1222 matches found
Oracle Linux 6 : icedtea-web (ELSA-2012-1434)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1434 advisory. 1.2.2-1 - Updated to 1.2.2 - Resolves: CVE-2012-4540 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...
Fedora 18 : qemu-1.2.2-13.fc18 (2013-11407)
Don't install conflicting binfmt handler on arm bz 974804 - Fix building docs with f19 texinfo - CVE-2013-2007: Fix qemu-ga file creation permissions bz 956082, bz 969455 - Fix rtl8139 + windows 7 + large transfers bz 970240 Note that Tenable Network Security has extracted the preceding...
phpMyRecipes 1.2.2 SQL Injection
SQL Injection vulnerability in rid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
glFusion Multiple Cross-Site Scripting Vulnerabilities
glFusion is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Batavi - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/58151/info Batavi is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...
phpMyRecipes - Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/58160/info phpMyRecipes is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code could be executed in the context of the affected site, potentially allowing the...
glFusion 1.2.2 - Multiple XSS Vulnerabilities
Exploit for php platform in category web applications High-Tech Bridge Security Research Lab discovered multiple XSS vulnerabilities in glFusion, which can be exploited to perform Cross-Site Scripting attacks. glFusion has a "badbehaviour" plugin installed by default that verifies HTTP Referer,...
Fedora 18 : qemu-1.2.2-2.fc18 (2013-0965)
CVE-2012-6075: Buffer overflow in e1000 nic bz 889301, bz 889304 - Use systemd spec macros bz 850285 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Debian DSA-2585-1 : bogofilter - buffer overflow
A heap-based buffer overflow was discovered in bogofilter, a software package for classifying mail messages as spam or non-spam. Crafted mail messages with invalid base64 data could lead to heap corruption and, potentially, arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security,...
CentOS 6 : icedtea-web (CESA-2012:1434)
Updated icedtea-web packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Scientific Linux Security Update : icedtea-web on SL6.x i386/x86_64 (20121107)
This erratum also upgrades IcedTea-Web to version 1.2.2. Web browsers using the IcedTea-Web browser plug-in must be restarted for this update to take effect. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'deprecatednasllevel.inc';...
CVE-2012-4540
Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x before 1.1.7, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.x before 1.4.1 allows remote attackers to obtain sensitive information, cause a denial of service crash, or possibly execute arbitrary cod...
Slackware: Security Advisory (SSA:2003-141-04)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 201207-07 (keepalived)
The remote host is missing updates announced in advisory GLSA 201207-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 201207-07 (keepalived)
The remote host is missing updates announced in advisory GLSA 201207-07. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
JVN#46088915: Yahoo! Browser vulnerable in the WebView class
Yahoo! Browser is a web browser for Android devices. Yahoo! Browser contains a vulnerability in the WebView class. Impact If a user of the affected product uses other malicious Android application, information managed by the affected product may be disclosed. Solution Update the software Update t...
Wordpress Plugins - SocialFit XSS Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Fedora 16 : mosh-1.2.2-1.fc16 (2012-9414)
Update to mosh 1.2.2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Pligg CMS 1.2.1 SQL注入漏洞
Bugtraq ID: 53625 Pligg CMS是一款内容管理系统。 Pligg CMS包含的admin/adminindex.php，admin/adminusers.php，module.php脚本不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得数据库信息或控制应用系统。 0 Pligg CMS 1.2.1 厂商解决方案 Pligg CMS 1.2.2已经修复此漏洞，建议用户下载使用： http://forums.pligg.com/downloads.php?do=file&id=15...
