150 matches found
openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-6068)
php 5.1.9 fixes among other things some security issues : - Missing bounds checks of an error in the imageRotate function of the gd extension potentially allowed attackers to read portions of memory CVE-2008-5498. - the mbstring.funcoverload in .htaccess was applied to other virtual hosts on th...
Mandrake Security Advisory MDVSA-2009:066 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:066. OpenVAS Vulnerability Test $Id: mdksa2009066.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:066 php Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Mandrake Security Advisory MDVSA-2009:066 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:066. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...
Ubuntu USN-726-1 (curl)
The remote host is missing an update to curl announced via advisory USN-726-1. OpenVAS Vulnerability Test $Id: ubuntu7261.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7261.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-726-1 curl Authors: Thomas Reinke...
CVE-2009-0754
CVE-2009-0754 is a PHP mbstring.config issue: when mbstring.func_overload is set in .htaccess, the value applies to other virtual hosts on the same server, allowing local users to modify behavior of other sites hosted on the same server (affecting PHP 4.4.4, 5.1.6, and related versions). Connecte...
CVE-2009-0754
creationtimestamp| type| source ---|---|--- 2009-01-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32769...
Gentoo Security Advisory GLSA 200504-23 (Kommander)
The remote host is missing updates announced in advisory GLSA 200504-23. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200408-27 (Gaim)
The remote host is missing updates announced in advisory GLSA 200408-27. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD Ports: kdewebdev
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: kdewebdev
The remote host is missing an update to the system as announced in the referenced advisory. VID 91f1adc7-b3e9-11d9-a788-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: gaim, ja-gaim, ko-gaim, ru-gaim
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: gaim, ja-gaim, ko-gaim, ru-gaim
The remote host is missing an update to the system as announced in the referenced advisory. VID e16293f0-26b7-11d9-9289-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Sql injection
Multiple SQL injection vulnerabilities in the Rapid Recipe comrapidrecipe 1.6.5 and earlier component for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 userid or 2 categoryid parameter. NOTE: this might overlap CVE-2008-0754...
CVE-2008-0754
CVE-2008-0754 describes multiple SQL injection vulnerabilities in the Rapid Recipe (com_rapidrecipe) 1.6.5 component for Joomla!. The flaws allow remote attackers to execute arbitrary SQL commands via (1) user_id in a showuser action or (2) category_id in a viewcategorysrecipes action. Connected ...
CVE-2007-0754
Apple QuickTime before 7.1.3 is affected by a heap-based buffer overflow in the STSD atom size parsing, allowing user-assisted remote code execution via a crafted QuickTime movie. The issue is tied to the STSD parsing path in QuickTime; vendor patch available in QuickTime 7.1.3. If not upgrading,...
CVE-2006-0754
CVE-2006-0754 affects dotProject 2.0.1 and earlier. The issue allows remote attackers to obtain sensitive information via direct requests with an invalid baseDir to certain PHP scripts in the db directory, revealing the path in an error message. Related connected sources also describe multiple sc...
dotProject Multiple Scripts Remote File Inclusion
The remote host is running dotProject, a web-based, open source, project management application written in PHP. The installed version of dotProject fails to sanitize input to various parameters and scripts before using it to include PHP code. Provided PHP's 'registerglobals' setting is enabled, a...
CVE-2005-0754
CVE-2005-0754 affects KDE’s Kommander: KDE 3.2–3.4.0 allows remote attackers to cause arbitrary code execution by Kommander executing data files without user confirmation. The root cause is untrusted data/file handling by Kommander, enabling remote code execution if a user opens a malicious file....
