CVE-2012-2403

wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via unspecified vectors...

Ubuntu Update for ghostscript USN-1317-1

Ubuntu Update for Linux kernel vulnerabilities USN-1317-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13171.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for ghostscript USN-1317-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net...

Microsoft Office Excel Conditional Expression Ptg Type Confusion Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the...

[SECURITY] Fedora 16 Update: kdeutils-4.7.1-3.fc16

Utilities for KDE 4. Includes: kcharselect: character selector kfloppy: floppy formatting tool superkaramba sweeper: clean unwanted traces the user leaves on the system...

Fedora Update for kdeutils FEDORA-2011-5200

Check for the Version of kdeutils OpenVAS Vulnerability Test Fedora Update for kdeutils FEDORA-2011-5200 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 14 Update: kdeutils-4.6.2-1.fc14

Utilities for KDE 4. Includes: kcharselect: character selector kfloppy: floppy formatting tool superkaramba sweeper: clean unwanted traces the user leaves on the system...

[SECURITY] Fedora 15 Update: kdeutils-4.6.2-1.fc15

Utilities for KDE 4. Includes: kcharselect: character selector kfloppy: floppy formatting tool superkaramba sweeper: clean unwanted traces the user leaves on the system...

Apple Safari Webkit Runin Box Promotion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way th...

PHP 5.3.3 NumberFormatter::getSymbol Integer Overflow

Exploit for multiple platform in category dos / poc From: Maksymilian Arciemowicz Date: Fri, 10 Dec 2010 14:43:32 +0100 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.3.3 NumberFormatter::getSymbol Integer Overflow Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/...

PHP 5.3.3 - NumberFormatter::getSymbol Integer Overflow

PHP 5.3.3 - NumberFormatter::getSymbol Integer Overflow From: Maksymilian Arciemowicz Date: Fri, 10 Dec 2010 14:43:32 +0100 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.3.3 NumberFormatter::getSymbol Integer Overflow Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.ne...

PHP 5.3.3 - NumberFormatter::getSymbol Integer Overflow

From: Maksymilian Arciemowicz Date: Fri, 10 Dec 2010 14:43:32 +0100 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.3.3 NumberFormatter::getSymbol Integer Overflow Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - - Dis.: 11.11.2010 - - Pub.: 10.12.2010 CERT:...

PHP 5.3.3 Integer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.3.3 NumberFormatter::getSymbol Integer Overflow Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - - Dis.: 11.11.2010 - - Pub.: 10.12.2010 CERT: VU479900 CVE: CVE-2010-4409 CWE: CWE-189 Status: Fixed in PHP 5.3.4...

Fedora Update for texlive FEDORA-2010-8242

Check for the Version of texlive OpenVAS Vulnerability Test Fedora Update for texlive FEDORA-2010-8242 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

phpcms2008sp4网站管理系统下载任意文件漏洞

comment\down.php ifpregmatch'/.php$/',$f || strpos$f, ":\" showmessage'地址有误'; //12行 只判断文件后辍 PHP，但没有考虑到在win系统中，文件名为：“xx.php ” 后面多了一个空格。也会被认为是 xx.php文件，因此，利用这个原理，当phpcms运行在win系统下，我们可以下载任意文件。 phpcms2008sp4UTF8100510 厂商补丁： PHPCMS ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

[SECURITY] Fedora 11 Update: texlive-2007-47.fc11

TeXLive is an implementation of TeX for Linux or UNIX systems. TeX takes a text file and a set of formatting commands as input and creates a printable file as output. Usually, TeX is used in conjunction with a higher level formatting package like LaTeX or PlainTeX, since TeX by itself is not very...

[SECURITY] Fedora 12 Update: texlive-2007-48.fc12

TeXLive is an implementation of TeX for Linux or UNIX systems. TeX takes a text file and a set of formatting commands as input and creates a printable file as output. Usually, TeX is used in conjunction with a higher level formatting package like LaTeX or PlainTeX, since TeX by itself is not very...

[SECURITY] Fedora 13 Update: texlive-2007-51.fc13

TeXLive is an implementation of TeX for Linux or UNIX systems. TeX takes a text file and a set of formatting commands as input and creates a printable file as output. Usually, TeX is used in conjunction with a higher level formatting package like LaTeX or PlainTeX, since TeX by itself is not very...

Fedora Update for kdeutils FEDORA-2010-6096

Check for the Version of kdeutils OpenVAS Vulnerability Test Fedora Update for kdeutils FEDORA-2010-6096 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

GNOME Project libxslt Library RC4 Key String Buffer Overflow (CVE-2008-2935)

XSLT is an XML language to define transformation for XML. XSLT is designed for use as part of XSL, which is a stylesheet language for XML. In addition to XSLT, XSL includes an XML vocabulary for specifying formatting. There exists a heap based buffer overflow vulnerability in RC4 libxslt...

CVE-2009-4378

The IPMI dissector in Wireshark 1.2.0 through 1.2.4 on Windows allows remote attackers to cause a denial of service crash via a crafted packet, related to "formatting a date/time using strftime."...