Fedora Update for bugzilla FEDORA-2013-2866

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for bugzilla FEDORA-2013-2845

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Bugzilla Information Disclosure and Cross-Site Scripting Vulnerabilities

Bugzilla is prone to information disclosure and cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2013-0785

Cross-site scripting XSS vulnerability in showbug.cgi in Bugzilla before 3.6.13, 3.7.x and 4.0.x before 4.0.10, 4.1.x and 4.2.x before 4.2.5, and 4.3.x and 4.4.x before 4.4rc2 allows remote attackers to inject arbitrary web script or HTML via the id parameter in conjunction with an invalid value ...

CVE-2013-0785

CVE-2013-0785 : A cross-site scripting (XSS) vulnerability exists in Bugzilla’s show_bug.cgi whereby an attacker can inject arbitrary script/HTML via the id parameter when used with an invalid format parameter. Affected Bugzilla branches include 3.6.x, 3.7.x, 4.0.x before 4.0.10, 4.1.x, 4.2.x bef...

TeamSHATTER Security Advisory: XSS in locale parameter on IASTOP_CS_FARM_PAGE.html

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory April 21, 2011 Risk Level: High Affected versions: Oracle Enterprise Manager 10g Release 1 and Release 2 Remote exploitable: Yes Credits: This vulnerability was discovered and researched by Esteban Martinez Fayo of...

CVE-2011-0785

Unspecified vulnerability in the Oracle Help component in Oracle Database Server 11.1.0.7, 11.2.0.1, 11.2.0.2, 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, and 10.1.0.5; and Oracle Fusion Middleware 11.1.1.2.0, 11.1.1.3.0, and 11.1.1.4.0 allows remote attackers to affect integrity via unknown vectors...

CVE-2011-0785

Unspecified vulnerability in the Oracle Help component in Oracle Database Server 11.1.0.7, 11.2.0.1, 11.2.0.2, 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, and 10.1.0.5; and Oracle Fusion Middleware 11.1.1.2.0, 11.1.1.3.0, and 11.1.1.4.0 allows remote attackers to affect integrity via unknown vectors...

CVE-2011-0785

CVE-2011-0785 affects Oracle Help component exposed by Oracle Database Server (versions 11.1.0.7, 11.2.0.1, 11.2.0.2, 10.1.0.5, 10.2.0.3–10.2.0.5, 10.1.0.5) and Oracle Fusion Middleware (11.1.1.2.0–11.1.1.4.0). Root cause: unspecified vulnerability in the Oracle Help component allowing remote int...

CVE-2010-0785

Cross-site request forgery CSRF vulnerability in the Administrative Console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-0785

IBM WebSphere Application Server Administrative Console is affected by CVE-2010-0785: a CSRF vulnerability that could allow an attacker to hijack user sessions. Affected products/versions include WAS 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13. The issue is referenced across multiple vulnerabilit...

CentOS Update for quagga CESA-2010:0785 centos4 i386

Check for the Version of quagga OpenVAS Vulnerability Test CentOS Update for quagga CESA-2010:0785 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

RHEL 4 / 5 : quagga (RHSA-2010:0785)

Updated quagga packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

Gentoo Security Advisory GLSA 200803-18 (cacti)

The remote host is missing updates announced in advisory GLSA 200803-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200408-27 (Gaim)

The remote host is missing updates announced in advisory GLSA 200408-27. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: gaim, ja-gaim, ko-gaim, ru-gaim

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[SECURITY] [DSA 1569-3] New cacti packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1569-3 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 15, 2008 http://www.debian.org/security/faq -...

GLSA-200803-18 : Cacti: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200803-18 Cacti: Multiple vulnerabilities The following inputs are not properly sanitized before being processed: 'viewtype' parameter in the file graph.php, 'filter' parameter in the file graphview.php, 'action' and 'loginusernam...

CVE-2008-0785

CVE-2008-0785 affects Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k. The vulnerability is due to multiple SQL injection flaws in the web frontend, exploitable by remote authenticated users via: (1) graph_view.php with graph_list, (2) tree.php with leaf_id and id, (3) graph_xport.php with loca...

Immunity Canvas: FLIP_INCLUDE

Name| flipinclude ---|--- CVE| CVE-2007-0785 Exploit Pack| CANVAS Description| Flip 2.01 = Remote File Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Small Axe Solutions CVE Url: https://vulners.com/cve/CVE-2007-0785 CVE Name: CVE-2007-0785...