Mandriva Linux Security Advisory : python-feedparser (MDVSA-2011:082)

Multiple vulnerabilities has been found and corrected in python-feedparser : Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser before 5.0 allows remote attackers to inject arbitrary web script or HTML via vectors involving nested...

CVE-2011-1158

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI...

CVE-2011-1158

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI...

CVE-2011-1158

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme, as demonstrated by a javascript: URI...

CVE-2011-1158

The CVE-2011-1158 issue affects the Universal Feed Parser (python-feedparser) in the feedparser.py component for 5.x until 5.0.1. The vulnerability is a cross-site scripting (XSS) flaw that enables remote attackers to inject arbitrary web script or HTML via an unexpected URI scheme (demonstrated ...

Oracle Database and Enterprise Manager Grid Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Database 11g. Authentication is not required to exploit this vulnerability. The specific flaw exists within a JSP script exposed via an HTTPS server running by default on TCP port 1158. The...

CVE-2010-1158

CVE-2010-1158 : Integer overflow in the Perl 5.8.x regular expression engine can allow a context‑dependent attacker to cause a denial of service (stack consumption and application crash) by matching a crafted regex against a long string. The available documents state the vulnerability but do not ...

CVE-2010-1158

Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent attackers to cause a denial of service stack consumption and application crash by matching a crafted regular expression against a long string...

SLES10: Security update for Sun Java

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java-142-sun java-142-sun-alsa java-142-sun-devel java-142-sun-jdbc java-142-sun-plugin More details may also be found by searching for the SuSE Enterprise...

SLES10: Security update for Sun Java

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java-142-sun java-142-sun-alsa java-142-sun-devel java-142-sun-jdbc java-142-sun-plugin More details may also be found by searching for the SuSE Enterprise...

SLES9: Security update for kdelibs3

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kdelibs3 For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5011912 within the Su...

SLES9: Security update for Java2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java2-jre java2 For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5023078 within...

CVE-2009-1158

Cisco ASA/PIX 5500 Series are affected by CVE-2009-1158 due to crafted H.323 packets causing device reloads when H.323 inspection is enabled. The vulnerability affects ASA/PIX software versions 7.0 up to 8.1 before specific fixed releases. The Security Advisory documents the first fixed releases ...

Cisco Unified Presence引擎多个拒绝服务漏洞

BUGTRAQ ID: 29222,29220,29219 CVECAN ID: CVE-2008-1741,CVE-2008-1740,CVE-2008-1158 Cisco Unified Presence用于收集有关用户可用性状态和通讯能力的信息。 当有漏洞的Cisco Unified Presence系统接收到一系列畸形报文时，Cisco Unified Presence 1.0版本的的Presence引擎服务中会出现两个漏洞，导致拒绝服务的情况。第一个漏洞记录为CVE-2008-1158和Cisco Bug ID...

CVE-2008-1158

CVE-2008-1158 affects the Presence Engine (PE) service in Cisco Unified Presence before version 6.0(1). A remote attacker can trigger a denial-of-service (core dump and service interruption) by sending malformed packets (Bug ID CSCsh50164). The issue is documented in Cisco’s advisory Cisco Securi...

openSUSE 10 Security Update : java-1_5_0-sun (java-1_5_0-sun-5133)

Sun Java was updated to 1.5.0u15 to fix following security vulnerabilities : - CVE-2008-1158: Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment JRE and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.216 and earlier allows remote attackers...

SuSE 10 Security Update : Sun Java (ZYPP Patch Number 5131)

Sun Java was updated to 1.4.2u17 to fix following security vulnerabilities : - Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment JRE and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.216 and earlier allows remote attackers should gain...

openSUSE 10 Security Update : java-1_4_2-sun (java-1_4_2-sun-5130)

Sun Java was updated to 1.4.2u17 to fix following security vulnerabilities : - CVE-2008-1158: Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment JRE and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.216 and earlier allows remote attackers...

Debian Security Advisory DSA 224-1 (canna)

The remote host is missing an update to canna announced via advisory DSA 224-1. OpenVAS Vulnerability Test $Id: deb2241.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 224-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-1158

The CVE-2007-1158 entry refers to a directory traversal in the Pagesetter 6.2.0 through 6.3.0 beta 5 module for PostNuke, via the id parameter in index.php, allowing remote attackers to read arbitrary files using .. traversal. The provided documents give the affected software and the vulnerabilit...