91 matches found
Fedora Update for cgit FEDORA-2011-2815
Check for the Version of cgit OpenVAS Vulnerability Test Fedora Update for cgit FEDORA-2011-2815 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Fedora Update for cgit FEDORA-2011-2815
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2011-1027
CVE-2011-1027 : Off-by-one in the convert_query_hexchar function of html.c in cgit.cgi (cgit) before 0.8.3.5 can cause a denial of service (infinite loop) when processing a % followed by invalid hex characters (e.g., %gg). Connected advisories confirm the affected component and offer remediation ...
TPTI-10-04: Oracle Secure Backup Scheduler Service Remote Code Execution Vulnerability
TPTI-10-04: Oracle Secure Backup Scheduler Service Remote Code Execution Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-10-04 -- CVE ID: CVE-2010-0898 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Oracle -- Affected Products: Oracle Secure Backup -- TippingPointTM IPS...
Mac OS X 10.5.3 Update / Mac OS X Security Update 2008-003
The remote host is missing Mac OS X 10.5.3 Update / Mac OS X Security Update 2008-003. One or more of the following components are affected: AFP Server Apache AppKit Apple Pixlet Video ATS CFNetwork CoreFoundation CoreGraphics CoreTypes CUPS Flash Player Plug-in Help Viewer iCal International...
CVE-2010-1027
The CVE-2010-1027 entry concerns the Meet Travelmates (travelmate) TYPO3 extension, version 0.1.1 and earlier. It describes a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unspecified vectors, with impacts described as partial confidentiality, inte...
CVE-2009-1027
CVE-2009-1027 describes a SQL injection vulnerability in OpenCart 1.1.8 where the attacker can remotely execute arbitrary SQL commands through the order parameter . The NVD entry assigns a base score of 7.5 (HIGH) with remote attack vector, low complexity, and no authentication required. Exploita...
Gentoo Security Advisory GLSA 200411-29 (unarj)
The remote host is missing updates announced in advisory GLSA 200411-29. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
FreeBSD Ports: unarj
The remote host is missing an update to the system as announced in the referenced advisory. VID 1f922de0-3fe5-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-1027
CVE-2008-1027 is tied to Apple File Protocol (AFP) on Mac OS X prior to 10.5.3, where AFP Server did not verify that requested files/directories were inside shared folders. This allowed remote attackers to read arbitrary files via unspecified AFP traffic. The issue is documented in the 2008-003 s...
Apple Mac OS X 2008-003更新修复多个安全漏洞
BUGTRAQ ID: 29412 CVECAN ID: CVE-2008-1027,CVE-2008-1028,CVE-2008-1577,CVE-2008-1575,CVE-2008-1580,CVE-2008-1030,CVE-2008-1031,CVE-2008-1032,CVE-2008-1033,CVE-2008-1034,CVE-2008-1035,CVE-2008-1036,CVE-2008-1571,CVE-2008-1572,CVE-2008-1573,CVE-2008-1574,CVE-2008-1576,CVE-2008-1578,CVE-2008-1579 Ma...
Mac OS X 10.5.x < 10.5.3 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.3. Mac OS X 10.5.3 contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if description scriptid32477;...
Mac OS X Multiple Vulnerabilities (Security Update 2008-003)
The remote host is running a version of Mac OS X 10.4 that does not have the security update 2008-003 applied. This update contains security fixes for a number of programs. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if descripti...
Debian Security Advisory DSA 1027-1 (mailman)
The remote host is missing an update to mailman announced via advisory DSA 1027-1. A potential denial of service problem has been discovered in mailman, the web-based GNU mailing list manager. The failing parsing of messages with malformed mime multiparts sometimes caused the whole mailing list t...
CVE-2007-1027
CVE-2007-1027 affects IBM DB2 prior to 9 Fix Pack 2 for Linux/Unix. The vulnerability arises from a symlink attack on the temporary file DB2DIAG.LOG, allowing local users to overwrite arbitrary files via setuid DB2 binaries. The description in the provided documents confirms a local-privilege con...
Debian DSA-1027-1 : mailman - programming error
A potential denial of service problem has been discovered in mailman, the web-based GNU mailing list manager. The failing parsing of messages with malformed mime multiparts sometimes caused the whole mailing list to become inoperative. The old stable distribution woody is not vulnerable to this...
CVE-2006-1027
The CVE-2006-1027 issue affects Joomla! 1.0.7, specifically feedcreator.class.php (the syndication component). A remote attacker can cause an information disclosure by passing a "/" in the feed parameter to index.php, which leaks the installation path in an error message. The available sources de...
CVE-2005-1027
The vulnerability concerns PHP-Nuke 6.x through 7.6 with multiple stored/reflected XSS vectors in the web interface. Specifically, arbitrary web script/HTML can be injected via the username parameter in the Your_Account module, the avatarcategory parameter in the Your_Account module, or the lid p...
CVE-2004-1027
Directory traversal vulnerability in the -x extract command line option in unarj allows remote attackers to overwrite arbitrary files via an arj archive with filenames that contain .. dot dot sequences...
Debian DSA-074-1 : wmaker - buffer overflow
Alban Hertroys found a buffer overflow in Window Maker a popular window manager for X. The code that handles titles in the window list menu did not check the length of the title when copying it to a buffer. Since applications will set the title using data that can't be trusted for example, most w...