education.rec.ri.cmu.edu Open Redirect vulnerability

Vulnerable URL: http://www.education.rec.ri.cmu.edu/redirect/redirect.php?url=https://xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculate...

vufind.library.cmu.edu XSS vulnerability

Open Bug Bounty ID: OBB-63879 Description| Value ---|--- Affected Website:| vufind.library.cmu.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

[SECURITY] Fedora 20 Update: sphinxtrain-1.0.8-13.fc20

SphinxTrain is Carnegie Mellon University's open source acoustic model trainer. It contains the scripts and instructions necessary for building models for the CMU Sphinx Recognizer...

[SECURITY] Fedora 20 Update: flite-1.3-21.fc20

Flite festival-lite is a small, fast run-time speech synthesis engine developed at CMU and primarily designed for small embedded machines and/or large servers. Flite is designed as an alternative synthesis engine to Festival for voices built using the FestVox suite of voice building tools...

[SECURITY] Fedora 19 Update: flite-1.3-20.fc19

Flite festival-lite is a small, fast run-time speech synthesis engine developed at CMU and primarily designed for small embedded machines and/or large servers. Flite is designed as an alternative synthesis engine to Festival for voices built using the FestVox suite of voice building tools...

Mandriva Security Advisory MDVSA-2009:113-1 (cyrus-sasl)

The remote host is missing an update to cyrus-sasl announced via advisory MDVSA-2009:113-1. OpenVAS Vulnerability Test $Id: mdksa20091131.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:113-1 cyrus-sasl Authors: Thomas Reinke Copyright: Copyright c...

Dovecot Sieve Plugin Multiple Buffer Overflow Vulnerabilities

This host has Dovecot Sieve Plugin installed and is prone to multiple Buffer Overflow Vulnerabilities OpenVAS Vulnerability Test $Id: secpoddovecotsievemultbofvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Dovecot Sieve Plugin Multiple Buffer Overflow Vulnerabilities Authors: Antu Sanadi Copyright:...

Mandriva Linux Security Advisory : cyrus-sasl (MDVSA-2009:113-1)

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via strings that are used as input to the saslencode64 function in lib/saslutil.c CVE-2009-0688. The updated packages have be...

CVE-2009-0688

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via strings that are used as input to the saslencode64 function in lib/saslutil.c...

Buffer overflow

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via strings that are used as input to the saslencode64 function in lib/saslutil.c...

CVE-2009-0688

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via strings that are used as input to the saslencode64 function in lib/saslutil.c...

CVE-2009-0688

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via strings that are used as input to the saslencode64 function in lib/saslutil.c...

CVE-2009-0688

CVE-2009-0688 affects the CMU Cyrus SASL library prior to 2.1.23, where multiple buffer overflows in sasl_encode64() (lib/saslutil.c) could allow remote code execution or a denial of service via crafted input. The issue is triggered by input strings passed to sasl_encode64(); exploitation could e...

CVE-2009-0688

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via strings that are used as input to the saslencode64 function in lib/saslutil.c...

FreeBSD Ports: cyrus-sasl

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora 7 : net-snmp-5.4-16.fc7 (2007-3019)

Fri Oct 19 2007 Jan Safranek 5.4-16 - License: field fixed to 'BSD and CMU' - fix hrSWInst 250237 - fix leak in UDP transport 247771 - fix remote DoS attack CVE-2007-5846 - Mon Oct 8 2007 Jan Safranek 5.4-15 - License: field changed to MIT - fix segfault on parsing smuxpeer without password...

CVE-2006-1721

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer SASL library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service segmentation fault via malformed inputs in DIGEST-MD5 negotiation...

CVE-2006-1721

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer SASL library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service segmentation fault via malformed inputs in DIGEST-MD5 negotiation...

CVE-2006-1721

CVE-2006-1721 affects the Cyrus-SASL library (SASL) 2.1.18 and possibly earlier versions prior to 2.1.21. The vulnerability arises in the DIGEST-MD5 authentication negotiation, where malformed inputs can allow a remote unauthenticated attacker to trigger a denial of service (segmentation fault) o...

CVE-2006-1721

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer SASL library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service segmentation fault via malformed inputs in DIGEST-MD5 negotiation...