Scientific Linux Security Update : qt4 on SL5.x i386/x86_64

Qt 4 is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications for the X Window System. HarfBuzz is an OpenType text shaping engine. A flaw in the way Qt 4 expanded certain UTF-8 characters could be used to prevent a Qt 4 based application...

Western Digital ShareSpace WEB GUI Information Disclosure

The web server for the Western Digital ShareSpace device identified is affected by an information disclosure vulnerability due to an improper configuration of access rights for the configuration file 'config.xml'. An attacker can directly access the 'config.xml' file without authentication and vi...

CentOS 6 : qt (CESA-2012:0880)

Updated qt packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

phonon, qt security update

CentOS Errata and Security Advisory CESA-2012:0880 Updated qt packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVS...

Google Chrome < 20.0.1132.43 Multiple Vulnerabilities

Binary data 800967.prm...

RedHat Update for qt RHSA-2012:0880-04

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 6 : qt (RHSA-2012:0880)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0880 advisory. Qt is a software toolkit that simplifies the task of writing and maintaining GUI Graphical User Interface applications for the X Window...

Design/Logic Flaw

Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect aka EPC GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint Connect R73.x, and Remote Access Clients E75.x allows local users to gain privileges via a Trojan...

CVE-2012-2753

CVE-2012-2753 involves an untrusted DLL search path vulnerability in Check Point Endpoint Connect VPN components (R73.x/E80.x VPN blade, R75 VPN, R73.x/E80.x Endpoint Connect, E75.x Remote Access Clients). The root cause is insecure library loading: a Trojan horse DLL placed in the current workin...

CVE-2012-2753

Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect aka EPC GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint Connect R73.x, and Remote Access Clients E75.x allows local users to gain privileges via a Trojan...

CVE-2011-3194

Buffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt 4.7.4 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via the TIFFTAGSAMPLESPERPIXEL tag in a greyscale TIFF image with multiple samples per pixel...

CVE-2012-0298

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to 1 read or 2 delete arbitrary files via unspecified vectors...

CVE-2012-0296

Multiple cross-site scripting XSS vulnerabilities in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by 1 injecting crafted data or 2 including crafted data...

CVE-2012-0298

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to 1 read or 2 delete arbitrary files via unspecified vectors...

PT-2012-2475

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions 5.0.x through 5.0.2 Description The issue allows remote attackers to upload arbitrary code to a designated pathname and possibly execute this code via unspecified vectors. This is related to the file-management...

PT-2012-2474

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions 5.0.x through 5.0.2 Description The issue concerns the file-management scripts in the management GUI, allowing remote attackers to read or delete arbitrary files. Recommendations For Symantec Web Gateway versions...

PT-2012-2473

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions 5.0.x through 5.0.2 Description The management GUI in Symantec Web Gateway does not properly restrict access to application scripts. This allows remote attackers to execute arbitrary code by either injecting craft...

CVE-2012-0297 Symantec Web Gateway Vulnerability

The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by 1 injecting crafted data or 2 including crafted data. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC...

CVE-2012-0298: Undefined Security Weakness

The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to 1 read or 2 delete arbitrary files via unspecified vectors...