TestLink 1.9.3 SQL Injection

------------------ Information ------------------ Name: SQL Injection Vulnerabilities in TestLink Software tested: TL v1.8.5b & checked in v1.9.3 prior version may be affected Vendor Homepage: http://www.teamst.org Vendor Notification: 27 January 2012 Vendor Patch: 4 February 2012 Public...

RHEL 5 / 6 : java-1.6.0-ibm (RHSA-2011:0938)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0938 advisory. - Oracle/IBM JDK: unspecified vulnerabilities fixed in 6u26 Sound CVE-2011-0802, CVE-2011-0814 - OpenJDK: integer overflows in...

CVE-2010-0938

The connected documents confirm CVE-2010-0938 is an XSS in TodoOforum/Todoo Forum 2.0, where the vulnerability is triggered via the id_forum parameter in a post action. Affected component: todooforum.php. Root cause: improper handling of input leading to arbitrary script/HTML injection. Impact: r...

SLES9: Security update for freeradius

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: freeradius For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5017148 within the...

SLES9: Security update for freeradius

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: freeradius For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5017148 within the...

CVE-2009-0938

CVE-2009-0938 affects Tor before 0.2.0.34. The vulnerability allows directory mirrors to trigger a denial-of-service (exit node crash) via malformed input. Public advisories (Gentoo GLSA 200904-11, related OpenVAS/NVD entries) confirm a DoS impact but do not assign a broader remote code execution...

FreeBSD Ports: tor

The remote host is missing an update to the system as announced in the referenced advisory. VID 78f5606b-f9d1-11dd-b79c-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 78f5606b-f9d1-11dd-b79c-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Gentoo Security Advisory GLSA 200409-29 (FreeRADIUS)

The remote host is missing updates announced in advisory GLSA 200409-29. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: freeradius

The remote host is missing an update to the system as announced in the referenced advisory. VID 20dfd134-1d39-11d9-9be9-000c6e8f12ef OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-0938

Technical details for CVE-2008-0938 are not publicly available in the provided connected documents. The entries reference Solaris DTrace and privilege-based access, but no concrete affected versions, root cause, or remediation are included here. Monitor for updates.

MS07-018: Vulnerabilities in Microsoft Content Management Server Could Allow Remote Code Execution (925939)

The remote host contains a version of the Microsoft Content Management Server that is vulnerable to a security flaw that could allow a remote user to execute arbitrary code by sending a specially malformed HTTP request. C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2007-0938

CVE-2007-0938 describes a remote code execution vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2, caused by improper handling of certain characters in crafted HTTP requests. The CMS Memory Corruption vulnerability could allow an attacker to take control of an affe...

CVE-2006-0938

The provided records indicate a Cross-site scripting (XSS) vulnerability in eZ Publish 3.7.3 and earlier, exploitable via the RefererURL parameter. Affected component: eZ Publish (version

CVE-2005-0938

The CVE concerns Ublog Reload 1.0–1.0.4, where the application stores ublogreload.mdb under the web root. This enables an attacker to read usernames and hashed passwords by making a direct request to ublogreload.mdb, exposing authentication data. The underlying issue is exposure of the MDB databa...

CVE-2004-0938

FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service server crash by sending an Ascend-Send-Secret attribute without the required leading packet...

CVE-2004-0938

FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service server crash by sending an Ascend-Send-Secret attribute without the required leading packet...

CVE-2004-0938

FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service server crash by sending an Ascend-Send-Secret attribute without the required leading packet...

CVE-2003-0938

vos24u.c in SAP database server SAP DB 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current working directory, which is found and loaded by SAP DB before the real DLL, as demonstrated using the SQLAT stored procedure...

CVE-2003-0938

vos24u.c in SAP database server SAP DB 7.4.03.27 and earlier allows local users to gain SYSTEM privileges via a malicious "NETAPI32.DLL" in the current working directory, which is found and loaded by SAP DB before the real DLL, as demonstrated using the SQLAT stored procedure...

CVE-2002-0938

CVE-2002-0938 describes a cross-site scripting vulnerability in CiscoSecure ACS 3.0, allowing remote attackers to execute arbitrary scripts or HTML as other web users via the action parameter in a link to setup.exe. The available sources reiterate the same description but do not provide additiona...