SIGMA Lite & Lite + Security Vulnerabilities

CVE-2009-2229

Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter during a download action, a different vector than CVE-2008-3087. NOTE: some of these details are obtained from third party...

CVE-2009-2229

Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter during a download action, a different vector than CVE-2008-3087. NOTE: some of these details are obtained from third party...

Fedora Core 11 FEDORA-2009-6695 (pcsc-lite)

The remote host is missing an update to pcsc-lite announced via advisory...

Fedora Core 11 FEDORA-2009-6695 (pcsc-lite)

The remote host is missing an update to pcsc-lite announced via advisory...

Fedora 11 : pcsc-lite-1.5.2-2.fc11 (2009-6695)

Correct directory with world writeable permissions but no sticky bit set. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing.....

[SECURITY] Fedora 11 Update: pcsc-lite-1.5.2-2.fc11

The purpose of PC/SC Lite is to provide a Windows(R) SCard interface in a very small form factor for communicating to smartcards and readers. PC/SC Lite uses the same winscard API as used under Windows(R). This package includes the PC/SC Lite daemon, a resource manager that coordinates...

Fedora Core 11 FEDORA-2009-5518 (libwmf)

The remote host is missing an update to libwmf announced via advisory...

wireshark -- PCNFSD Dissector Denial of Service Vulnerability

The remote host is missing an update to the system as announced in the referenced...

Fedora Core 10 FEDORA-2009-5524 (libwmf)

The remote host is missing an update to libwmf announced via advisory...

Fedora Core 10 FEDORA-2009-5524 (libwmf)

The remote host is missing an update to libwmf announced via advisory...

Fedora Core 9 FEDORA-2009-5517 (libwmf)

The remote host is missing an update to libwmf announced via advisory...

Fedora Core 11 FEDORA-2009-5518 (libwmf)

The remote host is missing an update to libwmf announced via advisory...

Fedora Core 9 FEDORA-2009-5517 (libwmf)

The remote host is missing an update to libwmf announced via advisory...

wireshark -- PCNFSD Dissector Denial of Service Vulnerability

The remote host is missing an update to the system as announced in the referenced...

FreeBSD : wireshark -- PCNFSD Dissector Denial of Service Vulnerability (a2d4a330-4d54-11de-8811-0030843d3802)

Secunia reports : A vulnerability has been reported in Wireshark, which can be exploited by malicious people to cause a DoS. The vulnerability is caused due to an error in the PCNFSD dissector and can be exploited to cause a crash via a specially crafted PCNFSD...

R2 Newsletter Lite/Pro/Stats (admin.mdb) Database Disclosure Vuln

No description provided by...

R2 Newsletter Lite/Pro/Stats (admin.mdb) Database Disclosure Vuln

Exploit for unknown platform in category web...

R2 NewsLetter Lite/Pro/Stats - 'admin.mdb' Database Disclosure

...

Integer overflow

The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer...

CVE-2009-1831

The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer...

wireshark -- PCNFSD Dissector Denial of Service Vulnerability

Secunia reports: A vulnerability has been reported in Wireshark, which can be exploited by malicious people to cause a DoS. The vulnerability is caused due to an error in the PCNFSD dissector and can be exploited to cause a crash via a specially crafted PCNFSD ...

FreeBSD Ports: wireshark, wireshark-lite

The remote host is missing an update to the system as announced in the referenced...

FreeBSD Ports: wireshark, wireshark-lite

The remote host is missing an update to the system as announced in the referenced...

FreeBSD : wireshark -- multiple vulnerabilities (defce068-39aa-11de-a493-001b77d09812)

Wireshark team reports : Wireshark 1.0.7 fixes the following vulnerabilities : The PROFINET dissector was vulnerable to a format string overflow. (Bug 3382) Versions affected: 0.99.6 to 1.0.6, CVE-2009-1210. The Check Point High-Availability Protocol (CPHAP) dissector could crash. (Bug 3269)...

BLIND SQL INJECTION--Leap CMS 0.1.4-->

!/usr/bin/perl ----------------------------------------------- BLIND SQL INJECTION--Leap CMS 0.1.4--> ----------------------------------------------- CMS INFORMATION: -->WEB: http://leap.gowondesigns.com/ -->DEMO: http://php.opensourcecms.com/scripts/details.php?scriptid=161&name=Leap...

Leap CMS 0.1.4 (searchterm) Blind SQL Injection Exploit

No description provided by...

Leap CMS 0.1.4 XSS / SQL Injection

...

Leap CMS 0.1.4 SQL Injection

...

MULTIPLE REMOTE VULNERABILITIES--Leap CMS 0.1.4-->

MULTIPLE REMOTE VULNERABILITIES--Leap CMS 0.1.4--> CMS INFORMATION: -->WEB: http://leap.gowondesigns.com/ -->DEMO: http://php.opensourcecms.com/scripts/details.php?scriptid=161&name=Leap -->CATEGORY: CMS / Lite -->DESCRIPTION: Leap is a single file, template independent,...

Leap CMS 0.1.4 (SQL/XSS/SU) Multiple Remote Vulnerabilities

No description provided by...

Leap CMS 0.1.4 - 'searchterm' Blind SQL Injection

...

Leap CMS 0.1.4 (searchterm) Blind SQL Injection Exploit

No description provided by...

Leap CMS 0.1.4 (searchterm) Blind SQL Injection Exploit

Exploit for unknown platform in category web...

Leap CMS 0.1.4 - SQL Injection Cross-Site Scripting Arbitrary File Upload

Leap CMS 0.1.4 - SQL Injection Cross-Site Scripting Arbitrary File...

Leap CMS 0.1.4 (SQL/XSS/SU) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web...

Leap CMS 0.1.4 - searchterm Blind SQL Injection

Leap CMS 0.1.4 - searchterm Blind SQL...

Leap CMS 0.1.4 - SQL Injection / Cross-Site Scripting / Arbitrary File Upload

...

Fedora 10 : bugzilla-3.2.3-1.fc10 (2009-3410)

Mon Apr 6 2009 Itamar Reis Peixoto 3.2.3-1 fix CVE-2009-1213 Thu Mar 5 2009 Itamar Reis Peixoto 3.2.2-2 fix from BZ #474250 Comment #16, from Chris Eveleigh --> add python BR for contrib subpackage fix description change Requires perl-SOAP-Lite to perl(SOAP::Lite) according...

FreeBSD : multiple vulnerabilities in ethereal (74d06b67-d2cf-11d8-b479-02e0185c0b53)

Issues have been discovered in multiple protocol...

FreeBSD : multiple vulnerabilities in ethereal (265c8b00-d2d0-11d8-b479-02e0185c0b53)

Issues have been discovered in multiple protocol...

Fedora 10 : bugzilla-3.2.2-2.fc10 (2009-2417)

Thu Mar 5 2009 Itamar Reis Peixoto 3.2.2-2 fix from BZ #474250 Comment #16, from Chris Eveleigh --> add python BR for contrib subpackage fix description change Requires perl-SOAP-Lite to perl(SOAP::Lite) according guidelines Sun Mar 1 2009 Itamar Reis Peixoto 3.2.2-1 thanks...

Quick.CMS.Lite 0.5 - id SQL Injection

Quick.CMS.Lite 0.5 - id SQL...

Quick.CMS Lite 0.5 SQL Injection

...

Quick.Cms.Lite 0.5 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web...

Quick.Cms.Lite 0.5 (id) Remote SQL Injection Vulnerability

No description provided by...

Quick.CMS.Lite 0.5 - 'id' SQL Injection

...

Fedora Core 9 FEDORA-2009-3405 (bugzilla)

The remote host is missing an update to bugzilla announced via advisory...

Fedora Core 10 FEDORA-2009-3410 (bugzilla)

The remote host is missing an update to bugzilla announced via advisory...

Fedora Core 10 FEDORA-2009-3410 (bugzilla)

The remote host is missing an update to bugzilla announced via advisory...

Fedora Core 9 FEDORA-2009-3405 (bugzilla)

The remote host is missing an update to bugzilla announced via advisory...