CVE-2011-0004

Piwik before version 1.1 contains multiple XSS vulnerabilities that allow an attacker to inject arbitrary script/HTML via unspecified vectors. Impact is partial integrity exposure; exploitation could affect targeted pages in a user context. Remediation: upgrade to Piwik 1.1.2 or later (as advised...

CVE-2011-0004

Multiple cross-site scripting XSS vulnerabilities in Piwik before 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

RHEL 5 : kernel (RHSA-2011:0004)

Updated kernel packages that fix multiple security issues, several bugs, and add an enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, whi...

CVE-2010-0004

ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root, potentially allowing remote attackers to discover private root names by reading the view. Affected component: ViewVC (core request handling for root listings). Root cause: authorization not enforced at ...

openSUSE Security Update : viewvc (viewvc-1859)

The viewvc update fixes the following security problems : - add root listing support of per-root authz config CVE-2010-0004. - query.py requires 'forbidden' authorizer or none in config CVE-2010-0005. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2008-0004

CVE-2008-0004 is rejected and not a valid vulnerability entry.

CVE-2008-0004

...

CentOS Security Advisory CESA-2009:0004-01 (openssl)

The remote host is missing updates to openssl announced in advisory CESA-2009:0004-01. CESA-2009:0004-01 63346 1 $Id: ovcesa2009000401.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0004-01 openssl Authors: Thomas Reinke Copyright: Copyright c 2009...

Apple QuickTime Multiple Vulnerabilities (Jan 2009) - Windows

Apple QuickTime is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...

QuickTime < 7.6 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.6. Such versions contain several vulnerabilities : - A heap buffer overflow in QuickTime's handling of RTSP URLs may lead to an application crash or arbitrary code execution. CVE-2009-0001 - A heap buffer overflow in...

CVE-2009-0004

Apple QuickTime prior to 7.6 is affected by multiple CVEs including CVE-2009-0004, where a buffer overflow in QuickTime’s handling of MPEG-2/MP3 content can cause application termination or arbitrary code execution. The OpenVAS/Nessus entries reference Windows and Mac OS X variants of QuickTime

CentOS Security Advisory CESA-2009:0004 (openssl)

The remote host is missing updates to openssl announced in advisory CESA-2009:0004. CESA-2009:0004 63179 12 $Id: ovcesa20090004.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0004 openssl Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: mysql-scripts

The remote host is missing an update to the system as announced in the referenced advisory. VID ce109fd4-67f3-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2007-0004

The NFS client implementation in the kernel in Red Hat Enterprise Linux RHEL 3, when a filesystem is mounted with the noacl option, checks permissions for the open system call via vfspermission mode bits data rather than an NFS ACCESS call to the server, which allows local client processes to...

CVE-2006-0004

CVE-2006-0004 is a information-disclosure vulnerability in Microsoft PowerPoint 2000 (Office 2000 SP3) arising from the interaction with Internet Explorer when PowerPoint renders HTML, allowing remote attackers to access objects in the Temporary Internet Files Folder (TIFF) by name. The issue aff...

Microsoft PowerPoint may disclose information in the Temporary Internet Files Folder

Overview Microsoft PowerPoint contains an information disclosure vulnerability. As a result, sensitive information may be exposed to untrusted parties. Description Microsoft PowerPoint fails to properly restrict access to objects in the Temporary Internet Files Folder TIFF. This vulnerability is...

CVE-2005-0004

CVE-2005-0004 affects MySQL: the mysqlaccess script in MySQL 3.x, 4.0.23 and earlier, 4.1.x before 4.1.10, and 5.0.x before 5.0.3 allows local users to read or overwrite arbitrary files via a symlink attack on temporary files. Impact is local file access/ alteration. Remediation per sources: upgr...

Debian DSA-102-2 : at - daemon exploit

zen-parse found a bug in the current implementation of at which leads into a heap corruption vulnerability which in turn could potentially lead into an exploit of the daemon user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

OpenCA crypto-utils.lib libCheckSignature Function Signature Validation Weakness

The remote host seems to be running an older version of OpenCA. It is reported that OpenCA versions up to and incluing 0.9.1.6 contains a flaw that may lead an attacker to bypass signature verification of a certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2004-0004

Affects OpenCA : OpenCA 0.9.1.6 and earlier use crypto-utils.lib’s libCheckSignature, which compares only the certificate serial to the database entry. This can allow a signature to be accepted if the signer's certificate chain is trusted by OpenCA’s chain directory, enabling an attacker to spoof...