121 matches found
openSUSE Security Update : libxls (openSUSE-2021-812)
This update for libxls fixes the following issues : libxsl was updated to release 1.6.2 : - Fix NULL pointer dereferences in the xls2csv tool boo1179532 CVE-2020-27819 Update to release 1.6.1 - Enabled decoding of non-Unicode character sets in older BIFF5 XLS files. - Improved string conversion...
Vulnerability of the MySQL Server component: The character sets of the MySQL Server database management system, which allows attackers to trigger service interruptions.
Vulnerability of the MySQL Server component: The character sets used by the MySQL Server database management system are related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...
Cross-Site Scripting (XSS)
firefox / thunderbird is vulnerable to cross-site scripting XSS. A cross-site scripting XSS flaw was found in the way Firefox handled certain multibyte character sets. A web page containing malicious content could cause Firefox to run JavaScript code with the permissions of a different website...
MariaDB 5.5.0 < 5.5.39 Multiple Vulnerabilities
The version of MariaDB installed on the remote host is prior to 5.5.39. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.39 advisory. - Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to...
NewStart CGSL MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0017)
The remote NewStart CGSL host, running version MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities: - Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enoug...
CVE-2018-5144
An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR 52.7 and Thunderbird 52.7...
CVE-2018-5144
An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR 52.7 and Thunderbird 52.7...
CVE-2018-5144
An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR 52.7 and Thunderbird 52.7...
CVE-2018-5144
An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR 52.7 and Thunderbird 52.7...
Security vulnerabilities fixed in Firefox ESR 52.7 — Mozilla
A buffer overflow can occur when manipulating the SVG animatedPathSegList through script. This results in a potentially exploitable crash. A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandb...
[SECURITY] Fedora 26 Update: recode-3.6-44.fc26
The recode' converts files between character sets and usages. It recognizes or produces nearly 150 different character sets and is able to transliterate files between almost any pair. When exact transliteration are not possible, it may get rid of the offending characters or fall back on...
[SECURITY] Fedora 27 Update: recode-3.6-46.fc27
The recode' converts files between character sets and usages. It recognizes or produces nearly 150 different character sets and is able to transliterate files between almost any pair. When exact transliteration are not possible, it may get rid of the offending characters or fall back on...
Vulnerability of the Server component: The character sets of the MySQL database management system, which allows attackers to trigger service interruptions.
Vulnerability of the Server component: The character sets of the MySQL database management system are vulnerable due to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to crash using...
Oracle MySQL Server Remote Vulnerability (CNVD-2017-00898)
Oracle MySQL Server is a set of open source relational database management system from Oracle Oracle. A security vulnerability exists in the Server: Charsets subcomponent of the MySQL Server 5.5.53 and earlier components in Oracle MySQL. An attacker could exploit this vulnerability to cause a...
FreeBSD : codeigniter -- SQL injection vulnerability (b7d785ea-656d-11e5-9909-002590263bf5)
The CodeIgniter changelog reports : An improvement was made to the MySQL and MySQLi drivers to prevent exposing a potential vector for SQL injection on sites using multi-byte character sets in the database client connection. An incompatibility in PHP versions 5.0.7 with mysqlsetcharset creates a...
Joomla! Component com_gallery_wd - SQL Injection
Joomla! Component comgallerywd - SQL Injection Exploit Title: Joomla Gallery WD - SQL Injection Vulnerability Google Dork: inurl:option=comgallerywd Date: 29.03.2015 Exploit Author: CrashBandicot @DosPerl Vendor HomePage: http://web-dorado.com/ Source Component :...
mysql: unspecified vulnerability related to SERVER:CHARACTER SETS (CPU October 2014)
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS...
mysql: unspecified vulnerability related to SERVER:CHARACTER SETS (CPU October 2014)
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS...
mysql: unspecified vulnerability related to SERVER:CHARACTER SETS (CPU October 2014)
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS...
mysql: unspecified vulnerability related to SERVER:CHARACTER SETS (CPU October 2014)
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS...