38 matches found
PT-2015-3254
Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.3 Description The issue is related to a heap-based buffer overflow in the xmlParseXmlDecl function, which can be exploited by context-dependent attackers to cause a denial of service. This occurs via unspecified...
RedHat Update for glibc RHSA-2012:1097-01
Check for the Version of glibc OpenVAS Vulnerability Test RedHat Update for glibc RHSA-2012:1097-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...
Low: Red Hat Security Advisory: libxml2 security and bug fix update
Updated libxml2 packages that fix several security issues and various bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
The encoding conversion of the art, the background write the word Trojan horse-vulnerability warning-the black bar safety net
The word Trojan can be whole, for our infiltrator submitted a lot of convenience...but the times in the progress. The programmer's thought also in progress..they will Figured out how to foreground or background to filter your word the special characters... Today in the afternoon to the detection ...
postgresql security update
CentOS Errata and Security Advisory CESA-2009:1484 Updated postgresql packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced...
RHEL 4 / 5 : postgresql (RHSA-2009:1484)
The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1484 advisory. PostgreSQL is an advanced object-relational database management system DBMS. It was discovered that the upstream patch for CVE-2007-6600...
postgresql: potential DoS due to conversion functions
PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service stack consumption and crash by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding...
Moderate: Red Hat Security Advisory: postgresql security update
Updated postgresql packages that fix two security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced object-relational database management system DBMS. It was...
SuSE 11 Security Update : PostgreSQL (SAT Patch Number 674)
Remote authenticated users could crash the postgresql server by requesting a conversion with an inappropriate encoding. CVE-2009-0922 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The tex...
postgresql: potential DoS due to conversion functions
PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service stack consumption and crash by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding...
Moderate: Red Hat Security Advisory: Red Hat Application Stack v2.3 security and enhancement update
Red Hat Application Stack v2.3 is now available. This update fixes several security issues and adds various enhancements. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Red Hat Application Stack v2.3 is an integrated open source application...
PostgreSQL Denial of Service Vulnerability (Linux)
This host is installed with PostgreSQL Server and is prone to denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: secpodpostgresqldosvulnlin.nasl 5122 2017-01-27 12:16:00Z teissa $ PostgreSQL Denial of Service Vulnerability Linux Authors: Sujit Ghosal Copyright: Copyright c 2009...
[ MDVSA-2009:079 ] postgresql
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:079 http://www.mandriva.com/security/ Package : postgresql Date : March 23, 2009 Affected: 2008.0, 2008.1, 2009.0, Corporate 3.0, Corporate 4.0 Problem Description: PostgreSQL before 8.3.7, 8.2.13, 8.1.17,...
Code injection
PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service stack consumption and crash by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding...
CVE-2009-0922
PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service stack consumption and crash by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding...
CVE-2009-0922
PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service stack consumption and crash by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding...
ICU: Invalid character sequences omission during conversion of some character encodings (XSS attack possible)
The International Components for Unicode ICU library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and other operating systems omits some invalid character sequences during conversion of some character encodings, which might allow remote attackers to conduct cross-site scripting XS...
DEBIAN-CVE-2008-1036
The International Components for Unicode ICU library in Apple Mac OS X before 10.5.3, Red Hat Enterprise Linux 5, and other operating systems omits some invalid character sequences during conversion of some character encodings, which might allow remote attackers to conduct cross-site scripting XS...