460 matches found
CVE-2010-1330
The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted string...
Google Chrome Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability - Mac OS X
Google Chrome is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple Safari Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability (Windows)
This host is installed with Apple Safari and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbapplesafariwebcorewebkitxssvulnwin.nasl 6022 2017-04-25 12:51:04Z teissa $ Apple Safari Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability Windows Authors: Antu Sanadi...
Fedora 17 : ruby-1.9.3.286-18.fc17 (2012-16086)
New version 1.9.3 patchlevel 286 is released. A potential security flaw was found on the previous ruby that using crafted string might lead to unintentional file creation. This new rpm will fix this issue. Note that Tenable Network Security has extracted the preceding description block directly...
Fedora 18 : ruby-1.9.3.286-19.fc18 (2012-16071)
New version 1.9.3 patchlevel 286 is released. A potential security flaw was found on the previous ruby that using crafted string might lead to unintentional file creation. This new rpm will fix this issue. Note that Tenable Network Security has extracted the preceding description block directly...
Heap overflow
Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.1 allows remote attackers to execute arbitrary code via a crafted string associated with date and time data...
CVE-2012-4068
Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.1 allows remote attackers to execute arbitrary code via a crafted string associated with date and time data...
Cross site scripting
Cross-site scripting XSS vulnerability in the Wiki subsystem in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is inserted into a page title...
IBM DB2 XML Feature DoS and CREATE VARIABLE Security Bypass Vulnerabilities
The host is running IBM DB2 and is prone to denial of service and security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2xmldosncreatevarsecbypassvuln.nasl 5999 2017-04-21 09:02:32Z teissa $ IBM DB2 XML Feature DoS and CREATE VARIABLE Security Bypass Vulnerabilities Authors:...
ChaSen Buffer Overflow Vulnerability - Windows
ChaSen Software is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ChaSen Buffer Overflow Vulnerability (Windows)
The host is running ChaSen Software and is prone to buffer overflow vulnerability OpenVAS Vulnerability Test $Id: gbchasenbofvulnwin.nasl 5364 2017-02-20 13:26:07Z cfi $ ChaSen Buffer Overflow Vulnerability Windows Authors: Rachana Shetty Copyright: Copyright c 2011 Greenbone Networks GmbH,...
CVE-2011-4000
Buffer overflow in ChaSen 2.4.x allows remote attackers to execute arbitrary code via a crafted string...
DEBIAN-CVE-2011-4000
Buffer overflow in ChaSen 2.4.x allows remote attackers to execute arbitrary code via a crafted string...
CVE-2011-4000
Buffer overflow in ChaSen 2.4.x allows remote attackers to execute arbitrary code via a crafted string...
Buffer overflow
Buffer overflow in ChaSen 2.4.x allows remote attackers to execute arbitrary code via a crafted string...
CVE-2011-4000
Buffer overflow in ChaSen 2.4.x allows remote attackers to execute arbitrary code via a crafted string...
CVE-2011-4000
CVE-2011-4000 describes a buffer overflow in ChaSen 2.4.x that could allow remote attackers to execute arbitrary code via a specially crafted string. The underlying issue is in chalib.c, enabling remote code execution or a Denial of Service when processing crafted input. Public references in Open...
DEBIAN-CVE-2011-2724
The checkmtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the 1 device name and 2 mountpoint strings are composed of valid characters, which allows local users to cause a denial of service mtab corruption via a crafted string...
Path traversal
The checkmtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the 1 device name and 2 mountpoint strings are composed of valid characters, which allows local users to cause a denial of service mtab corruption via a crafted string...
CVE-2011-2724
The checkmtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the 1 device name and 2 mountpoint strings are composed of valid characters, which allows local users to cause a denial of service mtab corruption via a crafted string...