CVE-2012-4533

Cross-site scripting XSS vulnerability in the "extra" details in the DiffSource.getrow function in lib/viewvc.py in ViewVC 1.0.x before 1.0.13 and 1.1.x before 1.1.16 allows remote authenticated users with repository commit access to inject arbitrary web script or HTML via the "function name" lin...

CVE-2012-4533: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the "extra" details in the DiffSource.getrow function in lib/viewvc.py in ViewVC 1.0.x before 1.0.13 and 1.1.x before 1.1.16 allows remote authenticated users with repository commit access to inject arbitrary web script or HTML via the "function name" lin...

PT-2012-6183

Name of the Vulnerable Software and Affected Versions DFLabs PTK version 1.0.5 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the arg4 parameter in the ptk/lib/modal bookmark.php file. Recommendations For DFLabs PTK versio...

CVE-2012-4505: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the pxpacreload function in lib/pac.c in libproxy 0.2.x and 0.3.x allows remote servers to have an unspecified impact via a crafted Content-Length size in an HTTP response header for a proxy.pac file request, a different vulnerability than CVE-2012-4504...

Low: puppet

Issue Overview: Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, when Delete is enabled in auth.conf, allows remote authenticated users to delete arbitrary files on the puppet master server via a...

CVE-2012-4407

lib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly check the publication state of blog files, which allows remote attackers to obtain sensitive information by reading a blog entry that references a non-public file...

CVE-2012-4407: Exposure of Sensitive Information to an Unauthorized Actor

lib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly check the publication state of blog files, which allows remote attackers to obtain sensitive information by reading a blog entry that references a non-public file...

PT-2012-5380

Name of the Vulnerable Software and Affected Versions Moodle versions 2.1.x through 2.1.7 Moodle versions 2.2.x through 2.2.4 Moodle versions 2.3.x through 2.3.1 Description The issue allows remote attackers to obtain sensitive information by reading a blog entry that references a non-public file...

CVE-2012-2275

Multiple cross-site request forgery CSRF vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hijack the authentication of users for requests that add, delete, or modify sensitive information, as demonstrated by changing the administrator's email via an editUser action to...

PT-2012-3914

Name of the Vulnerable Software and Affected Versions TestLink versions 1.9.3 and earlier Description The issue allows remote attackers to hijack the authentication of users for requests that add, delete, or modify sensitive information. This can be demonstrated by changing the administrator's...

CVE-2012-2275: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hijack the authentication of users for requests that add, delete, or modify sensitive information, as demonstrated by changing the administrator's email via an editUser action to...

Slackware Advisory SSA:2005-283-01 xine-lib

The remote host is missing an update as announced via advisory SSA:2005-283-01. OpenVAS Vulnerability Test $Id: esoftslkssa200528301.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2005-121-02 xine-lib

The remote host is missing an update as announced via advisory SSA:2005-121-02. OpenVAS Vulnerability Test $Id: esoftslkssa200512102.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2009-098-03 xine-lib

The remote host is missing an update as announced via advisory SSA:2009-098-03. OpenVAS Vulnerability Test $Id: esoftslkssa200909803.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2008-092-01 xine-lib

The remote host is missing an update as announced via advisory SSA:2008-092-01. OpenVAS Vulnerability Test $Id: esoftslkssa200809201.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2007-109-02 xine-lib

The remote host is missing an update as announced via advisory SSA:2007-109-02. OpenVAS Vulnerability Test $Id: esoftslkssa200710902.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2006-357-05 xine-lib

The remote host is missing an update as announced via advisory SSA:2006-357-05. OpenVAS Vulnerability Test $Id: esoftslkssa200635705.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2006-207-04 xine-lib

The remote host is missing an update as announced via advisory SSA:2006-207-04. OpenVAS Vulnerability Test $Id: esoftslkssa200620704.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2008-089-03 xine-lib

The remote host is missing an update as announced via advisory SSA:2008-089-03. OpenVAS Vulnerability Test $Id: esoftslkssa200808903.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2008-111-01 xine-lib

The remote host is missing an update as announced via advisory SSA:2008-111-01. OpenVAS Vulnerability Test $Id: esoftslkssa200811101.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...