JVN#87859762: H2O use-after-free vulnerability

H2O is an open source web server software. H2O contains a use-after-free vulnerability. Impact An attacker may cause a denial-of-service DoS condition by sending a specially crafted packet. Solution Update the Software Update to the latest version according to the information provided by the...

H2O Memory Misreference Vulnerability

H2O is a set of open source Web server software . A memory misreference vulnerability exists in H2O 1.7.2 and earlier versions. An attacker can exploit this vulnerability by sending specially crafted packets to cause a denial of service...

TYPO3 Typo3 Quixplorer Extension Cross-Site Request Forgery Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the TYPO3 Association in Switzerland.Typo3 Quixplorer is one of the extensions plug-ins for quickly finding and opening files or folders. A cross-site request forgery vulnerability exists in TYPO3 Typo3...

Fedora Update for thunderbird-enigmail FEDORA-2014-9944

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

qemu: virtio: buffer overrun on incoming migration

Array index error in the virtioload function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image...

qemu: virtio: out-of-bounds buffer write on state load with invalid config_len

Heap-based buffer overflow in the virtioload function in hw/virtio/virtio.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted config length in a savevm image...

CUPS < 1.7.2 Reflected Cross-Site Scripting Vulnerability

Binary data 8210.prm...

Pulse Pro 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities

Pulse Pro 1.7.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/51056/info Pulse Pro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An...

CVE-2011-1671

Cross-site scripting XSS vulnerability in app/controllers/todoscontroller.rb in Tracks 1.7.2, 2.0RC2, and 2.0devel allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to todos/tag/. NOTE: some of these details are obtained from third party information...

CVE-2010-2006

Directory traversal vulnerability in op/op.Login.php in LetoDMS formerly MyDMS 1.7.2 and earlier allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the lang parameter...

LetoDms 1.4.x - 'lang' Local File Inclusion

source: https://www.securityfocus.com/bid/37828/info LetoDMS formerly known as MyDMS is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying computer;...

GrabIt Stack Based Buffer Overflow Vulnerability

This host is installed with GrabIt and is prone to stack-based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbgrabitbofvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ GrabIt Stack Based Buffer Overflow Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Networ...

GrabIt Stack Based Buffer Overflow Vulnerability

GrabIt is prone to stack-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Grabit &lt;= 1.7.2 beta 3 NZB file parsing stack overflow

Grabit = 1.7.2 beta 3 NZB file parsing stack overflow Impact: Remote code execution Version: = 1.7.2 beta 3 Description Grabit is a popular Windows usenet client designed for downloading binary files. It has support for NZB files, which a user would usually acquire from an external source. Versio...

mpg123 Player Denial of Service Vulnerability (Linux)

This host is running mpg123 Player which is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodmpg123playerdosvulnlin.nasl 5055 2017-01-20 14:08:39Z teissa $ mpg123 Player Denial of Service Vulnerability Linux. Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...