KLA10462 Multiple vulnerabilities in Adobe Flash Player

Multiple critical vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code or bypass security restrictions. Below is a complete list of vulnerabilities 1. An unspecified vulnerability can be exploited locally via type...

CVE-2014-0337

Huawei Echo Life HG8247 optical routers are affected by a stored cross-site scripting (XSS) vulnerability in the web interface. The issue occurs when a crafted username is submitted during a Telnet login attempt, creating malicious entries in the "failed log-in attempts over telnet" log view that...

CVE-2013-0337

CVE-2013-0337 affects nginx (likely 1.3.13 and earlier) where the default config leaves (1) access.log and (2) error.log world‑readable. This permits local users to read logs and disclose sensitive information. The root cause is insecure log file permissions in the default nginx configuration. Re...

Fedora 17 : nginx-1.0.15-9.fc17 (2013-2955)

Make sure nginx directories are not world readable Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for nginx FEDORA-2013-2955

Check for the Version of nginx OpenVAS Vulnerability Test Fedora Update for nginx FEDORA-2013-2955 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for nginx FEDORA-2013-2955

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Postfix IPv6 Relaying Security Issue (CVE-2005-0337)

There is a vulnerability in the way Postfix handles the relaying of e-mail messages A successful attack allows an attacker to use the target Postfix as an open relay to MX hosts with IPv6addresses...

CVE-2012-0337

CVE-2012-0337 affects Cisco Unified MeetingPlace Web Conferencing (7.1) where the web component is vulnerable to a SQL injection via crafted input. The root cause is insufficient validation of user-supplied input to the web interface (notably an HTTP POST path per Cisco advisory), enabling an att...

Symantec Mail Security Autonomy Verity Keyview Filter Vulnerabilities (SYM11-013)

The file attachment filter component included with the instance of Symantec Mail Security installed on the remote Windows host is reportedly affected by multiple buffer overflow vulnerabilities that can be triggered when handling attachments of various types. By sending an email with a specially...

Secunia Research: Autonomy Keyview Ichitaro QLST Integer Overflow Vulnerability

====================================================================== Secunia Research 07/10/2011 - Autonomy Keyview Ichitaro QLST Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Multi-Vendor Autonomy Verity Keyview Filter Multiple Issues

SUMMARY Multiple sources have identified several security issues in Autonomys Verity Keyview Content Filter libraries. Symantec has updated the Keyview modules being shipped with Symantec products to address these issues. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|---...

CentOS Update for vsftpd CESA-2011:0337 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 5 : java-1.6.0-sun (RHSA-2010:0337)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0337 advisory. The Sun 1.6.0 Java release includes the Sun Java 6 Runtime Environment and the Sun Java 6 Software Development Kit. This update fixes severa...

CVE-2010-0337

The CVE-2010-0337 entry concerns a SQL injection in the TYPO3 extension tt_news Mail alert (dl3_tt_news_alerts) versions up to and including 0.2.0. The vulnerability allows remote attackers to execute arbitrary SQL commands via unspecified vectors. It is noted in the sources as a high-severity is...

CentOS Security Advisory CESA-2009:0337 (php)

The remote host is missing updates to php announced in advisory CESA-2009:0337. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CentOS Security Advisory CESA-2009:0337 (php)

The remote host is missing updates to php announced in advisory CESA-2009:0337. CESA-2009:0337 63827 8 $Id: ovcesa20090337.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0337 php Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-0337

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-0337

CVE-2009-0337 affects the BlogIt! application by Katy Whitton, where the vulnerable entry point is index.asp. The issue arises from SQL injection via the (1) month and (2) year parameters, allowing remote attackers to execute arbitrary SQL commands. This is a network-accessible vulnerability with...

CVE-2009-0337

creationtimestamp| type| source ---|---|--- 2009-01-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7806...

CVE-2008-0337

MiniWeb HTTP Server 0.8.19 is affected by a heap-based buffer overflow in the _mwProcessReadSocket function of http.c. An attacker can trigger this remotely by sending a long URI, potentially enabling arbitrary code execution. The root cause is an overflow in the socket-read handling. Affected ve...