PT-2012-2439

Name of the Vulnerable Software and Affected Versions ImageMagick versions 6.7.5 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and hang, by providing a crafted image. This image has an IFD that contains IOP tags, all of which...

Ubuntu Update for imagemagick USN-1435-1

Ubuntu Update for Linux kernel vulnerabilities USN-1435-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14351.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for imagemagick USN-1435-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net...

Ubuntu: Security Advisory (USN-1435-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

php-decoda 3.x Cross Site Scripting

Advisory: php-decoda: Cross-Site Scripting in Video Tags RedTeam Pentesting discovered a cross-site scripting XSS vulnerability in the PHP markup parser Decoda. This allows attackers that should be restricted to the markup supported by Decoda to specify a JavaScript event handler for an iframe ta...

php-decoda Cross-Site Scripting in Video Tags

Exploit for php platform in category web applications Advisory: php-decoda: Cross-Site Scripting in Video Tags RedTeam Pentesting discovered a cross-site scripting XSS vulnerability in the PHP markup parser Decoda. This allows attackers that should be restricted to the markup supported by Decoda ...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : imagemagick vulnerabilities (USN-1435-1)

Joonas Kuorilehto and Aleksis Kauppinen discovered that ImageMagick incorrectly handled certain ResolutionUnit tags. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute...

Fedora Update for taglib FEDORA-2012-4268

Check for the Version of taglib OpenVAS Vulnerability Test Fedora Update for taglib FEDORA-2012-4268 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 16 Update: taglib-1.7.1-1.fc16

TagLib is a library for reading and editing the meta-data of several popular audio formats. Currently it supports both ID3v1 and ID3v2 for MP3 files, Ogg Vorbis comments and ID3 tags and Vorbis comments in FLAC, MPC, Speex, WavPack, TrueAudio files, as well as APE Tags...

rpm: insufficient validation of region tags

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an invalid region tag in a package header to the 1 headerLoad, 2 rpmReadSignature, or 3 headerVerify function...

CVE-2012-1610

Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of service out-of-bounds read via a large component count for certain EXIF tags in a JPEG image. NOTE: this vulnerability exists because of an incomplete f...

lifetype 1.2.11 CSRF Add User

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title := lifetype 1.2.11 CSRF Add User Date := 05/april/2012 Author := khaled-Ham Software link :...

Adobe Flash Player SWF Tag Size Mismatch Vulnerabilities (CVE-2011-2453; CVE-2016-4175; CVE-2016-4179)

Multiple vulnerabilities have been discovered in Adobe Shockwave files SWF. The vulnerabilities are due to an error while parsing SWF files containing abnormally sized control and definition tags. Remote attackers could exploit these vulnerabilities by enticing target users to open SWF files...

[SECURITY] [DSA 2416-1] notmuch security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2416-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 22, 2012 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2416-1 (notmuch)

The remote host is missing an update to notmuch announced via advisory DSA 2416-1. OpenVAS Vulnerability Test $Id: deb24161.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2416-1 notmuch Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

PayPal Revises Privacy Policy, User Agreement Policy

PayPal announced that it is changing both its privacy and user agreement policies, adding tweaks to its customer identification program and the way it collects and stores its customers’ personal information. The changes will take effect on April 1. Under the new policy, Paypal may collect...

Debian DSA-2416-1 : notmuch - information disclosure

It was discovered that Notmuch, an email indexer, did not sufficiently escape Emacs MML tags. When using the Emacs interface, a user could be tricked into replying to a maliciously formatted message which could lead to files from the local machine being attached to the outgoing message...

[SECURITY] [DSA 2416-1] notmuch security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2416-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 22, 2012 http://www.debian.org/security/faq -...

MODX Evolution 1.0.5 (and prior) Remote Script Execution Vulnerability

Product: MODX Evolution Risk: Very High Severity: Critical Versions: 1.0.5 and all previous releases Vunerability type: Remote Script Execution Report Date: 2012-Feb-16 Fixed Date: 2012-Feb-20 Description A vigilant community member sent us a security notice to let us know that he found a securit...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in revisioningtheme.inc in the Taxonomy module in the Revisioning module 6.x-3.13 and other versions before 6.x-3.14 for Drupal allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via the 1 tags or 2 ter...

PT-2012-3049

Name of the Vulnerable Software and Affected Versions Revisioning module versions 6.x-3.13 and earlier Description The issue allows remote authenticated users with certain privileges to inject arbitrary web script or HTML. This can be achieved via the tags or term parameters. Recommendations For...