18861 matches found
CVE-2022-43660
Improper neutralization of Server-Side Includes SSW within a web page in Movable Type series allows a remote authenticated attacker with Privilege of 'Manage of Content Types' may execute an arbitrary Perl script and/or an arbitrary OS command. Affected products/versions are as follows: Movable...
CVE-2022-43660
Improper neutralization of Server-Side Includes SSW within a web page in Movable Type series allows a remote authenticated attacker with Privilege of 'Manage of Content Types' may execute an arbitrary Perl script and/or an arbitrary OS command. Affected products/versions are as follows: Movable...
PT-2022-26995 · Unknown · Movable Type Premium Advanced +3
Name of the Vulnerable Software and Affected Versions: Movable Type versions 7 r.5301 and earlier Movable Type Advanced versions 7 r.5301 and earlier Movable Type Premium version 1.53 and earlier Movable Type Premium Advanced version 1.53 and earlier Description: The issue is related to the...
USN-5689-1: Perl vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that Perl incorrectly handled certain signature verification. An remote attacker could possibly use this issue to bypass signature...
CVE-2022-43660
Improper neutralization of Server-Side Includes SSW within a web page in Movable Type series allows a remote authenticated attacker with Privilege of 'Manage of Content Types' may execute an arbitrary Perl script and/or an arbitrary OS command. Affected products/versions are as follows: Movable...
OPENSUSE-SU-2022:10222-1 Security update for rxvt-unicode
This update for rxvt-unicode fixes the following issues: Update to 9.26 - eviouring.c was wrongly required during compilation, and wrongly not packaged. Update to 9.25 boo1186174 CVE-2021-33477 - for the 17.5th anniversary, and because many distributions seem to remove rxvt in favour of urxvt, th...
Ubuntu: Security Advisory (USN-5689-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-5689-2: Perl vulnerability
USN-5689-1 fixed a vulnerability in Perl. This update provides the corresponding update for Ubuntu 22.10. Original advisory details: It was discovered that Perl incorrectly handled certain signature verification. An remote attacker could possibly use this issue to bypass signature verification...
Ubuntu 22.10 : Perl vulnerability (USN-5689-2)
The remote Ubuntu 22.10 host has packages installed that are affected by a vulnerability as referenced in the USN-5689-2 advisory. USN-5689-1 fixed a vulnerability in Perl. This update provides the corresponding update for Ubuntu 22.10. Tenable has extracted the preceding description block direct...
Multiple vulnerabilities in Movable Type
Overview Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below. Improper Validation of Syntactic Correctness of Input CWE-1286 - CVE-2022-45113 Cross-site Scripting CWE-79 - CVE-2022-45122 Improper Neutralization of Server-Side Includes SSI Within a Web Page CWE-9...
Six Apart Movable Type 代码注入漏洞
Six Apart Movable Type is an application from Six Apart USA. It provides features such as multiple users, comments, trackbacks, and threads. A security vulnerability exists in Six Apart Movable Type, which can be exploited to execute arbitrary Perl scripts and/or arbitrary operating system comman...
AlmaLinux 9 : openssl (ALSA-2022:6224)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:6224 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...
CLSA-2022-1668467714 perl: Fix of CVE-2020-16156
CVE-2020-16156: fix signature verification bypass...
CLSA-2022-1668122645 perl: Fix of CVE-2020-16156
CVE-2020-16156: fix signature verification bypass...
perl: Fix of CVE-2020-16156
CVE-2020-16156: recognize CANNOTVERIFY signature verification type...
CLSA-2022-1668120434 perl: Fix of CVE-2020-16156
CVE-2020-16156: recognize CANNOTVERIFY signature verification type...
lesspipe: Arbitrary Code Exeecution
Background lesspipe is a preprocessor for less. Description lesspipe has support for parsing Perl storable "PST" files, Impact A crafted Perl storable file which is passed into lesspipe could result in arbitrary code execution. Workaround There is no known workaround at this time. Resolution All...
CLSA-2022-1668032518 perl: Fix of CVE-2020-16156
CVE-2020-16156: recognize CANNOTVERIFY signature verification type...
