115 matches found
CVE-2010-0711
The CVE-2010-0711 entry affects ASPCode CMS versions 1.5.8 and 2.0.0 Build 103 (and possibly others). The issue is a Cross-site Request Forgery (CSRF) in default.asp that enables remote attackers to hijack an administrator’s session for actions triggered via the ma2 parameter, specifically (1) de...
CVE-2010-0711
Cross-site request forgery CSRF vulnerability in default.asp in ASPCode CMS 1.5.8, 2.0.0 Build 103, and possibly other versions, allows remote attackers to hijack the authentication of an administrator for requests that 1 delete users via the delete action in the ma2 parameter or 2 create...
SLES9: Security update for MySQL
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mysql mysql-Max For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015996 within...
SLES9: Security update for MySQL
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mysql mysql-Max For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015996 within...
PHPFootball <= 1.6 Information Disclosure Vulnerability - Active Check
PHPFootball is prone to an information disclosure vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
PHPFootball 'filter.php' Password Hash Information Disclosure Vulnerability
PHPFootball is prone to an information-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain sensitive information that may lead to further attacks. PHPFootball 1.6 is vulnerable; other versions may also be affecte...
CVE-2009-0711
filter.php in PHPFootball 1.6 and earlier allows remote attackers to retrieve password hashes via a request with an Accounts value for the dbtable parameter, in conjunction with a Password value for the dbfield parameter. NOTE: this has been reported as a SQL injection vulnerability by some...
CVE-2009-0711
creationtimestamp| type| source ---|---|--- 2009-01-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7636...
FreeBSD Ports: mysql-server
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: mysql-server
The remote host is missing an update to the system as announced in the referenced advisory. VID 619ef337-949a-11d9-b813-00d05964249f OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
[security bulletin] HPSBMA02327 SSRT071455 rev.1 - HP Integrity Servers iLO-2 Management Processors (iLO-2 MP), Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01422487 Version: 1 HPSBMA02327 SSRT071455 rev.1 - HP Integrity Servers iLO-2 Management Processors iLO-2 MP, Denial of Service DoS NOTICE: The information in this Security Bulletin should be act...
CVE-2008-0711
HP iLO-2 Management Processors (iLO-2 MP) embedded in HP Integrity Servers rx2660, rx3600, rx6600 and the Integrity Blade Server bl860c are affected by CVE-2008-0711, which enables remote DoS via unspecified vectors. The HP Security Bulletin HPSBMA02327 rev.1 confirms the vulnerable firmware fami...
QuickTime < 7.1.5 Multiple Vulnerabilities (Windows)
According to its version, the installation of QuickTime on the remote Windows host is affected by multiple buffer overflows. An attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the remote host by sending a specially crafted file to a...
CVE-2007-0711
Apple QuickTime on Windows is affected by an integer overflow when processing 3GP video files in versions before 7.1.5, enabling remote user-assisted attackers to crash the application or possibly execute arbitrary code via a crafted file. The issue is associated with QuickTime 3GP handling and h...
CentOS 3 : mysql-server (CESA-2005:348)
Updated mysql-server packages that fix several vulnerabilities are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. This update fixes several security risks in the MySQL...
Fedora Core 2 : mysql-3.23.58-16.FC2.1 (2005-305)
Sat Apr 2 2005 Tom Lane 3.23.58-16.FC2.1 - Repair uninitialized variable in security2 patch. - Enable testing on 64-bit arches; continue to exclude s390x which still has issues. - Fri Mar 18 2005 Tom Lane 3.23.58-15.FC2.1 - Backpatch repair for CVE-2005-0709, CVE-2005-0710, CVE-2005-0711...
[SECURITY] [DSA 707-1] New mysql packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 707-1 [email protected] http://www.debian.org/security/ Martin Schulze April 13th, 2005 http://www.debian.org/security/faq -...
RHEL 3 : mysql-server (RHSA-2005:348)
Updated mysql-server packages that fix several vulnerabilities are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. This update fixes several security risks in the MySQL...
SUSE-SA:2005:019: mysql
The remote host is missing the patch for the advisory SUSE-SA:2005:019 mysql. MySQL is an Open Source database server, commonly used together with web services provided by PHP scripts or similar. This security update fixes a broken mysqlhotcopy script as well as several security related bugs: -...
Mandrake Linux Security Advisory : MySQL (MDKSA-2005:060)
A number of vulnerabilities were discovered by Stefano Di Paola in the MySQL server : If an authenticated user had INSERT privileges on the 'mysql' database, the CREATE FUNCTION command allowed that user to use libc functions to execute arbitrary code with the privileges of the user running the...