1564 matches found
Fedora Update for guacamole-ext FEDORA-2012-14097
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for guacamole-ext FEDORA-2012-14179
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
PT-2012-5771
Name of the Vulnerable Software and Affected Versions VertrigoServ version 2.25 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the ext parameter in the inc/extensions.php file. Recommendations For VertrigoServ...
CVE-2012-5102: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in inc/extensions.php in VertrigoServ 2.25 allows remote attackers to inject arbitrary web script or HTML via the ext parameter...
kernel: jbd/jbd2: invalid value of first log block leads to oops
The cleanupjournaltail function in the Journaling Block Device JBD functionality in the Linux kernel 2.6 allows local users to cause a denial of service assertion error and kernel oops via an ext3 or ext4 image with an "invalid log first block value."...
CVE-2011-4153
PHP 5.3.8 does not always check the return value of the zendstrndup function, which might allow remote attackers to cause a denial of service NULL pointer dereference and application crash via crafted input to an application that performs strndup operations on untrusted string data, as demonstrat...
CVE-2011-4153
PHP 5.3.8 does not always check the return value of the zendstrndup function, which might allow remote attackers to cause a denial of service NULL pointer dereference and application crash via crafted input to an application that performs strndup operations on untrusted string data, as demonstrat...
PT-2012-1814
Name of the Vulnerable Software and Affected Versions PHP version 5.3.8 Description The issue is related to the zend strndup function not always checking its return value, potentially allowing remote attackers to cause a denial of service through a NULL pointer dereference and application crash...
PHP 5.3.8 - Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.3.8 Multiple vulnerabilities Author: Maksymilian Arciemowicz Website: http://cxsecurity.com/ Date: 14.01.2012 CVE: CVE-2011-4153 zendstrndup Original link: http://cxsecurity.com/research/103 --- 1. Multiple NULL Pointer Dereference with...
kernel: jbd/jbd2: invalid value of first log block leads to oops
The cleanupjournaltail function in the Journaling Block Device JBD functionality in the Linux kernel 2.6 allows local users to cause a denial of service assertion error and kernel oops via an ext3 or ext4 image with an "invalid log first block value."...
PT-2011-4853 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6 Description: The issue is related to the Journaling Block Device JBD functionality in the Linux kernel, specifically the cleanup journal tail function. It allows local users to cause a denial of service, resulting in ...
kernel: ext4: kernel panic when writing data to the last block of sparse file
Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial of service BUGON and system crash by accessing a sparse file in extent format with a write operation involving a block number corresponding to the largest possible 32-bit unsign...
MantisBT Multiple Local File Include and Cross Site Scripting Vulnerabilities
This host is running MantisBT and is prone to multiple local file include and cross-site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmantismultlfinxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ MantisBT Multiple Local File Include and Cross Site Scripting Vulnerabilities...
PT-2011-4539
Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.8 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the action parameter in bug actiongroup ext page.php, related to bug actiongroup page.php...
CVE-2011-3182
PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash or trigger a buffer overflow by leveraging the ability to provide a...
PT-2011-4295
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.7 Description The issue allows context-dependent attackers to cause a denial of service or trigger a buffer overflow by providing an arbitrary value for a function argument. This is related to multiple files, includin...
CVE-2011-3182
PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash or trigger a buffer overflow by leveraging the ability to provide a...
PHP 5.3.3-5.3.6 ext-sockets-sockets.c socket_connect函数栈缓冲区溢出漏洞
No description provided by source...
CVE-2011-1938
Stack-based buffer overflow in the socketconnect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket...
CVE-2010-4760
Open Ticket Request System OTRS before 3.0.0-beta6 adds email-notification-ext articles to tickets during processing of event-based notifications, which allows remote authenticated users to obtain potentially sensitive information by reading a ticket...