Mandriva Update for firefox MDVSA-2011:041 (firefox)

Check for the Version of firefox OpenVAS Vulnerability Test Mandriva Update for firefox MDVSA-2011:041 firefox Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Linux Security Advisory : firefox (MDVSA-2011:041)

Cross-site request forgery CSRF vulnerability in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to hijack the authentication of arbitrary users for requests that were initiated by a plugin and received a 307 redirect to a page on a...

Debian DSA-2180-1 : iceape - several vulnerabilities

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of SeaMonkey : - CVE-2010-1585 Roberto Suggi Liverani discovered that the sanitising performed by ParanoidFragmentSink was incomplete. - CVE-2011-0051 Zach Hoffmann discovered that incorrect parsing of...

[SECURITY] [DSA 2180-1] iceape security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2180-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 03, 2011 http://www.debian.org/security/faq -...

Mozilla Foundation Security Advisory 2011-05

Mozilla Foundation Security Advisory 2011-05 Title: Buffer overflow in JavaScript atom map Impact: Critical Announced: March 1, 2011 Reporter: Christian Holler Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Security researcher Christian Holler...

CVE-2011-0056

CVE-2011-0056: Buffer overflow in the JavaScript engine of Mozilla Firefox (before 3.5.17) and Firefox 3.6.x (before 3.6.14), and SeaMonkey before 2.0.12. The issue arises from an atom map handling of a large number of string values and exception timing, potentially allowing remote code execution...

CVE-2010-0056

CVE-2010-0056: Buffer overflow in Cocoa spell checking (AppKit) on Apple Mac OS X 10.5.8. The flaw allows a user-assisted remote attacker to trigger arbitrary code execution or cause a denial of service (application crash) via a crafted document. Affected component: Cocoa spell checking in AppKit...

Ubuntu USN-708-1 (hplip)

The remote host is missing an update to hplip announced via advisory USN-708-1. OpenVAS Vulnerability Test $Id: ubuntu7081.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7081.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-708-1 hplip Authors: Thomas Reinke...

CVE-2009-0056

CVE-2009-0056: CSRF in the Cisco IronPort Encryption Appliance/PostX admin interface allows an attacker to execute commands and modify appliance preferences as arbitrary users via a logout action. Affected: IronPort Encryption Appliance/PostX versions including 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2....

Gentoo Security Advisory GLSA 200606-18 (pam_mysql)

The remote host is missing updates announced in advisory GLSA 200606-18. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-0056

Stack-based buffer overflow in Foundation in Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via a "long pathname with an unexpected structure" that triggers the overflow in NSFileManager...

CVE-2008-0056

Stack-based buffer overflow in Foundation in Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via a "long pathname with an unexpected structure" that triggers the overflow in NSFileManager...

CVE-2008-0056

Apple Mac OS X 10.4.11 is affected by a stack-based buffer overflow in Foundation’s NSFileManager triggered by an unusually long pathname. The issue allows context-dependent attackers to execute arbitrary code. The vulnerability stems from a overflow in NSFileManager when handling a path with an ...

rPSA-2008-0056-1 mailman

rPath Security Advisory: 2008-0056-1 Published: 2008-02-15 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Deterministic Weakness Updated Versions: mailman=conary.rpath.com@rpl:1/2.1.9-4.2-1 rPath Issue Tracking System: https://issues.rpath.com/browse/RPL-2207...

CVE-2007-0056

CVE-2007-0056 covers multiple cross-site scripting (XSS) flaws in AShop Deluxe 4.5 and the AShop Administration Panel. The vulnerabilities allow remote attackers to inject arbitrary script/HTML through various inputs: cat in ashop/catalogue.php and ashop/basket.php; exp in ashop/catalogue.php; se...

CVE-2006-0056

Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted passwords, which lead to a doubl...

CVE-2006-0056

The CVE-2006-0056 issue affects PAM-MySQL in the 0.6.x series (before 0.6.2) and 0.7.x series (before 0.7pre3). A double-free arises in the handling of pam_get_item() results within authentication/ token alteration code, which can cause an application crash and may allow arbitrary code execution ...

CVE-2006-0056

Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted passwords, which lead to a doubl...

SMB Registry : SQL7 Patches

The remote SQL server seems to be vulnerable to the SQL abuse vulnerability described in technet article Q256052. This problem allows an attacker who has to ability to execute SQL queries on this host to gain elevated privileges. OpenVAS Vulnerability Test $Id: smbmssql7.nasl 6056 2017-05-02...

CVE-2005-0056

CVE-2005-0056 affects Internet Explorer (Windows 2000/XP/Server 2003) via a cross-domain vulnerability in Channel Definition Format (CDF) file URL validation. A malicious web page could trigger information disclosure or remote code execution by exploiting the IE cross-domain security model, poten...