Debian DSA-2661-1 : xorg-server - information disclosure

David Airlie and Peter Hutterer of Red Hat discovered that xorg-server, the X.Org X server was vulnerable to an information disclosure flaw related to input handling and devices hotplug. When an X server is running but not on front for example because of a VT switch, a newly plugged input device...

[SECURITY] [DSA 2661-1] xorg-server security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2661-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez April 17, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2661-1 (xorg-server - information disclosure)

David Airlie and Peter Hutterer of Red Hat discovered that xorg-server, the X.Org X server was vulnerable to an information disclosure flaw related to input handling and devices hotplug. When an X server is running but not on front for example because of a VT switch, a newly plugged input device...

DSA-2661-1 xorg-server - information disclosure

Bulletin has no description...

Debian: Security Advisory (DSA-2661-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MoinMoin Multiple Vulnerabilities

MoinMoin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moinmo:moinmoin"; ifdescription...

Spree promotions_controller.rb calculator_type Parameter Arbitrary Ruby Object Instantiation Command Execution

Spree contains a flaw that is triggered when handling input passed via the 'calculatortype' parameter to promotionscontroller.rb. This may allow a remote authenticated attacker to instantiate arbitrary Ruby objects and potentially execute arbitrary commands...

Google Chrome < 23.0.1271.64 Multiple Vulnerabilities

Binary data 800919.prm...

Google Chrome Multiple Vulnerabilities - Nov2012 (Linux)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov12lin.nasl 5999 2017-04-21 09:02:32Z teissa $ Google Chrome Multiple Vulnerabilities - Nov2012 Linux Authors: Antu Sanadi Copyright: Copyright c 2012...

CVE-2012-5122

Google Chrome before 23.0.1271.64 does not properly perform a cast of an unspecified variable during handling of input, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors...

CVE-2012-5122

Removed by vendor...

CVE-2012-5122

Technical details for CVE-2012-5122 are not publicly available in the provided documents. Monitor for updates from primary advisories; current sources list the CVE among Chrome/Chromium vulnerabilities but do not specify affected versions, vectors, or fixes in this bundle.

CVE-2012-5122: Undefined Security Weakness

Google Chrome before 23.0.1271.64 does not properly perform a cast of an unspecified variable during handling of input, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors...

RedHat Update for xorg-x11-server RHSA-2012:0939-04

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Total Video Player 1.31 .m3u Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: Total Video Player 1.31 .m3u Crash Poc Date: June 17 2012 Exploit Author: 0dem Vendor Homepage: http://www.effectmatrix.com/ Software Link: http://download.cnet.com/Total-Video-Player/3000-21394-10552696.html Version: V1.31 Tested...

Total Video Player 1.31 - .m3u Crash (PoC)

Total Video Player 1.31 - .m3u Crash PoC Exploit Title: Total Video Player 1.31 .m3u Crash Poc Date: June 17 2012 Exploit Author: 0dem Vendor Homepage: http://www.effectmatrix.com/ Software Link: http://download.cnet.com/Total-Video-Player/3000-21394-10552696.html Version: V1.31 Tested on: Window...

Total Video Player 1.31 - '.m3u' Crash (PoC)

Exploit Title: Total Video Player 1.31 .m3u Crash Poc Date: June 17 2012 Exploit Author: 0dem Vendor Homepage: http://www.effectmatrix.com/ Software Link: http://download.cnet.com/Total-Video-Player/3000-21394-10552696.html Version: V1.31 Tested on: Windows XP SP 3 Description: Total Video Player...

FreeBSD -- Incorrect crypt() hashing

Problem description: There is a programming error in the DES implementation used in crypt when handling input which contains characters that cannot be represented with 7-bit ASCII. When the input contains characters with only the most significant bit set 0x80, that character and all characters...

Concrete CMS 5.5.21 - Multiple Vulnerabilities

Concrete CMS 5.5.21 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/53640/info Concrete CMS is prone to following vulnerabilities because it fails to properly handle user-supplied input. 1. Multiple cross-site scripting vulnerabilities 2. An arbitrary-file-upload vulnerabilit...

CVE-2011-3364

Incomplete blacklist vulnerability in the svEscape function in settings/plugins/ifcfg-rh/shvar.c in the ifcfg-rh plug-in for GNOME NetworkManager 0.9.1, 0.9.0, 0.8.1, and possibly other versions, when PolicyKit is configured to allow users to create new connections, allows local users to execute...