123 matches found
CVE-2013-1128
Multiple cross-site request forgery CSRF vulnerabilities in the server in Cisco Unified MeetingPlace before 7.12.2000 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuc64903. NOTE: some of these details are obtained from third party...
CVE-2013-1128
CVE-2013-1128 affects Cisco Unified MeetingPlace Server prior to version 7.1(2.2000). The issue is a set of cross-site request forgery (CSRF) vulnerabilities caused by insufficient sanitization of user-supplied input, allowing an unauthenticated, remote attacker to hijack the authentication of vi...
Fedora Update for mingw-freetype FEDORA-2013-1114
Check for the Version of mingw-freetype OpenVAS Vulnerability Test Fedora Update for mingw-freetype FEDORA-2013-1114 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
Mandriva Update for freetype2 MDVSA-2012:057 (freetype2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Scientific Linux Security Update : php on SL4.x, SL5.x i386/x86_64
An input validation flaw was discovered in the PHP session serializer. If a PHP script generated session variable names from untrusted user input, a remote attacker could use this flaw to inject an arbitrary variable into the PHP session. CVE-2010-3065 An information leak flaw was discovered in t...
PHP < 5.3.1 Multiple Vulnerabilities
PHP is prone to multiple vulnerabilities. Copyright C 2012 NopSec Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...
Gentoo Security Advisory GLSA 201204-04 (FreeType)
The remote host is missing updates announced in advisory GLSA 201204-04. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
CVE-2012-1128
CVE-2012-1128 affects FreeType before 2.4.9 (as used in Mozilla Firefox Mobile before 10.0.4 and other products). The vulnerability allows remote attackers to trigger a denial of service (NULL pointer dereference and memory corruption) or possibly execute arbitrary code via a crafted TrueType fon...
FreeBSD : freetype -- multiple vulnerabilities (462e2d6c-8017-11e1-a571-bcaec565249c)
The Freetype project reports : Multiple vulnerabilities exist in freetype that can result in application crashes and remote code execution. Please review the details in each of the CVEs for additional information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...
CentOS Update for php CESA-2010:0919 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2011-1128
The CVE-2011-1128 issue affects Simple Machines Forum (SMF): loadUserSettings in Load.php fails to properly handle invalid login attempts, enabling brute-force access or potential denial of service. Affected: SMF < 1.1.13 and SMF 2.x
Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : vino vulnerabilities (USN-1128-1)
Kevin Chen discovered that Vino incorrectly handled certain client framebuffer requests. A remote attacker could use this flaw to cause Vino to crash, leading to a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...
Ubuntu: Security Advisory (USN-1128-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RedHat Update for php RHSA-2010:0919-01
Check for the Version of php OpenVAS Vulnerability Test RedHat Update for php RHSA-2010:0919-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
php security update
5.1.6-27.3 - add security fix for CVE-2010-3870 626735 5.1.6-27.2 - fix varexport test cases 626735 5.1.6-27.1 - add security fixes for CVE-2010-1917, CVE-2010-3065, CVE-2010-2531, CVE-2010-1128, CVE-2010-0397 626735...
[USN-989-1] PHP vulnerabilities
=========================================================== Ubuntu Security Notice USN-989-1 September 20, 2010 php5 vulnerabilities CVE-2010-0397, CVE-2010-1128, CVE-2010-1129, CVE-2010-1130, CVE-2010-1866, CVE-2010-1868, CVE-2010-1917, CVE-2010-2094, CVE-2010-2225, CVE-2010-2531, CVE-2010-2950,...
Debian DSA-2089-1 : php5 - several vulnerabilities
Several remote vulnerabilities have been discovered in PHP 5, an hypertext preprocessor. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-1917 The fnmatch function can be abused to conduct denial of service attacks by crashing the interpreter by the...
CVE-2010-1128
CVE-2010-1128 affects PHP before 5.2.13, where the Linear Congruential Generator provides less entropy than expected, easing context-dependent attackers’ guessing of values (e.g., session cookies generated via uniqid). The MiracleLinux advisory confirms this CVE is addressed in PHP 5.2.13 or newe...
CVE-2010-1128
The Linear Congruential Generator LCG in PHP before 5.2.13 does not provide the expected entropy, which makes it easier for context-dependent attackers to guess values that were intended to be unpredictable, as demonstrated by session cookies generated by using the uniqid function...
