107 matches found
USN-2348-1: APT vulnerabilities
It was discovered that APT did not re-verify downloaded files when the If-Modified-Since wasn't met. CVE-2014-0487 It was discovered that APT did not invalidate repository data when it switched from an unauthenticated to an authenticated state. CVE-2014-0488 It was discovered that the APT...
CVE-2014-0489
APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote attackers to execute arbitrary code via a crafted package...
Oracle Linux 5 : gnutls (ELSA-2008-0489)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0489 advisory. 1.4.1-3 - fix three security issues in gnutls handshake - GNUTLS-SA-2008-1 447461, 447462, 447463 Tenable has extracted the preceding description block...
CVE-2013-0489
Cross-site request forgery CSRF vulnerability in webadmin.nsf aka the Web Administrator client in IBM Domino 8.5.x allows remote authenticated users to hijack the authentication of administrators...
CVE-2013-0489
CVE-2013-0489 is a CSRF vulnerability in IBM Domino 8.5.x Web Administrator client (webadmin.nsf) that allows remote authenticated users to hijack administrator authentication. Connected sources indicate an exploit path via CSRF leading to potential OS command execution through the Quick Console ...
Slackware Advisory SSA:2009-040-01 wicd
The remote host is missing an update as announced via advisory SSA:2009-040-01. OpenVAS Vulnerability Test $Id: esoftslkssa200904001.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
Slackware: Security Advisory (SSA:2009-040-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for mysql FEDORA-2012-0987
Check for the Version of mysql OpenVAS Vulnerability Test Fedora Update for mysql FEDORA-2012-0987 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
CVE-2012-0489
CVE-2012-0489 affects the MySQL Server component in Oracle MySQL 5.5.x. It is described as an unspecified vulnerability that allows remote authenticated users to affect availability via unknown vectors, and is noted as a different vulnerability from CVE-2012-0117 and others. The provided connecte...
CVE-2011-0489
CVE-2011-0489 affects Objectivity/DB 10.0 server components, where authentication is not required for administrative commands. This allows remote attackers to modify data, retrieve sensitive information, or cause a denial of service by sending commands over TCP to the Lock Server or the Advanced ...
CVE-2011-0489
creationtimestamp| type| source ---|---|--- 2011-01-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15988...
Lotus Domino Web Administrator - Cross Site Command Execution
Application: Lotus Domino Versions Affected: Lotus Domino Web Administrator 6.5 and 8.5.1 Vendor URL: IBM Bugs: CSRF, Command execution Exploits: YES Reported: 22.04.2010 Vendor response: 22.04.2010 Date of Public Advisory: 24.03.2013 Reference: IBM CVE number: CVE-2013-0489 Author: Alexander...
Internet Explorer HTML Parsing Race Condition Memory Corruption (MS10-018; CVE-2010-0489)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to the way Internet Explorer accesses an object that may have been corrupted due to a race condition. To trigger this issue,...
CVE-2010-0489
Race condition in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka "Race Condition Memory Corruption Vulnerability."...
CVE-2010-0489
The CVE-2010-0489 entry corresponds to a Race Condition Memory Corruption vulnerability in Microsoft Internet Explorer (affecting IE 5.01 SP4, 6, 6 SP1, and 7). The connected sources confirm a remote code execution scenario triggered by specially crafted HTML/Web content, with exploitation possib...
MS10-018: Cumulative Security Update for Internet Explorer (980182)
The remote host is missing IE Security Update 980182. The remote version of IE is affected by several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid45378; scriptversion"1.29";...
Gentoo Security Advisory GLSA 200904-12 (wicd)
The remote host is missing updates announced in advisory GLSA 200904-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2009-0489
CVE-2009-0489 – Wicd information disclosure . The DBus configuration file for Wicd (Linux network manager) allows arbitrary local users to own the org.wicd.daemon object, enabling them to receive messages intended for the Wicd daemon and potentially access credentials. Affected versions are Wicd ...
wicd
New wicd packages are available for Slackware 12.2 and -current to fix a security issue with the D-Bus configuration file that could allow local information disclosure such as network credentials. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database:...