Lucene search
+L

116 matches found

OpenVAS
OpenVAS
added 2010/05/28 12:00 a.m.58 views

Java for Mac OS X 10.5 Update 2

The remote host is missing Java for Mac OS X 10.5 Update 2. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

10CVSS7.8AI score0.25727EPSS
SaveExploits10References1
seebug.org
seebug.org
added 2010/04/09 12:00 a.m.34 views

WordPress NextGEN Gallery插件mode参数跨站脚本漏洞

BUGTRAQ ID: 39250 CVE ID: CVE-2010-1186 WordPress是一款免费的论坛Blog系统。 WordPress所使用的NextGEN Gallery图形库插件没有正确地转义提交给media-rss.php脚本的mode参数: /----- $mode = $GET"mode"; - -----/ 如果没有选择正确的mode,该参数就被返回给用户: /----- else header'content-type:text/plain;charset=utf-8'; echo sprintf"Invalid MediaRSS command...

4.3CVSS1AI score0.04727EPSS
SaveExploits6
Cvelist
Cvelist
added 2010/04/07 3:00 p.m.39 views

CVE-2010-1186

Cross-site scripting XSS vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter...

5.7AI score0.04727EPSS
SaveExploits6References7
CVE
CVE
added 2010/04/07 3:00 p.m.69 views

CVE-2010-1186

The CVE-2010-1186 entry documents a Cross-Site Scripting (XSS) vulnerability in the NextGEN Gallery WordPress plugin. Affected component: xml/media-rss.php; vulnerable until version 1.5.2 where the mode parameter is reflected without proper escaping, enabling remote attackers to inject arbitrary ...

4.3CVSS5.7AI score0.04727EPSS
SaveExploits6References7Affected Software1
Circl
Circl
added 2010/04/06 12:00 a.m.13 views

CVE-2010-1186

creationtimestamp| type| source ---|---|--- 2010-04-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12098...

4.3CVSS5.7AI score0.04727EPSS
SaveExploits6References1
OpenVAS
OpenVAS
added 2009/12/10 12:00 a.m.50 views

Mandriva Security Advisory MDVSA-2009:103-1 (udev)

The remote host is missing an update to udev announced via advisory MDVSA-2009:103-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

7.2CVSS7.8AI score0.81528EPSS
SaveExploits13References1
OpenVAS
OpenVAS
added 2009/10/13 12:00 a.m.48 views

SLES10: Security update for Sun Java

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java-142-sun java-142-sun-alsa java-142-sun-devel java-142-sun-jdbc java-142-sun-plugin More details may also be found by searching for the SuSE Enterprise...

9.3CVSS8.9AI score0.16899EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2009/10/13 12:00 a.m.69 views

SLES10: Security update for Sun Java

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java-142-sun java-142-sun-alsa java-142-sun-devel java-142-sun-jdbc java-142-sun-plugin More details may also be found by searching for the SuSE Enterprise...

9.3CVSS9.2AI score0.16899EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2009/10/10 12:00 a.m.28 views

SLES9: Security update for enscript

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: enscript For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5011436 within the Su...

7.5CVSS0.2AI score0.04476EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2009/10/10 12:00 a.m.44 views

SLES9: Security update for enscript

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: enscript For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5011436 within the Su...

7.5CVSS7.5AI score0.04476EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2009/10/10 12:00 a.m.58 views

SLES9: Security update for Java2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java2-jre java2 For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5023078 within...

9.3CVSS9.2AI score0.16899EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.33 views

SuSE9 Security Update : enscript (YOU Patch Number 9867)

Unsanitised input can caues the execution of arbitrary commands via EPSF pipe support. This has been disabled, also upstream. CVE-2004-1184 - Due to missing sanitising of filenames it is possible that a specially crafted filename can cause arbitrary commands to be executed. CVE-2004-1185 -...

7.5CVSS5.7AI score0.04476EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2009/08/24 12:00 a.m.42 views

RHEL 4 / 5 : java-1.5.0-sun (RHSA-2008:0186)

Updated java-1.5.0-sun packages that correct several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Java Runtime Environment JRE contains the...

9.3CVSS8.7AI score0.16899EPSS
SaveExploits3References31
OpenVAS
OpenVAS
added 2009/08/17 12:00 a.m.34 views

RedHat Security Advisory RHSA-2009:1186

The remote host is missing updates announced in advisory RHSA-2009:1186. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing, calendar time,...

9.3CVSS6.8AI score0.05741EPSS
SaveExploits5References3
Tenable Nessus
Tenable Nessus
added 2009/07/31 12:00 a.m.50 views

RHEL 5 : nspr and nss (RHSA-2009:1186)

Updated nspr and nss packages that fix security issues, bugs, and add an enhancement are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The packages with this update are identical to the packages...

9.3CVSS7.3AI score0.05741EPSS
SaveExploits5References8
Tenable Nessus
Tenable Nessus
added 2009/07/27 12:00 a.m.50 views

VMSA-2008-0010 : Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter

ESX patches and updates for VirtualCenter fix the following application vulnerabilities. a. Tomcat Server Security Update The ESX patches and the updates for VirtualCenter update the Tomcat Server package to version 5.5.26, which addresses multiple security issues that existed in earlier releases...

10CVSS5.6AI score0.62575EPSS
SaveExploits11References27
Tenable Nessus
Tenable Nessus
added 2009/04/23 12:00 a.m.36 views

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : udev vulnerabilities (USN-758-1)

Sebastian Krahmer discovered that udev did not correctly validate netlink message senders. A local attacker could send specially crafted messages to udev in order to gain root privileges. CVE-2009-1185 Sebastian Krahmer discovered a buffer overflow in the path encoding routines in udev. A local...

7.2CVSS8AI score0.81528EPSS
SaveExploits13References3
Tenable Nessus
Tenable Nessus
added 2009/04/23 12:00 a.m.38 views

Fedora 10 : udev-127-5.fc10 (2009-3711)

udev provides a user-space API and implements a dynamic device directory, providing only the devices present on the system. udev replaces devfs in order to provide greater hot plug functionality. Netlink is a datagram oriented service, used to transfer information between kernel modules and...

7.2CVSS8.4AI score0.81528EPSS
SaveExploits13References5
Slackware Linux
Slackware Linux
added 2009/04/20 10:36 p.m.46 views

udev

New udev packages are available for Slackware 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. The udev packages in Slackware 10.2, 11.0, 12.0, 12.1, 12.2, and -current contained a local root hole vulnerability: https://vulners.com/cve/CVE-2009-1185 The udev packages in Slackwar...

7.2CVSS7.7AI score0.81528EPSS
SaveExploits13
OpenVAS
OpenVAS
added 2009/04/20 12:00 a.m.32 views

Fedora Core 10 FEDORA-2009-3711 (udev)

The remote host is missing an update to udev announced via advisory FEDORA-2009-3711. OpenVAS Vulnerability Test $Id: fcore20093711.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3711 udev Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

7.2CVSS0.6AI score0.81528EPSS
SaveExploits13References2
Rows per page
Query Builder