CVE-2009-0800

Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file...

Mandriva Linux Security Advisory : vim (MDVSA-2008:236-1)

Several vulnerabilities were found in the vim editor : A number of input sanitization flaws were found in various vim system functions. If a user were to open a specially crafted file, it would be possible to execute arbitrary code as the user running vim CVE-2008-2712. Ulf Hrnhammar of Secunia...

PDF JBIG2 multiple input validation flaws

Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file...

PDF JBIG2 multiple input validation flaws

Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file...

PDF JBIG2 multiple input validation flaws

Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file...

RedHat Security Advisory RHSA-2009:0345

The remote host is missing updates announced in advisory RHSA-2009:0345. Ghostscript is a set of software that provides a PostScriptTM interpreter, a set of C procedures the Ghostscript library, which implements the graphics capabilities in the PostScript language and an interpreter for Portable...

RedHat Security Advisory RHSA-2009:0334

The remote host is missing updates announced in advisory RHSA-2009:0334. The flash-plugin package contains a Firefox-compatible Adobe Flash Player Web browser plug-in. Multiple input validation flaws were found in the way Flash Player displayed certain SWF Shockwave Flash content. An attacker cou...

RedHat Security Advisory RHSA-2009:0334

The remote host is missing updates announced in advisory RHSA-2009:0334. The flash-plugin package contains a Firefox-compatible Adobe Flash Player Web browser plug-in. Multiple input validation flaws were found in the way Flash Player displayed certain SWF Shockwave Flash content. An attacker cou...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 3 and 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Firefox-compatible Adobe...

RedHat Security Advisory RHSA-2009:0011

The remote host is missing updates announced in advisory RHSA-2009:0011. Little Color Management System LittleCMS, or simply lcms is a small-footprint, speed-optimized open source color management engine. Multiple insufficient input validation flaws were discovered in LittleCMS. An attacker could...

FreeBSD 5.x - I386_Set_LDT() Multiple Local Denial of Service Vulnerabilities

FreeBSD 5.x - I386SetLDT Multiple Local Denial of Service Vulnerabilities // source: https://www.securityfocus.com/bid/20158/info FreeBSD is prone to multiple local denial-of-service vulnerabilities. These issues occur because of input-validation flaws related to the handling of integers. An...

FreeBSD 5.x - 'I386_Set_LDT()' Multiple Local Denial of Service Vulnerabilities

// source: https://www.securityfocus.com/bid/20158/info FreeBSD is prone to multiple local denial-of-service vulnerabilities. These issues occur because of input-validation flaws related to the handling of integers. An attacker may leverage these issues to cause the affected computer to crash,...

Chimera Web Portal 0.2 - linkcategory.php?id SQL Injection

Chimera Web Portal 0.2 - linkcategory.php?id SQL Injection source: https://www.securityfocus.com/bid/16113/info Chimera Web Portal is prone to multiple input validation vulnerabilities. The issues include cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in...

Cyberstrong eShop Multiple Script ProductCode Parameter SQL Injection

The remote host is running Cyberstrong eShop, a shopping cart written in ASP. The remote version of this software contains several input validation flaws leading to SQL injection vulnerabilities. An attacker may exploit these flaws to affect database queries, possibly resulting in disclosure of...

eGroupWare 1.0 - ttsindex.php?filter SQL Injection

eGroupWare 1.0 - ttsindex.php?filter SQL Injection source: https://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate user-supplied input...

eGroupWare 1.0 - index.php?cats_app SQL Injection

eGroupWare 1.0 - index.php?catsapp SQL Injection source: https://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate user-supplied input. Thes...

eGroupWare 1.0 - sitemgr-siteindex.php?category_id Cross-Site Scripting

eGroupWare 1.0 - sitemgr-siteindex.php?categoryid Cross-Site Scripting source: https://www.securityfocus.com/bid/13212/info eGroupWare is prone to multiple input validation vulnerabilities. A fixed version is available. The issues arise due to a failure of the application to properly validate...

Valdersoft Shopping Cart 3.0 - Multiple Input Validation Vulnerabilities

Valdersoft Shopping Cart 3.0 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/12916/info Multiple input validation vulnerabilities reportedly affect Valdersoft Shopping Cart. These issues are due to a failure of the application to properly sanitize user-suppli...

CoolForum 0.50.70.8 - avatar.php?img Cross-Site Scripting

CoolForum 0.50.70.8 - avatar.php?img Cross-Site Scripting source: https://www.securityfocus.com/bid/12852/info Multiple remote input validation vulnerabilities affect CoolForum. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carr...

SunShop Shopping Cart index.php search Parameter XSS

The remote host is running SunShop, a web-based shopping cart program written in PHP. The remote version of this software is vulnerable to several input validation flaws, which may allow an attacker to use the remote web site to perform a cross-site scripting attack. %NASLMINLEVEL 70300 C Tenable...