145 matches found
RedHat Update for firefox RHSA-2012:0079-01
Check for the Version of firefox OpenVAS Vulnerability Test RedHat Update for firefox RHSA-2012:0079-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Mozilla Thunderbird 3.1.x < 3.1.18 Multiple Vulnerabilities
The installed version of Thunderbird 3.1.x is earlier than 3.1.18 and is, therefore, potentially affected by the following vulnerabilities: - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - The IPv6 literal syntax in web addresses is not being properly...
Firefox 3.6 < 3.6.26 Multiple Vulnerabilities (Mac OS X)
The installed version of Firefox 3.6 is earlier than 3.6.26. Such versions are potentially affected by multiple vulnerabilities : - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - The IPv6 literal syntax in web addresses is not being properly enforced...
RHEL 6 : thunderbird (RHSA-2012:0080)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:0080 advisory. - Mozilla: child nodes from nsDOMAttribute still accessible after removal of nodes MFSA 2012-04 CVE-2011-3659 - Mozilla: Same-origin bypass...
CentOS Update for firefox CESA-2009:0449 centos4 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for firefox CESA-2009:0449 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Ruby on Rails安全限制绕过和SQL注入漏洞
BUGTRAQ ID: 46292 CVE ID: CVE-2011-0448,CVE-2011-0449 Ruby on Rails简称RoR 或Rails，是一个使用Ruby语言写的开源Web应用框架，它是严格按照MVC结构开发的。 Ruby on Rails在实现上存在安全限制绕过和SQL注入漏洞，攻击者可利用安全限制绕过漏洞绕过某些安全限制和执行未授权操作，利用SQL注入漏洞修改SQL请求，完全控制受影响软件，检索信息或修改数据。 Ruby on Rails Ruby on Rails 3.x 厂商补丁： Ruby on Rails -------------...
Fedora 15 : rubygem-actionmailer-3.0.5-1.fc15 / rubygem-actionpack-3.0.5-1.fc15 / etc (2011-4358)
Update to the Rails 3.0.5 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...
CVE-2011-0449
actionpack/lib/actionview/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass intended access restrictions via an action...
CVE-2011-0449
actionpack/lib/actionview/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass intended access restrictions via an action...
CVE-2011-0449
The CVE-2011-0449 vulnerability affects Ruby on Rails 3.0.x (before 3.0.4). It arises in actionpack’s template resolver logic on case-insensitive filesystems, where filters for the list of available templates are not properly enforced, allowing an attacker to bypass access restrictions by using a...
CVE-2007-0449
creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16400 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/lgserver.rb 2025-02-06 03:13:38+00:00| seen|...
CA BrightStor ARCserve for Laptops & Desktops LGServer - Remote Buffer Overflow (Metasploit) (1)
$Id: lgserver.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
CVE-2010-0449
CVE-2010-0449 is an XSS vulnerability in HP SOA Registry Foundation 6.63 and 6.64. The issue allows remote attackers to inject arbitrary script/HTML via unknown vectors, potentially affecting systems running HP SOA Registry Foundation on supported platforms. The related RedHat/HP security documen...
[security bulletin] HPSBMA02490 SSRT090222 rev.1 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting (XSS), Privilege Escalation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02037890 Version: 1 HPSBMA02490 SSRT090222 rev.1 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting XSS, Privilege Escalation NOTICE: The information in this...
CentOS Security Advisory CESA-2009:0449 (firefox)
The remote host is missing updates to firefox announced in advisory CESA-2009:0449. CESA-2009:0449 63945 4 $Id: ovcesa20090449.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0449 firefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CVE-2009-0449
Buffer overflow in klim5.sys in Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008 allows local users to gain privileges via an IOCTL 0x80052110 call...
CVE-2009-0449
CVE-2009-0449 corresponds to a buffer overflow in klim5.sys within Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008, enabling local privilege escalation via an IOCTL 0x80052110 call. The OpenVAS/NVD entries describe the affected driver and the local-exploit condition; CVSS v2 base sc...
CVE-2009-0449
creationtimestamp| type| source ---|---|--- 2009-02-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32771...
CVE-2008-0449
SQL injection vulnerability in paypalresult.asp in VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...