CVE-2009-1169

The CVE-2009-1169 entry affects Mozilla Firefox and SeaMonkey. The vulnerability is in txMozillaXSLTProcessor::TransformToDoc, which, in Firefox versions before 3.0.8 and SeaMonkey versions before 1.1.16, can be triggered by processing an XML file with a crafted XSLT transform. This memory-corrup...

Code injection

Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Java code via a crafted XSLT stylesheet with "extension elements and extension functions" that trigger code execution by Xalan-Java, as demonstrated using xalan://java.lang.Runtime...

CVE-2009-1088

Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Java code via a crafted XSLT stylesheet with "extension elements and extension functions" that trigger code execution by Xalan-Java, as demonstrated using xalan://java.lang.Runtime...

CVE-2009-1088

The CVE-2009-1088 entry concerns Hannon Hill Cascade Server 5.7 and other versions where remote authenticated users can trigger arbitrary code execution through a crafted XSLT stylesheet using extension elements/functions to invoke Xalan-Java (e.g., xalan://java.lang.Runtime). This is a remote co...

CVE-2009-1088

Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Java code via a crafted XSLT stylesheet with "extension elements and extension functions" that trigger code execution by Xalan-Java, as demonstrated using xalan://java.lang.Runtime...

CVE-2009-1088: Improper Control of Generation of Code

Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Java code via a crafted XSLT stylesheet with "extension elements and extension functions" that trigger code execution by Xalan-Java, as demonstrated using xalan://java.lang.Runtime...

Hannon Hill Cascade Server Command Execution Vulnerability (post auth)

No description provided by source. Emory University UTS Security Advisory EMORY-2009-01 Topic: Command Execution in Hannon Hill Cascade Server Original release date: March 19, 2009 SUMMARY ======= Hannon Hill's Cascade Server product is vulnerable to a command execution vulnerability. An attacker...

Hannon Hill Cascade Server privilege escalation

Privilege escalation with XSLT files...

Command Execution in Hannon Hill Cascade Server

Emory University UTS Security Advisory EMORY-2009-01 Topic: Command Execution in Hannon Hill Cascade Server Original release date: March 19, 2009 SUMMARY ======= Hannon Hill's Cascade Server product is vulnerable to a command execution vulnerability. An attacker with access to an unprivileged...

Hannon Hill Cascade Server - (Authenticated) Command Execution

Emory University UTS Security Advisory EMORY-2009-01 Topic: Command Execution in Hannon Hill Cascade Server Original release date: March 19, 2009 SUMMARY ======= Hannon Hill's Cascade Server product is vulnerable to a command execution vulnerability. An attacker with access to an unprivileged...

Hannon Hill Cascade Server - (Authenticated) Command Execution

Hannon Hill Cascade Server - Authenticated Command Execution Emory University UTS Security Advisory EMORY-2009-01 Topic: Command Execution in Hannon Hill Cascade Server Original release date: March 19, 2009 SUMMARY ======= Hannon Hill's Cascade Server product is vulnerable to a command execution...

GLSA-200903-30 : Opera: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200903-30 Opera: Multiple vulnerabilities Multiple vulnerabilities were discovered in Opera: Vitaly McLain reported a heap-based buffer overflow when processing host names in file:// URLs CVE-2008-5178. Alexios Fakos reported a...

RedHat Update for libxslt RHSA-2008:0287-01

Check for the Version of libxslt OpenVAS Vulnerability Test RedHat Update for libxslt RHSA-2008:0287-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for libxslt CESA-2008:0287-01 centos2 i386

Check for the Version of libxslt OpenVAS Vulnerability Test CentOS Update for libxslt CESA-2008:0287-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CentOS Update for libxslt CESA-2008:0287 centos3 x86_64

Check for the Version of libxslt OpenVAS Vulnerability Test CentOS Update for libxslt CESA-2008:0287 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for libxslt FEDORA-2008-7029

Check for the Version of libxslt OpenVAS Vulnerability Test Fedora Update for libxslt FEDORA-2008-7029 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Debian: Security Advisory (DSA-1696-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1696-1 : icedove - several vulnerabilities

Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird mail client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0016 Justin Schuh, Tom Cross and Peter Williams discovered a buffer...

DSA-1696-1 icedove - several vulnerabilities

Bulletin has no description...

Opera Web Browser Multiple Vulnerabilities - Dec08 (Linux)

The host is installed with Opera web browser and is prone to multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultvulndec08lin.nasl 6539 2017-07-05 12:02:14Z cfischer $ Opera Web Browser Multiple Vulnerabilities - Dec08 Linux Authors: Chandan S Copyright: Copyright c 2008...