CentOS Update for logwatch CESA-2011:0324 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-0324

Cross-site scripting XSS vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than...

CVE-2012-0324

Cross-site scripting XSS vulnerability in Jenkins before 1.454, Jenkins LTS before 1.424.5, and Jenkins Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than...

CVE-2012-0324

CVE-2012-0324 is an XSS vulnerability in Jenkins core prior to versions 1.454, 1.424.5 (LTS), and Enterprise 1.400.x before 1.400.0.13 and 1.424.x before 1.424.5.1. The issue arises from an improper handling/escaping that allows remote attackers to inject arbitrary web script or HTML via unspecif...

logwatch security update

CentOS Errata and Security Advisory CESA-2011:0324 An updated logwatch package that fixes one security issue is now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System...

CVE-2011-0324

Affected software: Topaz Systems SigPlus Pro ActiveX Control (versions around 3.95 and possibly before 4.29). Vulnerability: multiple heap-based buffer overflows enabled by long values in (1) KeyString property, (2) SetLocalIniFilePath NewPath parameter, and (3) SetTabletPortPath NewPortPath para...

SigPlus Pro ActiveX Control < 4.29 Multiple Vulnerabilities

The SigPlus Pro ActiveX control, used for electronic signature integration with Topaz signature pads and installed on the remote Windows host, is earlier than 4.29. Such versions reportedly are affected by the following vulnerabilities : - The 'SetLogFilePath' method allows creation of a log file...

CVE-2010-0324

CVE-2010-0324 concerns the TYPO3 Customer Reference List (ref_list) extension, version 1.0.1 and earlier. The vulnerability is a SQL injection flaw in this extension, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. The available documents identify the affected...

CVE-2009-0324

Multiple SQL injection vulnerabilities in BibCiter 1.4 allow remote attackers to execute arbitrary SQL commands via the 1 idp parameter to reports/projects.php, the 2 idc parameter to reports/contacts.php, and the 3 idu parameter to reports/users.php...

CVE-2009-0324

CVE-2009-0324 describes multiple SQL injection vulnerabilities in BibCiter 1.4. The affected components are the PHP scripts reports/projects.php (parameter idp), reports/contacts.php (parameter idc), and reports/users.php (parameter idu). The root cause is unsanitized input leading to arbitrary S...

CVE-2008-0324

CVE-2008-0324 affects the Cisco VPN Client for Windows, specifically the IPSec Driver CVPNDRVA.sys (v5.0.02.0090). The vulnerability allows a local attacker to crash the system (DoS) by issuing IOCTL 0x80002038 with a small size value, triggering memory corruption in the driver. The issue is desc...

CVE-2007-0324

CVE-2007-0324 involves multiple buffer-overflow vulnerabilities in the LizardTech DjVu Browser Plug-in prior to version 6.1.1, allowing remote attackers to execute arbitrary code. The issue affects the DjVu Browser Plug-in (ActiveX control for IE and plug-in for other browsers) and is triggered w...

WebspotBlogging login.php远程SQL注入漏洞

BUGTRAQ ID: 16319 CVECAN ID: CVE-2006-0324 WebspotBlogging是一款PHP编写的Blog程序。 WebspotBlogging对用户提交给的参数缺少正确充分的过滤，远程攻击者可以利用此漏洞非授权操作数据库绕过认证。 WebspotBlogging的login.php脚本对用户提交username参数数据缺少充分过滤，远程攻击者可以通过在输入数据中插入特定的SQL命令来非授权获取对数据库的访问。 WebspotBlogging WebspotBlogging 3.0 WebspotBlogging ---------------...

CVE-2006-0324

WebspotBlogging 3.0 is affected by a SQL injection in the login.php username parameter that allows remote attackers to bypass authentication and execute arbitrary SQL commands due to insufficient input filtering. Impact is authentication bypass and potential database access. The issue is tied to ...

CVE-2005-0324

CVE-2005-0324 affects Infinite Mobile Delivery Webmail 2.6. The issue allows remote attackers to gain sensitive information by sending an HTTP request containing invalid characters for a Windows folder name, causing an error message that reveals the path. This is a path disclosure vulnerability w...

CVE-2005-0324

Infinite Mobile Delivery Webmail 2.6 allows remote attackers to gain sensitive information via an HTTP request that contains invalid characters for a Windows foldername, which reveals the path in an error message...

CVE-2004-0324

Technical details are not publicly provided in the provided documents. Available entries reiterate that CVE-2004-0324 involves arbitrary code execution via shell metacharacters in an email header; no confirmed affected products or versions are listed here. Monitor for updates.

CVE-2004-0324

Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as ", , |, ;, or $...

CVE-2004-0324

Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as ", , |, ;, or $...

CVE-2003-0324

Buffer overflows in EPIC IRC Client EPIC4 1.0.1 allows remote malicious IRC servers to cause a denial of service crash and possibly execute arbitrary code via long replies that are not properly handled by the 1 userhostcmdreturned function, or 2 Statusbar capability...