Apple Mac OS X Multiple Vulnerabilities -03 (Mar 2015)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1066

Apple Mac OS X IOAcceleratorFamily contains an off-by-one memory error that can let a crafted app execute arbitrary code with system privileges. The issue affects OS X up to 10.10.2 and is addressed by Security Update 2015-002. Remediation includes applying the update (Apple security note: iCloud...

CVE-2013-1066

language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

CVE-2013-1066

language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

CVE-2013-1066

The CVE-2013-1066 entry affects language-selector in multiple Ubuntu-derived streams (0.110.x before 0.110.1, 0.90.x before 0.90.1, 0.79.x before 0.79.4). The root cause is improper use of D-Bus for communication with Polkit, enabling a PolkitUnixProcess PolkitSubject race condition that local us...

Oracle Linux 5 : squirrelmail (ELSA-2009-1066)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2009-1066 advisory. - fix broken patch for CVE-2009-1579 - fix broken patch for CVE-2009-1579 - fix: CVE-2009-1581 : CSS positioning vulnerability - fix: CVE-2009-1579 :...

CVE-2012-1066

CVE-2012-1066 affects SmartyCMS 0.9.4, where an XSS vulnerability in the template module allows remote attackers to inject arbitrary web script or HTML via the title bar. The report does not specify affected versions beyond 0.9.4, nor details on exploit conditions, exploitation status, or availab...

Gentoo Security Advisory GLSA 201111-04 (PhpDocumentor)

The remote host is missing updates announced in advisory GLSA 201111-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-201111-04 : phpDocumentor: Function call injection

The remote host is affected by the vulnerability described in GLSA-201111-04 phpDocumentor: Function call injection phpDocumentor bundles Smarty with the modifier.regexreplace.php plug-in which does not properly sanitize input related to the ASCII NUL character in a search string. Impact : A remo...

CentOS Update for squirrelmail CESA-2009:1066 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 201006-13 (smarty)

The remote host is missing updates announced in advisory GLSA 201006-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201006-13 (smarty)

The remote host is missing updates announced in advisory GLSA 201006-13. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2011-1066

Cross-site scripting XSS vulnerability in the Messaging module 6.x-2.x before 6.x-2.4 and 6.x-4.x before 6.x-4.0-beta8 for Drupal allows remote attackers with administer messaging permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-1066

CVE-2011-1066 is an XSS vulnerability in Drupal’s Messaging module (6.x-2.x before 6.x-2.4 and 6.x-4.x before 6.x-4.0-beta8). Exploitation requires an attacker with administer messaging permissions and can inject arbitrary web script or HTML via unspecified vectors. The provided documents do not ...

CVE-2010-1066

AWCM 2.1 stores sensitive data under the web root with insufficient access control, enabling remote attackers to download the database via a direct request to control/db_backup.php. Impact is database disclosure; no exploit details are provided in the connected documents. Remediation not specifie...

CVE-2010-1066

creationtimestamp| type| source ---|---|--- 2010-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11025...

CVE-2009-2220

CVE-2009-2220 describes multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c—triggered when register_globals is enabled and magic_quotes_gpc is disabled—that allow remote inclusion/execution of arbitrary files via template_path in masthead.inc.php, toppanel.inc.php, contact.inc.php,...

CentOS Security Advisory CESA-2009:1066 (squirrelmail)

The remote host is missing updates to squirrelmail announced in advisory CESA-2009:1066. CESA-2009:1066 64123 4 $Id: ovcesa20091066.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1066 squirrelmail Authors: Thomas Reinke Copyright: Copyright c 2009...

Solaris Update for /usr/sbin/syslogd 112998-05

Check for the Version of /usr/sbin/syslogd OpenVAS Vulnerability Test Solaris Update for /usr/sbin/syslogd 112998-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CVE-2009-1066

Pixie CMS 1.01a is affected by CVE-2009-1066 due to an SQL injection in the referral function (admin/lib/lib_logs.php). The vulnerability can be triggered via the Referer HTTP header, enabling remote attackers to execute arbitrary SQL commands against the database. Multiple sources in the connect...