172 matches found
.NET Framework Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Microsoft .NET Framework processes input. An attacker who successfully exploited this vulnerability could take control of an affected system. To exploit the vulnerability, an attacker would need to be able to upload a specially crafted file to a w...
OSIsoft PI JDBC Driver and PI ODBC Driver Denial of Service Vulnerabilities
OSIsoft PI JDBC Driver and PI ODBC Driver are drivers for connecting to access databases from OSIsoft, USA. A de-security vulnerability exists in OSIsoft PI JDBC Driver and PI ODBC Driver SQL Data Access Server fails to properly process input, which could be exploited by remote attackers to submi...
Multiple Remote Code Execution Vulnerabilities in Dell SonicWALL GMS Virtual Appliance
SonicWALL offers Internet security solutions for small, medium and distributed businesses. A security vulnerability exists in the Dell GMS ViewPoint GMSVP web application. The vulnerability stems from the inability to filter user data before executing commands when processing configuration input...
MGASA-2015-0257 Updated tidy package fixes security vulnerability
A heap-based buffer overflow in tidy could have unspecified impact when processing user-supplied input...
Cybozu Garoon vulnerable to SQL injection
Overview Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains an issue in processing input through API, which may result in SQL injection. Impact A user who can log in to the system may alter information stored in the database. Solution Apply the Patch Apply the appropria...
Oracle Linux 5 : cups (ELSA-2008-0192)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0192 advisory. - Applied patch to fix CVE-2008-0053 HP-GL/2 input processing, bug 438117. - Applied patch to fix CVE-2008-1373 GIF overflow, bug 438303. Tenable has...
Fedora 7 : cups-1.2.12-11.fc7 (2008-3449)
Fri May 9 2008 Tim Waugh 1:1.2.12-11 - Applied patch to fix CVE-2008-1722 integer overflow in image filter, bug 441692, STR 2790. - Tue Apr 1 2008 Tim Waugh 1:1.2.12-10 - Applied patch to fix CVE-2008-1373 GIF overflow, bug 438303. - Applied patch to fix CVE-2008-0053 HP-GL/2 input processing,...
CVE-2008-1098
Multiple cross-site scripting XSS vulnerabilities in MoinMoin 1.5.8 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 certain input processed by formatter/textgedit.py aka the gui editor formatter; 2 a page name, which triggers an injection in PageEditor.py when the...
Firefox DoS
Invalid INPUT tag designMode property processing...
Debian DSA-720-1 : smartlist - wrong input processing
Jeroen van Wolffelaar noticed that the confirm add-on of SmartList, the listmanager used on lists.debian.org, which is used on that host as well, could be tricked to subscribe arbitrary addresses to the lists. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
[SECURITY] [DSA 720-1] New smartlist packages fix unauthorised un/subscription
-------------------------------------------------------------------------- Debian Security Advisory DSA 720-1 [email protected] http://www.debian.org/security/ Martin Schulze May 3rd, 2005 http://www.debian.org/security/faq -...
Buffer overflow in ArgoSoft FTP Server
Product: ArGoSOft FTP Server Version: 1.22 other ? OffSite: http://www.argosoft.com/ Problem: Remote buffer overflow -------------------------------------------------------------- ArGoSOft FTP Server - FTP server for Windows. He is exposed to attack. The server does not process the input data...