CVE-2013-0709

CVE-2013-0709 concerns a cross-site scripting (XSS) vulnerability in the dopvSTAR* 0091 product. The issue arises from how the HTTP Referer header is handled during display of the access log, allowing remote attackers to inject arbitrary web script or HTML. The connected JVN entries confirm the a...

IBM DB2 9.7 < Fix Pack 6 Multiple Vulnerabilities

According to its version, the installation of DB2 9.7 running on the remote host is prior to Fix Pack 6. It is, therefore, affected by multiple vulnerabilities : - A local user can exploit a vulnerability in the bundled IBM Tivoli Monitoring Agent ITMA to escalate their privileges. CVE-2011-4061 ...

IBM DB2 XML Feature DoS and CREATE VARIABLE Security Bypass Vulnerabilities

The host is running IBM DB2 and is prone to denial of service and security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2xmldosncreatevarsecbypassvuln.nasl 5999 2017-04-21 09:02:32Z teissa $ IBM DB2 XML Feature DoS and CREATE VARIABLE Security Bypass Vulnerabilities Authors:...

CVE-2012-0709

IBM DB2 for Linux, UNIX and Windows is affected by CVE-2012-0709. A remote authenticated user can bypass viewing restrictions on table data by exploiting CREATEIN privileges to execute crafted CREATE VARIABLE statements. Affected: DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4. Root cau...

Fedora Update for xkeyboard-config FEDORA-2012-0709

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu: Security Advisory (USN-1083-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-0709

The brmdbipget function in net/bridge/brmulticast.c in the Linux kernel before 2.6.35-rc5 allows remote attackers to cause a denial of service NULL pointer dereference and system crash via an IGMP packet, related to lack of a multicast table...

CVE-2011-0709

CVE-2011-0709 affects the Linux kernel’s networking bridge code: the br_mdb_ip_get function in net/bridge/br_multicast.c is vulnerable when there is no multicast table, allowing remote attackers to trigger a NULL pointer dereference and crash the system via IGMP traffic. Affected: Linux kernel ve...

CVE-2010-0709

Limny firmware/web app is affected by CSRF flaws in Limny

MySQL CREATE FUNCTION libc Arbitrary Code Execution (CVE-2005-0709)

MySQL is an open-source implementation of a database system supporting the SQL Structured Query Language database query language. MySQL implements a CREATE FUNCTION command that enables a user to create a user-defined function UDF. There exists a vulnerability in the CREATE FUNCTION command of...

SLES9: Security update for MySQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mysql mysql-Max For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015996 within...

SLES9: Security update for MySQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mysql mysql-Max For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015996 within...

CVE-2009-0709

The CVE-2009-0709 entry describes a SQL injection vulnerability in PHPFootball 1.6, specifically in login.php where the user parameter can be used by remote attackers to execute arbitrary SQL commands. Affected component: PHPFootball 1.6 (login.php). Underlying cause: unsanitized user input leadi...

CVE-2009-0709

creationtimestamp| type| source ---|---|--- 2009-01-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7636...

Gentoo Security Advisory GLSA 200603-16 (metamail)

The remote host is missing updates announced in advisory GLSA 200603-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200603-16 (metamail)

The remote host is missing updates announced in advisory GLSA 200603-16. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: mysql-server

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: mysql-server

The remote host is missing an update to the system as announced in the referenced advisory. VID 619ef337-949a-11d9-b813-00d05964249f OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Input validation

Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table SSDT functions, which allows local users to cause a denial of service system crash via 1 a crafted OBJECTATTRIBUTES structure in a call to the NtDeleteFile function, which leads ...

CVE-2008-0709

Multiple unspecified vulnerabilities in HP Select Identity 4.00, 4.01, 4.11, 4.12, 4.13, and 4.20 allow remote authenticated users to access other user accounts via unknown vectors, a different issue than CVE-2008-0214...