ludwig vulnerabilities and exploits

(subscribe to this query)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ludwig Media UTM Tracker plugin <= 1.3.1 versions.

Utm Tracker Project Utm Tracker

Directory traversal vulnerability in GNU Gnump3d prior to 2.9.8 has unknown impact via "CGI parameters, and cookie values".

Gnu Gnump3d 2.9.2 Gnu Gnump3d 2.9.4 Gnu Gnump3d 2.9.3 Gnu Gnump3d 2.9.5 Gnu Gnump3d 2.9 Gnu Gnump3d 2.9.1 Gnu Gnump3d 2.9.6 Gnu Gnump3d 2.9.7

GNU Gnump3d prior to 2.9.8 allows local users to modify or delete arbitrary files via a symlink attack on the index.lok temporary file.

Gnu Gnump3d 2.9.4 Gnu Gnump3d 2.9.6 Gnu Gnump3d 2.9.3 Gnu Gnump3d 2.9.5 Gnu Gnump3d Gnu Gnump3d 2.9 Gnu Gnump3d 2.9.1 Gnu Gnump3d 2.9.2

Buffer overflow in BibTeX 0.99 allows context-dependent malicious users to cause a denial of service (memory corruption and crash) via a long .bib bibliography file.

Bibtex Bibtex 0.99

1 EDB exploit

io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ prior to 2.8.7 allows malicious users to cause a denial of service (infinite loop) via a crafted XPM image with a large number of colors.

Gnome Gdkpixbuf Gnome Gtk

Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ prior to 2.8.7 allows malicious users to cause a denial of service (crash) or execute arbitrary code via an XPM file with large height, width, and colour values, a different vulnerability than CVE-2005-3186.

Gnome Gdkpixbuf 0.22 Gnome Gtk

Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows malicious users to execute arbitrary code via an XPM file with a number of colors that causes insufficient memory to be allocated, which leads to a heap-based buffer overflow.

Gnome Gdkpixbuf Gtk Gtk\\+ 2.4.0

Integer overflow in dvips in TeX Live 2009 and previous versions, and teTeX, allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.

Tug Tex Live 1996 Tug Tex Live 1998 Tug Tex Live 2007 Tug Tex Live 2008 Tug Tex Live 2001 Tug Tex Live 2002 Tug Tex Live 1999 Tug Tex Live 2000 Tug Tex Live Tug Tex Live 2003 Tug Tex Live 2004 Tug Tex Live 2005 Tug Tetex

istream.c in w3m 0.5.2 and possibly other versions, when ssl_verify_server is enabled, does not properly handle a '\0' character in a domain name in the (1) subject's Common Name or (2) Subject Alternative Name field of an X.509 certificate, which allows man-in-the...

Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote malicious users to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtain...

Tug Tetex Tug Tex Live

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook