101 matches found
AIX 6.1 TL 8 : bind9 (IV62146)
The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service traffic amplification via DNS queries with...
AIX 5.3 TL 12 : bind9 (IV62327)
The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service traffic amplification via DNS queries with...
Oracle Linux 6 : sblim-cim-client2 (ELSA-2012-0987)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0987 advisory. 2.1.3-2 - Fix possible XML Hash DoS Resolves: 803391 2.1.3 - Update to sblim-cim-client2-2.1.3 2.0.9.2-1 - Initial support Tenable has extracted the preceding...
QuickTime < 7.7.4 Multiple Vulnerabilities (Windows)
The version of QuickTime installed on the remote Windows host is older than 7.7.4. It is, therefore, reportedly affected by the following vulnerabilities : - Buffer overflow vulnerabilities exist in the handling of 'dref' atoms, 'enof' atoms, 'mvhd' atoms, FPX files, MP3 files, H.263 and H.264...
APPLE-SA-2013-05-22-1 QuickTime 7.7.4
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-05-22-1 QuickTime 7.7.4 QuickTime 7.7.4 is now available and addresses the following: QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Opening a maliciously crafted TeXML file may lead to an unexpected application...
CVE-2013-0987
CVE-2013-0987 affects Apple QuickTime, with a memory corruption flaw in the handling of QTIF files that could allow remote code execution or a crash. The vulnerability is listed across multiple OpenVAS entries for Apple QuickTime/QuickTime Player (Mac OS X and Windows) and is tied to QuickTime’s ...
QuickTime < 7.7.4 Multiple Vulnerabilities (Windows) (deprecated)
Binary data 6840.prm...
CVE-2012-0987
ImpressCMS vulnerability CVE-2012-0987 is a directory traversal flaw in edituser.php. Affected products: ImpressCMS 1.2.x prior to 1.2.7 Final and 1.3.x prior to 1.3.1 Final. Root cause: icmsConfigPlugins[sanitizer_plugins][] parameter can be manipulated to include arbitrary local files via direc...
Slackware Advisory SSA:2004-133-01 apache
The remote host is missing an update as announced via advisory SSA:2004-133-01. OpenVAS Vulnerability Test $Id: esoftslkssa200413301.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
Gentoo Security Advisory GLSA 201201-01 (phpMyAdmin)
The remote host is missing updates announced in advisory GLSA 201201-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
FreeBSD Ports: phpMyAdmin
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Fedora Update for phpMyAdmin FEDORA-2011-1408
Check for the Version of phpMyAdmin OpenVAS Vulnerability Test Fedora Update for phpMyAdmin FEDORA-2011-1408 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Fedora Update for phpMyAdmin FEDORA-2011-1408
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
[SECURITY] [DSA 2167-1] phpmyadmin security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2167-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 16, 2011 http://www.debian.org/security/faq -...
Mandriva Update for phpmyadmin MDVSA-2011:026 (phpmyadmin)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2011-0987
The CVE-2011-0987 issue affects phpMyAdmin 2.11.x before 2.11.11.3 and 3.3.x before 3.3.9.2. The PMA_Bookmark_get function does not properly restrict bookmark queries, allowing remote authenticated users to trigger another user’s SQL query execution by creating a bookmark. Exploitation details in...
SQL query could be executed under another user.
PMASA-2011-2 Announcement-ID: PMASA-2011-2 Date: 2011-02-11 Summary SQL query could be executed under another user. Description It was possible to create a bookmark which would be executed unintentionally by other users. Severity We consider this vulnerability to be critical. Mitigation factor To...
CVE-2010-0987
Adobe Shockwave Player contains a heap-based buffer overflow (CVE-2010-0987) exploitable via crafted embedded fonts in Shockwave files. Affected product: Shockwave Player before version 11.5.7.609. Connected sources corroborate the vulnerability as part of multiple font-related shocks and describ...
CVE-2010-0987
Heap-based buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via crafted embedded fonts in a Shockwave file...
Secunia Research: Adobe Shockwave Player Font Processing Buffer Overflow
====================================================================== Secunia Research 12/05/2010 - Adobe Shockwave Player Font Processing Buffer Overflow - ====================================================================== Table of Contents Affected...