RedHat Security Advisory RHSA-2009:0332

The remote host is missing updates announced in advisory RHSA-2009:0332. The flash-plugin package contains a Firefox-compatible Adobe Flash Player Web browser plug-in. Multiple input validation flaws were found in the way Flash Player displayed certain SWF Shockwave Flash content. An attacker cou...

SUSE: Security Advisory for flash-player (SUSE-SA:2009:011)

The remote host is missing updates announced in advisory SUSE-SA:2009:011. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

RedHat Security Advisory RHSA-2009:0332

The remote host is missing updates announced in advisory RHSA-2009:0332. The flash-plugin package contains a Firefox-compatible Adobe Flash Player Web browser plug-in. Multiple input validation flaws were found in the way Flash Player displayed certain SWF Shockwave Flash content. An attacker cou...

openSUSE 10 Security Update : flash-player (flash-player-6022)

Specially crafted swf files could cause a buffer overflow in flash-player. Attackers could potentially exploit that to execute code on the victim's machine CVE-2009-0519, CVE-2009-0520, CVE-2009-0114, CVE-2009-0521. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

CVE-2009-0521

Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allows local users to obtain sensitive information or gain privileges via a crafted library in a directory contained in the RPATH...

CVE-2009-0521

CVE-2009-0521 corresponds to an untrusted search path vulnerability in Adobe Flash Player on Linux via a crafted library in a directory on the RPATH. The issue, linked to the same RHSA-2009:0332 advisory, affects Flash Player/flash-plugin for Linux and can enable a local attacker to execute arbit...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Firefox-compatible Adobe...

Gentoo Security Advisory GLSA 200405-16 (SquirrelMail)

The remote host is missing updates announced in advisory GLSA 200405-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200405-16 (SquirrelMail)

The remote host is missing updates announced in advisory GLSA 200405-16. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Directory traversal

Multiple directory traversal vulnerabilities in Bubbling Library 1.32 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 uri parameter to a yui-menu.tpl.php, b simple.tpl.php, and c advanced.tpl.php in dispatcher/framework/; and the 2 page parameter to d...

CVE-2008-0545

CVE-2008-0545 describes multiple directory traversal vulnerabilities in Bubbling Library 1.32. The issue allows remote attackers to include and execute arbitrary local files via a .. in the uri parameter passed to dispatcher/framework/ templates (yui-menu.tpl.php, simple.tpl.php, advanced.tpl.php...

CVE-2008-0521

CVE-2008-0521 concerns directory traversal in Bubbling Library 1.32. remote attackers can read arbitrary files via a .. in the uri parameter to dispatcher.php under (1) examples/dispatcher/framework/, (2) examples/dispatcher/, (3) examples/wizard/, (4) PHP/, different from CVE-2008-0545. The conn...

CVE-2006-0521

CVE-2006-0521 is a Cross-site scripting (XSS) vulnerability in BrowserCRM’s results.php where a manipulated query parameter can inject arbitrary script/HTML (demonstrated with an IMG SRC tag). Affects BrowserCRM; CVSS v2 base score 4.3 (MEDIUM). No explicit exploit details or remediation are prov...

CVE-2005-0521

SendLink 1.5 stores sensitive information, possibly including passwords, in plaintext in the data.eat file, which allows local users to gain privileges...

CVE-2005-0521

CVE-2005-0521 affects SendLink 1.5. The issue arises because the product stores sensitive information—possibly passwords—in plaintext within the data.eat file, enabling local users to gain privileges. The available documentation does not disclose exploit vectors, in-the-wild exploitation, or conc...

Fedora Core 1 : squirrelmail-1.4.3-0.f1.1 (2004-159)

A SQL injection flaw was found in SquirrelMail version 1.4.2 and earlier. If SquirrelMail is configured to store user addressbooks in the database, a remote attacker could use this flaw to execute arbitrary SQL statements. The Common Vulnerabilities and Exposures project has assigned the name...

CVE-2004-0521

CVE-2004-0521 affects SquirrelMail prior to version 1.4.3 RC1 through an SQL injection in abook_database.php. Root cause: improper input handling allows remote attackers to execute arbitrary SQL statements. Impact (per sources): confidentiality, integrity, and availability may be fully compromise...

CVE-2003-0521

Cross-site scripting XSS vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator privileges via script in a URL that is logged but not properly quoted when displayed via the 1 Error Log or 2 Latest Visitors screens...

CVE-2003-0521

CVE-2003-0521 is a documented XSS vulnerability in cPanel 6.4.2 where a URL containing script is logged and displayed in the Error Log or Latest Visitors screens, enabling remote attackers to inject arbitrary HTML and potentially gain privileges. The CVSS vector (AV:N/AC:M/Au:N/C:P/I:P/A:P) yield...

CVE-2002-0521

Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privileges as other ASP-Nuke users via script in 1 the name parameter in downloads.asp, 2 the message parameter in Post.asp, or 3 a web site URL in profile.asp...