Ubuntu Update for python2.5 vulnerabilities USN-890-2

Ubuntu Update for Linux kernel vulnerabilities USN-890-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN8902.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for python2.5 vulnerabilities USN-890-2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Mandriva Update for php MDVSA-2010:009 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2010:009 php Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Linux Security Advisory : php (MDVSA-2010:008)

Multiple vulnerabilities has been found and corrected in php : The zendrestoreinientrycb function in zendini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain sensitive information memory contents and cause a PHP crash by using the iniset function to declare...

RedHat Update for PyXML RHSA-2010:0002-01

Check for the Version of PyXML OpenVAS Vulnerability Test RedHat Update for PyXML RHSA-2010:0002-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

expat: buffer over-read and crash on XML with malformed UTF-8 sequences

The updatePosition function in lib/xmltokimpl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service application crash via an XML document with crafted UTF-8 sequences that trigger a buffer over-read,...

[SECURITY] [DSA-1953-2] New expat packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1953-2 [email protected] http://www.debian.org/security/ Stefan Fritsch December 31, 2009 http://www.debian.org/security/faq -...

DEBIAN-CVE-2009-4459

Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...

Cross site scripting

Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...

CVE-2009-4459

Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...

CVE-2009-4142

The htmlspecialchars function in PHP before 5.2.12 does not properly handle 1 overlong UTF-8 sequences, 2 invalid ShiftJIS sequences, and 3 invalid EUC-JP sequences, which allows remote attackers to conduct cross-site scripting XSS attacks by placing a crafted byte sequence before a special...

Redmine 0.8.7 UTF-7 Cross Site Scripting

Redmine prior to . Thus it may be possible to create a page with encoded to UTF-7 JavaScript in title and it will be executed in Internet Explorer 7/8 with Auto-Select encoding on Proof-of-Concept: 1. Create new issue with title "+ADw-script+AD4-alert'XSS';+ADw-/script+AD4-" without quotes 2. Ope...

Redmine <= 0.8.7 UTF-7 XSS Vulnerability

No description provided by source. Redmine = 0.8.7 UTF-7 XSS Vulnerability Discovered by: p0deje http://p0deje.blogspot.com Application: http://www.redmine.org/wiki/redmine/Download SA: - Date: 01.12.2009 Versions affected: = 0.8.7 Vulnerability: Cross-site Scripting Platform: Ruby Ruby On Rails...

Tomcat 6.0.16 UTF-8 目录穿越漏洞

No description provided by source...

[SECURITY] [DSA-1953-1] New expat packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1953-1 [email protected] http://www.debian.org/security/ Stefan Fritsch December 15, 2009 http://www.debian.org/security/faq -...

Mozilla Firefox UTF-8 URL Handling Stack Buffer Overflow - Improved Performance (CVE-2008-0016)

Firefox is an open source web browser developed by Mozilla Foundation. The application is capable of interpreting and rendering many types of Internet content, including various versions of HTML, XML, CSS Cascade Style Sheet, JavaScript, various graphic formats, and so on. Firefox is made availab...

CVE-2009-4250

CVE-2009-4250 affects CuteNews/CuteNews UTF-8 workflows (CuteNews 1.4.6 and UTF-8 CuteNews before 8b). It describes multiple cross-site scripting (XSS) vulnerabilities allowing injection of arbitrary script/HTML via: register.php (result), search.php (user), editnews/index.php (cat_msg, source_ms...

Fedora Core 12 FEDORA-2009-12737 (expat)

The remote host is missing an update to expat announced via advisory FEDORA-2009-12737. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

RedHat Security Advisory RHSA-2009:1625

The remote host is missing updates announced in advisory RHSA-2009:1625. Expat is a C library written by James Clark for parsing XML documents. Two buffer over-read flaws were found in the way Expat handled malformed UTF-8 sequences when processing XML files. A specially-crafted XML file could...

Fedora Core 11 FEDORA-2009-12716 (expat)

The remote host is missing an update to expat announced via advisory FEDORA-2009-12716. OpenVAS Vulnerability Test $Id: fcore200912716.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12716 expat Authors: Thomas Reinke Copyright: Copyright c 2009...

CVE-2009-4250

Multiple cross-site scripting XSS vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject arbitrary web script or HTML via 1 the result parameter to register.php; 2 the user parameter to search.php; the 3 catmsg, 4 sourcemsg, 5 postponedselected, 6...