Mandriva Update for mplayer MDVSA-2011:089 (mplayer)

Check for the Version of mplayer OpenVAS Vulnerability Test Mandriva Update for mplayer MDVSA-2011:089 mplayer Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for ffmpeg MDVSA-2011:061 (ffmpeg)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[USN-1104-1] FFmpeg vulnerabilities

=========================================================== Ubuntu Security Notice USN-1104-1 April 04, 2011 ffmpeg vulnerabilities CVE-2010-3429, CVE-2010-3908, CVE-2010-4704, CVE-2011-0480, CVE-2011-0722, CVE-2011-0723 =========================================================== A security issue...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : ffmpeg vulnerabilities (USN-1104-1)

Cesar Bernardini and Felipe Andres Manzano discovered that FFmpeg incorrectly handled certain malformed flic files. If a user were tricked into opening a crafted flic file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of...

CVE-2003-0722

creationtimestamp| type| source ---|---|--- 2010-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16324 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/sunrpc/sadmindexec.rb 2025-02-06 03:13:37+00:00| seen|...

CVE-2010-0722

The CVE-2010-0722 entry affects Php Auktion Pro: a SQL injection in news.php where the id parameter allows remote execution of arbitrary SQL. The issue is documented in NVD with a CVSS v2 base score of 7.5 (HIGH, NETWORK attack vector, LOW complexity, no authentication). The vulnerability impact ...

Solaris sadmind Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Solaris...

CVE-2009-0722

CVE-2009-0722 affects Potato News 1.0.0. A directory traversal vulnerability in admin.php allows remote attackers to include and execute arbitrary files via .. in the user cookie parameter. This results in partial impact to confidentiality, integrity, and availability (CVSS 2.0 base score 7.5). N...

Fedora Update for python-paramiko FEDORA-2008-0722

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Solaris sadmind Command Execution

This exploit targets a weakness in the default security settings of the sadmind RPC application. This server is installed and enabled by default on most versions of the Solaris operating system. Vulnerable systems include solaris 2.7, 8, and 9 This module requires Metasploit:...

CVE-2008-0722

The CVE-2008-0722 entry describes a Cross-site Scripting (XSS) vulnerability in Pagetool 1.0.7, specifically in index.php where the search_term parameter of the pagetool_search action can be exploited to inject arbitrary web script or HTML. This is caused by insufficient validation/sanitization o...

CVE-2007-0722

CVE-2007-0722 describes an integer overflow in the AppleSingleEncoding disk image handler on Apple Mac OS X, affecting 10.3.9 and 10.4–10.4.8. A remote, user-assisted attacker could trigger the overflow by a crafted disk image to execute arbitrary code. The connected documents indicate the vulner...

EV0073.txt

New eVuln Advisory: Magic Downloads Unauthorized Data Modification http://evuln.com/vulns/73/summary.html --------------------Summary---------------- eVuln ID: EV0073 CVE: CVE-2006-0722 Vendor: Reamday Enterprises Vendor's Web Site: http://reamdaysoft.com Software: Magic Downloads Sowtware's Web...

CVE-2006-0722

CVE-2006-0722 affects Reamday Enterprises’ Magic Downloads 1.1.3. When register_globals is ON, the vulnerable settings.php allows remote attackers to modify program behavior via uninitialized variables (action, passwd, admin_password, new_passwd, confirm_passwd), potentially bypassing authenticat...

sadmind AUTH_SYS authentication vulnerability

Added: 01/09/2006 CVE: CVE-2003-0722 BID: 8615 OSVDB: 4585 Background sadmind is a service which coordinates distributed system administration operations remotely. The Sun Solstice AdminSuite runs sadmind with the AUTHSYS authentication method by default. Problem The sadmind running with the...

CVE-2005-0722

CVE-2005-0722 affects eXPerience2. A remote attacker can trigger a PHP error by requesting modules.php with no parameters, causing the web root full path to be disclosed in the error message. This is a path disclosure vulnerability rather than code execution. The available documents do not specif...

CVE-2005-0722

eXPerience2 allows remote attackers to obtain the full path for the web root via a direct request to modules.php without any parameters, which leaks the path in a PHP error message...

CVE-2004-0722

Integer overflow in the SOAPParameter object constructor in 1 Netscape version 7.0 and 7.1 and 2 Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code...

CVE-2004-0722

CVE-2004-0722 relates to an Integer overflow in the SOAPParameter constructor used by Netscape 7.0/7.1 and Mozilla 1.6 (and possibly earlier). The underlying issue can allow remote code execution through a crafted SOAP page or message, as described by multiple advisories. Public details in connec...