3661 matches found
libtasn1 -- ASN.1 length decoding vulnerability
Mu Dynamics, Inc. reports: Various functions using the ASN.1 length decoding logic in Libtasn1 were incorrectly assuming that the return value from asn1getlengthder is always less than the length of the enclosing ASN.1 structure, which is only true for valid structures and not for intentionally...
[pdf] PHP serialize, session and dynamics
Презентация с семинара ВМиК МГУ secsem.ru 2010 года. http://onsec.ru/php-unserialize.pdf Информация актуальная...
Data Dynamics ActiveBar ActiveX Controls Code Execution
One or more of the Data Dynamics ActiveBar ActiveX controls installed on the remote Windows host is affected by a code execution vulnerability due to unspecified issues in the 'Save', 'SaveLayoutChanges', 'SaveMenuUsageData', and 'SetLayoutData' methods. Note that Data Dynamics ActiveBar is bundl...
CVE-2011-1207
The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a...
Information disclosure
The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a...
CVE-2011-1207
The ActiveBar1 ActiveX control in the Data Dynamics ActiveBar ActiveX controls, as distributed in ActBar.ocx 1.0.6.5 in IBM Rational System Architect 11.4.0.2, 11.4.0.1, and earlier, does not properly restrict the SetLayoutData method, which allows remote attackers to execute arbitrary code via a...
CVE-2011-1660
Multiple cross-site scripting XSS vulnerabilities in the DataDynamics.Reports.Web class library in GrapeCity Data Dynamics Reports before 1.6.2084.14 allow remote attackers to inject arbitrary web script or HTML via 1 the reportName or 2 uniqueId parameter to CoreViewerInit.js, or the 3 uniqueId ...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the DataDynamics.Reports.Web class library in GrapeCity Data Dynamics Reports before 1.6.2084.14 allow remote attackers to inject arbitrary web script or HTML via 1 the reportName or 2 uniqueId parameter to CoreViewerInit.js, or the 3 uniqueId ...
CVE-2011-1660
GrapeCity Data Dynamics Reports: The DataDynamics.Reports.Web class library is affected by multiple XSS flaws in CoreViewerInit.js and CoreController.js (via reportName, uniqueId, or traceLevel parameters) reachable through CoreHandler.ashx. Vulnerable versions are before 1.6.2084.14. Impact is r...
PT-2011-3271
Name of the Vulnerable Software and Affected Versions GrapeCity Data Dynamics Reports versions prior to 1.6.2084.14 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the DataDynamics.Reports.Web class library. These vulnerabilities allow remote attackers to injec...
CVE-2011-1660: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the DataDynamics.Reports.Web class library in GrapeCity Data Dynamics Reports before 1.6.2084.14 allow remote attackers to inject arbitrary web script or HTML via 1 the reportName or 2 uniqueId parameter to CoreViewerInit.js, or the 3 uniqueId ...
HTB22906: XSS vulnerabilities in Collabtive
Vulnerability ID: HTB22906 Reference: http://www.htbridge.ch/advisory/xssvulnerabilitiesincollabtive.html Product: Collabtive Vendor: Open Dynamics http://collabtive.o-dyn.de/ Vulnerable Version: 0.6.5 and probably prior versions Vendor Notification: 17 March 2011 Vulnerability Type: XSS Risk...
HTB22907: Directory Traversal in Collabtive
Vulnerability ID: HTB22907 Reference: http://www.htbridge.ch/advisory/directorytraversalincollabtive.html Product: Collabtive Vendor: Open Dynamics http://collabtive.o-dyn.de/ Vulnerable Version: 0.6.5 and probably prior versions Vendor Notification: 17 March 2011 Vulnerability Type: Directory...
Collabtive 0.6.5 XSS / XSRF / Directory Traversal
============================== Vulnerability ID: HTB22907 Reference: http://www.htbridge.ch/advisory/directorytraversalincollabtive.html Product: Collabtive Vendor: Open Dynamics http://collabtive.o-dyn.de/ Vulnerable Version: 0.6.5 and probably prior versions Vendor Notification: 17 March 2011...
GrapeCity Data Dynamics Reports 1.6.2084.14 - Multiple Cross-Site Scripting Vulnerabilities
GrapeCity Data Dynamics Reports 1.6.2084.14 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47015/info GrapeCity Data Dynamics Reports is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize...
GrapeCity Data Dynamics Reports 1.6.2084.14 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47015/info GrapeCity Data Dynamics Reports is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...
Fedora Update for gromacs FEDORA-2010-17248
Check for the Version of gromacs OpenVAS Vulnerability Test Fedora Update for gromacs FEDORA-2010-17248 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for gromacs FEDORA-2010-17256
Check for the Version of gromacs OpenVAS Vulnerability Test Fedora Update for gromacs FEDORA-2010-17256 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
[SECURITY] Fedora 13 Update: gromacs-4.5.2-2.fc13
GROMACS is a versatile and extremely well optimized package to perform molecular dynamics computer simulations and subsequent trajectory analysis. It is developed for biomolecules like proteins, but the extremely high performance means it is used also in several other field like polymer chemi str...
[SECURITY] Fedora 14 Update: gromacs-4.5.2-2.fc14
GROMACS is a versatile and extremely well optimized package to perform molecular dynamics computer simulations and subsequent trajectory analysis. It is developed for biomolecules like proteins, but the extremely high performance means it is used also in several other field like polymer chemi str...