A flaw in the implementation of Montgomery Ladder Approach would create a side- T W~. W R013-6416
CVE-2013-6417cvename>CVE-2013-4491 CVE-2013-6414 CVE-2013-6415 CVE-2013-6416 CVE-2013-6 4 w / W 20.9ed Hat Security Response Team reports: Gallery upstream has released 3.0.9 version, corr +) W )h Mozilla Updater
MFSA 2013-35 WebGL crash with Mesa graphics driver on Linux
MFSA 2013-36 Bypass of SOW protections allows cloning of protected nodes
MFSA 2013-37 Bypass of tab-modal dialog origin disclosure
MFSA 2013-38 Cross-site scripting (XSS) usi +) W ) way that JSON parameters are parsed, it is possible for an attacker to issue unexpected database queries with "IS NULL" or empty "WHERE" clauses. This issue does not let an attacker insert arbitrary values into an SQL query, however they can cause the query to check for N +) W )VE-2012-2875
CVE-2012-2878 CVE-2012-2880 CVE-2012-2882 CVE-2012-2885 CVE-2012-2890 CVE-2012-2891 CVE-2012-2892 +) W )ge value) would cause libjpeg-turbo to segfault.
A Heap-based buffer overflow was found in the way libjpeg-turbo decompressed certain corrupt JPEG images in which the component count was erro , ~H W +
18.0.1025.15106577] Med E a B @@ ;Cb3657 CVE-2011-3667 CVE-2011-3668 CVE-2011-3669 https://bugzilla.mozilla.org/show_bug.cgi?id=697699 d G?I W b(CVE-2011-1097). This fixes some assert errors in the hard-linking code, and some potential failed checksums (via -c) that should have matched CVE-2011-1097 https://bugzilla.samba. +) W )ty was discovered. The vulnerability only allows execution of files with names ending in ".php" which are already present in the local filesystem. Only servers running Microsoft Windows and possibly Novell Netware are affected. Despite these mitigating factors, all users are aˀ rS @ x, W qface mailman 2.1.14 265"> Two vulnerabilitiѠ +) W )
The migration script in the Joomla! installer does not check the file type being uploaded. If the installation application is present, an attacker could use it to +) W )e>
CVE-2009-3377 CVE-2009-3376 CVE-2009-3375 CVE-2009-1563 CVE-2009-3374 CVE-2009-3373 CVE-2009-3372 CVE-20 +) W )rlier in xpdf and poppler. A remote attacker might send or entice a user to send a specially crafted print job to CUPS, possibly resulting in the execution of arbitrary code with the privileges of the configured CUPS user -- by default this is "lp", or a < H} Dabilities
awstats 6.9,1 awstats _ L?] W ]url>http://secunia.com/advisories/31912/ http://secunia.com/advisories/31858/ 2008-09-18 2008-09-19 20 +) W )VE-2008-1372 https://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/ 2008-03-18 2008-03-20 P TF J> L ces>2007-10-17 2007-10-1751b51d4a-7c0f-11dc-9e47-0011d861d5e2"> phpmyadmin -- cross- +) W )Fixed a possible super-global overwrite inside import_request_variables(). Fixed a remotely trigger-able buffer overflow inside bundled libxmlrpc library. Security Enhancements and Fixes in PHP 5.2.2 only:
- Fixed a header injecti +) W )
An integer overflow flaw was found in the way Qt handled pixmap images. The KDE khtml library uses Qt in such a way that untrusted parameters could be passed to Qt, triggering the overflow. An attacker could for example create a malicious web page that when viewed by a \> J{N W A TWiki Security Alert reports:
The TWiki upload filter already prevents executable scripts such as .p +) W )xist in the handling by sendmail of asynchronous signals.Impact
A remote attacker may be able to execute arbitrary code with the privileges of the user running sendmail, typically root.
Workaround
There is no known workaround other than disabling s H kB ^r W G316/">
Lostmon has reported some vulnerabilities in Flyspray.
+) W )i>The WBXML could dereference a null pointer.The H1 dissector could go into an infinite loop. The DOCSIS dissector could cause a crash. The SMPP dissector could go into an infinite loop. SCTP graphs could crash. The HTTP disse K `f W Irian Weimer wrote: Mailman 2.1.5 uses weak auto-generated passwords for new subscribers. These passwords are assigned when members subscribe without specifyin 5e v@N W 3string vulnerability
sup 2.0.20050226Debian Security Advisory reports: mpg123 -- buffer overflow in URL handlingt>0. +) W ) http://www.osvdb.org/7475 http://www.osvdb.org/7476 http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0003.html http://www.kame.net/dev/cvsweb2.cgi/kame/kame/kame/racoon/isakmp.c.diff?r1=1.180&r2=1.181 2004-03-31