Ubuntu: Security Advisory (USN-1400-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1400-4: Thunderbird regressions

USN-1400-3 fixed vulnerabilities in Thunderbird. The new Thunderbird version caused a regression in IMAP connections and mail filtering. This update fixes the problem. Original advisory details: Soroush Dalili discovered that Firefox did not adequately protect against dropping JavaScript links on...

Ubuntu: Security Advisory (USN-1401-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for xulrunner-1.9.2 USN-1401-1

Ubuntu Update for Linux kernel vulnerabilities USN-1401-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14011.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for xulrunner-1.9.2 USN-1401-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1400-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Products Multiple Vulnerabilities - Mar12 (Windows)

The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnmar12win.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Multiple Vulnerabilities - Mar12 Windows Authors: Rachana Shetty...

Mozilla Thunderbird 3.1.x < 3.1.20 Multiple Vulnerabilities

Binary data 6353.prm...

Mozilla Firefox 3.6.x < 3.6.28 Multiple Vulnerabilities

Binary data 6351.prm...

DSA-2433-1 iceweasel - several

Bulletin has no description...

Mozilla Firefox ESR 10.x < 10.0.3 Multiple Vulnerabilities

Binary data 6350.prm...

CVE-2012-0458

CVE-2012-0458 affects Mozilla Firefox and related Mozilla products where a drag-and-drop of a javascript: URL to the home button could bypass restrictions and execute arbitrary JavaScript with chrome privileges in the about:sessionrestore context. Affected products include Firefox before 3.6.28 a...

CentOS Update for gpdf CESA-2009:0458 centos4 i386

Check for the Version of gpdf OpenVAS Vulnerability Test CentOS Update for gpdf CESA-2009:0458 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for perl CESA-2010:0458 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Google Picasa Insecure Library Loading Arbitrary Code Execution Vulnerability (Windows)

The host is running Google Picasa and is prone to arbitrary code execution vulnerability. OpenVAS Vulnerability Test $Id: gbgooglepicasaarbitrarycodeexecvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ Google Picasa Insecure Library Loading Arbitrary Code Execution Vulnerability Windows Authors:...

CVE-2011-0458

CVE-2011-0458 is a local privilege escalation in Google Picasa up to version 3.7 where the vulnerability stems from an untrusted search path in the Locate on Disk feature. An attacker could place a Trojan horse executable in the current working directory to gain privileges when Picasa loads libra...

Perl Safe模块对象引用绕过安全限制漏洞

BUGTRAQ ID: 40302 CVECAN ID: CVE-2010-1168,CVE-2010-1974 Perl是一种免费且功能强大的编程语言。 Perl中所使用的Safe模块没有正确地对经过隐式bless处理的对象限制DESTROY和AUTOLOAD等方式的代码，在访问或释放这些对象时 Safe可能未加限制的执行这些方式。在Safe隔离中所执行的特制Perl脚本可以利用这个漏洞绕过预期的Safe模块限制。 Perl 5.12.1 厂商补丁： Larry Wall ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2010-0458

NetArt Media Blog System 1.5 is affected by multiple SQL injection vulnerabilities. An attacker can remotely inject SQL via the cat parameter to index.php or the note parameter to blog.php, enabling potentially unauthorized data access or modification. CVSS metrics in the primary record indicate ...

CVE-2010-0458

creationtimestamp| type| source ---|---|--- 2010-01-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11216...

CentOS Security Advisory CESA-2009:0458 (gpdf)

The remote host is missing updates to gpdf announced in advisory CESA-2009:0458. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2008-0458

CVE-2008-0458 describes a directory traversal vulnerability in SLAED CMS 2.5 Lite. The flaw exists in index.php’s newlang parameter, where a .. path component in the parameter can cause local file inclusion and arbitrary code execution. Affected component: function/sources.php (LITE version). Thi...