Accidental XSRF and DoS consumption-of-space issue

We experienced an unusual growth of our nonspaced attachments that appears to be a DoS vunerability both in an accidental way with a workaround and intentional not easily worked around. This is under Confluence 4.0, but appears to probably apply to 4.3.1 as well. It appears the growing nonspaced...

CVE-2010-5089

SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information...

Information disclosure

SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information...

CVE-2010-5089

SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information...

CVE-2010-5089: Undefined Security Weakness

SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information...

PT-2012-1332

Name of the Vulnerable Software and Affected Versions SilverStripe versions prior to 2.4.2 Description The issue allows remote attackers to obtain sensitive information due to improper access restriction to pages in draft mode. Recommendations For versions prior to 2.4.2, update to version 2.4.2 ...

DEBIAN-CVE-2012-3385

WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors...

CVE-2012-3385

WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors...

CVE-2012-3385: Undefined Security Weakness

WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors...

Final Draft Script File Parsing Multiple Buffer Overflow Vulnerabilities

This host is installed with Final Draft and is prone to multiple buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbfinaldraftfileparsingmultbofvuln.nasl 5958 2017-04-17 09:02:19Z teissa $ Final Draft Script File Parsing Multiple Buffer Overflow Vulnerabilities Authors: Rachana...

Final Draft Script File Parsing Multiple Buffer Overflow Vulnerabilities

Final Draft is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-5059

Stack-based buffer overflow in Final Draft 8 before 8.02 allows remote attackers to execute arbitrary code via a crafted SmartType element, a different vulnerability than CVE-2011-5002. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

Stack overflow

Stack-based buffer overflow in Final Draft 8 before 8.02 allows remote attackers to execute arbitrary code via a crafted SmartType element, a different vulnerability than CVE-2011-5002. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

CVE-2011-5059

CVE-2011-5059 describes a stack-based buffer overflow in Final Draft 8 before 8.02 triggered by a crafted SmartType element, enabling remote code execution. Affected product/version: Final Draft 8 prior to 8.02. Root cause: overflow in parsing the SmartType element (noted as a separate vulnerabil...

CVE-2011-5059

Stack-based buffer overflow in Final Draft 8 before 8.02 allows remote attackers to execute arbitrary code via a crafted SmartType element, a different vulnerability than CVE-2011-5002. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

CVE-2011-5059: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Final Draft 8 before 8.02 allows remote attackers to execute arbitrary code via a crafted SmartType element, a different vulnerability than CVE-2011-5002. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

PT-2012-2037

Name of the Vulnerable Software and Affected Versions Final Draft version 8.0 through 8.01 Description A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via a crafted SmartType element. Recommendations For Final Draft version 8.0 through 8.01, update to version...

CVE-2011-5002

Multiple stack-based buffer overflows in Final Draft 8 before 8.02 allow remote attackers to execute arbitrary code via a .fdx or .fdxt file with long 1 Word, 2 Transition, 3 Location, 4 Extension, 5 SceneIntro, 6 TimeOfDay, and 7 Character elements...

Stack overflow

Multiple stack-based buffer overflows in Final Draft 8 before 8.02 allow remote attackers to execute arbitrary code via a .fdx or .fdxt file with long 1 Word, 2 Transition, 3 Location, 4 Extension, 5 SceneIntro, 6 TimeOfDay, and 7 Character elements...

CVE-2011-5002

Multiple stack-based buffer overflows in Final Draft 8 before 8.02 allow remote attackers to execute arbitrary code via a .fdx or .fdxt file with long 1 Word, 2 Transition, 3 Location, 4 Extension, 5 SceneIntro, 6 TimeOfDay, and 7 Character elements...