5608 matches found
CVE-2012-6621
Multiple cross-site scripting XSS vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Email Address or 2 Custom Permalink Structure fields in admin/settings.php; 3 path parameter to admin/upload.php; 4 err paramet...
[SECURITY] Fedora 20 Update: gnome-chemistry-utils-0.14.5-1.fc20
This package is a set of chemical utils. Several programs are available: A 3D molecular structure viewer GChem3D. A Chemical calculator GChemCalc. A 2D structure editor GChemPaint. A periodic table of the elements application GChemTable. A crystalline structure editor GCrystal. A spectra viewer...
[SECURITY] Fedora 19 Update: gnome-chemistry-utils-0.14.5-1.fc19
This package is a set of chemical utils. Several programs are available: A 3D molecular structure viewer GChem3D. A Chemical calculator GChemCalc. A 2D structure editor GChemPaint. A periodic table of the elements application GChemTable. A crystalline structure editor GCrystal. A spectra viewer...
Ubuntu: Security Advisory (USN-2079-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for openssl USN-2079-1
Check for the Version of openssl OpenVAS Vulnerability Test $Id: gbubuntuUSN20791.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for openssl USN-2079-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...
Ubuntu 12.04 LTS / 12.10 / 13.04 / 13.10 : openssl vulnerabilities (USN-2079-1)
Anton Johansson discovered that OpenSSL incorrectly handled certain invalid TLS handshakes. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service. CVE-2013-4353 Ron Barber discovered that OpenSSL used an incorrect data structure to obtain a version...
USN-2079-1: OpenSSL vulnerabilities
Anton Johansson discovered that OpenSSL incorrectly handled certain invalid TLS handshakes. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service. CVE-2013-4353 Ron Barber discovered that OpenSSL used an incorrect data structure to obtain a version...
GetSimple CMS 3.1.2 / 3.2.3 Cross Site Scripting
Author Information Author : Ahmed Elhady Mohamed Website : http://1nfosec4all.blogspot.com/ twitter : @kingasmk facebook :https://www.facebook.com/groups/ITsec4all/ Software Information Affected Software : GetSimple CMS 3.2.3, 3.1.2 Software website : http://get-simple.info/ CVE Reference :...
DEBIAN-CVE-2013-6449
The sslgetalgorithm2 function in ssl/s3lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a denial of service daemon crash via crafted traffic from a TLS 1.2 client...
CVE-2013-4520
xslt.c in libxslt before 1.1.25 allows context-dependent attackers to cause a denial of service crash via a stylesheet that embeds a DTD, which causes a structure to be accessed as a different type. NOTE: this issue is due to an incomplete fix for CVE-2012-2825...
Stack overflow
Stack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary code via a long idCount value in an ICONDIR structure in an ICO file. NOTE: some of these details are obtained from third party information...
CVE-2013-4988
Stack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary code via a long idCount value in an ICONDIR structure in an ICO file. NOTE: some of these details are obtained from third party information...
Kernel: signal: information leak in tkill/tgkill
The dotkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted application that makes a 1 tkill or 2 tgkill system call...
Siteserver 3.6.3 version SQL injection vulnerability-vulnerability warning-the black bar safety net
! The latest official version 3. 6. 4。 Scan siteserver 3.6.3 version of the directory structure, get URL as follows http://www.domain.gov.cn/siteserver/CMS/consoletableMetadata.aspx?ENName=cmsContent&TableType=BackgroundContent The injection point there ENName, completely without any filtering...
CVE-2013-4516
The mpgetcount function in drivers/staging/sb105x/sbpcimp.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a TIOCGICOUNT ioctl call...
UBUNTU-CVE-2013-4515
The bcmcharioctl function in drivers/staging/bcm/Bcmchar.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via an IOCTLBCMGETDEVICEDRIVERINFO ioctl call...
CVE-2013-6285
The vulnerability CVE-2013-6285 affects the Treasurer application’s search component in Tyler Technologies TaxWeb 3.13.3.1. It allows remote attackers to obtain sensitive query-structure information by sending an invalid search request. This is described as a separate issue from CVE-2013-6020. Th...
CVE-2013-6285
The search component in the Treasurer application in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to obtain sensitive query-structure information via an invalid search request, a different vulnerability than CVE-2013-6020...
[Mellivora] Basic database driven CTF engine
Mellivora is a basic database driven CTF engine written in PHP. Requirements LAMP: PHP 5.3+, MySQL 5.5+, Apache 2.2+. May work with other configurations but this is untested. Installation Download to any directory, say: "/var/www/mellivora/". Create an Apache VHost and point DocumentRoot to...