to 2.2.0 release candidate 1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the src or username parameter to the "index.php" endpoint. Recommendations For...

CVE-2014-1485

The Content Security Policy CSP implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 operates on XSLT stylesheets according to style-src directives instead of script-src directives, which might allow remote attackers to execute arbitrary XSLT code by leveraging insufficient...

CVE-2014-1485: Undefined Security Weakness

The Content Security Policy CSP implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 operates on XSLT stylesheets according to style-src directives instead of script-src directives, which might allow remote attackers to execute arbitrary XSLT code by leveraging insufficient...

PT-2014-1146

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 SeaMonkey versions prior to 2.24 Description The Content Security Policy CSP implementation operates on XSLT stylesheets according to style-src directives instead of script-src directives. This might allo...

PT-2014-1161

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 27.0 SeaMonkey versions prior to 2.24 Description The issue is related to errors in the implementation of the MPostWriteBarrier class, allowing remote attackers to cause a denial of service or possibly execute...

PT-2014-3012

Name of the Vulnerable Software and Affected Versions Atmail Webmail Server versions prior to 7.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via the body of an e-mail message. This can be demonstrated by the SRC attribute of an IFRAME element, enabling...

CVE-2013-6017: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Atmail Webmail Server before 7.2 allows remote attackers to inject arbitrary web script or HTML via the body of an e-mail message, as demonstrated by the SRC attribute of an IFRAME element...

Debian Security Advisory DSA 2834-1 (typo3-src - several vulnerabilities)

Several vulnerabilities were discovered in TYPO3, a content management system. This update addresses cross-site scripting, information disclosure, mass assignment, open redirection and insecure unserialize vulnerabilities and corresponds to TYPO3-CORE-SA-2013-004 . OpenVAS Vulnerability Test $Id:...

Debian: Security Advisory (DSA-2834-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...