Oracle Linux 7 : samba (ELSA-2014-1008)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1008 advisory. - resolves: 1126013 - CVE-2014-3560: remote code execution in nmbd. Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Mac OS X : Apple Safari < 6.0.5 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X 10.7 or 10.8 host is earlier than 6.0.5. It is, therefore, potentially affected by several issues : - Multiple memory corruption vulnerabilities exist in WebKit that could lead to unexpected program termination or arbitrary code...

APPLE-SA-2013-05-16-1 iTunes 11.0.3

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-05-16-1 iTunes 11.0.3 iTunes 11.0.3 is now available and addresses the following: iTunes Available for: Mac OS X v10.6.8 or later, Windows 7, Vista, XP SP2 or later Impact: An attacker in a privileged network position may manipulate HTTP...

KLA10076 Multiple vulnerabilities in Apple iTunes

Multiple critical vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or spoof HTTPS servers. Below is a complete list of vulnerabilities 1. Vectors related to browsing the iTunes Store can be...

CVE-2013-1008

CVE-2013-1008 affects WebKit as used in Apple iTunes prior to 11.0.3. The vulnerability allows a man-in-the-middle to execute arbitrary code or cause a memory corruption/DoS (application crash) via iTunes Store browsing, and is described as a different WebKit issue from other CVEs tied to Apple. ...

CVE-2012-1008

CVE-2012-1008 affects OfficeSIP Server 3.1. A remote attacker can trigger a denial-of-service (daemon crash) by sending a SIP INVITE with a crafted To header. The available documents confirm the affected product and the impact but do not provide additional details on root cause, exact vulnerable ...

CVE-2012-1008

creationtimestamp| type| source ---|---|--- 2012-02-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18453...

CVE-2011-1008

The CVE-2011-1008 entry concerns Best Practical Solutions’ Request Tracker (RT) prior to 3.8.9. A vulnerability in Scrips_Overlay.pm allows remote authenticated users to access sensitive information from a TicketObj after a CurrentUser change, with evidence of exposure via custom-field data tied ...

Ubuntu: Security Advisory (USN-1008-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1008-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1008-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-1008

CVE-2010-1008 : A Cross-site Scripting (XSS) vulnerability exists in the Sellector.com Widget Integration (chsellector) extension for TYPO3, prior to version 0.1.2. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The issue affects the TYPO3 integra...

Design/Logic Flaw

Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML, a different vulnerability than CVE-2009-1008...

CVE-2009-1008

Technical details for CVE-2009-1008 are not provided in the connected documents. Monitor for updates from Oracle and security advisories.

CVE-2008-1008

CVE-2008-1008 is an XSS vulnerability in WebCore used by Apple Safari up to version 3.0.x (pre-3.1). The issue arises from how Safari/WebKit handles the document.domain property, allowing remote attackers to inject arbitrary scripts or HTML and potentially leak sensitive information when users vi...

Debian Security Advisory DSA 1008-1 (kdegraphics)

The remote host is missing an update to kdegraphics announced via advisory DSA 1008-1. Marcelo Ricardo Leitner noticed that the current patch in DSA 932 CVE-2005-3627 for kpdf, the PDF viewer for KDE, does not fix all buffer overflows, still allowing an attacker to execute arbitrary code. The old...

Debian: Security Advisory (DSA-1008-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-1008

Apple iTunes 7.0.2 is affected by CVE-2007-1008 where a crafted XML list of radio stations can cause a denial of service via memory corruption. The issue is user‑assisted remote in nature and relies on the XML document being retrieved from a static URL, which implies an attacker must perform DNS ...

CVE-2006-1008

CVE-2006-1008 affects N8cms versions 1.1 and 1.2 and involves multiple cross-site scripting (XSS) vulnerabilities. The XSS can be triggered via the dir and page_id parameters to index.php and the userid parameter to mailto.php, potentially allowing remote attackers to inject arbitrary web script ...

CVE-2005-1008

CVE-2005-1008 is an XSS vulnerability in ASP-DEv XM Forum RC3, affecting posts.asp where a javascript: URL in an IMG tag can inject arbitrary script/HTML. The OpenVAS/Nessus entries corroborate a cross-site scripting issue in this XM Forum component. The connected documents do not provide specifi...