3832 matches found
DEBIAN-CVE-2014-8541
libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits-per-pixel differences, when determining whether an image size has changed, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via...
UBUNTU-CVE-2014-8544
libavcodec/tiff.c in FFmpeg before 2.4.2 does not properly validate bits-per-pixel fields, which allows remote attackers to cause a denial of service out-of-bounds access or possibly have unspecified other impact via crafted TIFF data...
PT-2014-8288
Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue allows remote attackers to cause a denial of service crash via a small bytes per pixel value in the set pixel format function. Recommendations At the moment, there is no information...
UBUNTU-CVE-2014-7815
The setpixelformat function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service crash via a small bytesperpixel value...
Information disclosure
The Esercizi per le donne aka com.rareartifact.eserciziperledonne6D5578C6 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7027
The Esercizi per le donne aka com.rareartifact.eserciziperledonne6D5578C6 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7027
CVE-2014-7027 affects the Android app “Esercizi per le donne” (com.rareartifact.eserciziperledonne6D5578C6) version 1.0. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling potential man-in-the-middle attacks to intercept sensitive information with crafted...
CVE-2014-7027: Undefined Security Weakness
The Esercizi per le donne aka com.rareartifact.eserciziperledonne6D5578C6 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Count per Day 3.2.5 - counter.php HTTP Referer Header XSS
The Count per Day WordPress plugin was affected by a counter.php HTTP Referer Header XSS security vulnerability...
Count Per Day 3.1.1 - userperspan.php Multiple Parameter XSS
The Count per Day WordPress plugin was affected by an userperspan.php Multiple Parameter XSS security vulnerability...
Count Per Day <= 3.1 - map.php map Parameter XSS
The Count per Day WordPress plugin was affected by a map.php map Parameter XSS security vulnerability...
Count Per Day <= 3.2.3 - notes.php note Parameter XSS
The Count per Day WordPress plugin was affected by a notes.php note Parameter XSS security vulnerability...
Count Per Day <= 3.1 - download.php f Parameter Traversal Arbitrary File Access
The Count per Day WordPress plugin was affected by a download.php f Parameter Traversal Arbitrary File Access security vulnerability...
Job Fails to Start Due to Timeout Caused by Desktop Heap Allocation Failure
Article Applicability The timeout error displayed in Veeam Backup & Replication can be caused by various factors. This article explicitly addresses a scenario where the Windows OS experiences a 'heap allocation' failure. Please note that the solution provided in this article is only applicable if...
CVE-2014-4543
Multiple cross-site scripting XSS vulnerabilities in payper/payper.php in the Pay Per Media Player plugin 1.24 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 fcolor, 2 links, 3 stitle, 4 height, 5 width, 6 host, 7 bcolor, 8 msg, 9 id, or 10 size...
CVE-2014-4543
The CVE-2014-4543 entry documents XSS vulnerabilities in the WordPress Pay Per Media Player plugin (payper/payper.php) version 1.24 and earlier. The root cause is unsanitized input across multiple parameters (fcolor, links, stitle, height, width, host, bcolor, msg, id, size) which allows remote a...
PT-2014-5966
Name of the Vulnerable Software and Affected Versions Pay Per Media Player plugin versions 1.24 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via various parameters, including fcolor, links, stitle, height, width, host, bcolor, msg, id, or size...
CVE-2014-4543: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in payper/payper.php in the Pay Per Media Player plugin 1.24 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 fcolor, 2 links, 3 stitle, 4 height, 5 width, 6 host, 7 bcolor, 8 msg, 9 id, or 10 size...
NooMS CMS 1.1.1 - CSRF
No description provided by source. NooMS CMS version 1.1.1 CSRF Bug Found: April 9th 2011 Found by: loneferret as far as I know anyway Software Download Link: http://phpkode.com/download/p/2381nooms1.1.1.tar.bz2 Nods to exploit-db Team Well, I didn't have much to do this morning so figured I'd tr...