116 matches found
Java for Mac OS X 10.5 Update 2
The remote host is missing Java for Mac OS X 10.5 Update 2. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
WordPress NextGEN Gallery插件mode参数跨站脚本漏洞
BUGTRAQ ID: 39250 CVE ID: CVE-2010-1186 WordPress是一款免费的论坛Blog系统。 WordPress所使用的NextGEN Gallery图形库插件没有正确地转义提交给media-rss.php脚本的mode参数: /----- $mode = $GET"mode"; - -----/ 如果没有选择正确的mode,该参数就被返回给用户: /----- else header'content-type:text/plain;charset=utf-8'; echo sprintf"Invalid MediaRSS command...
CVE-2010-1186
Cross-site scripting XSS vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter...
CVE-2010-1186
The CVE-2010-1186 entry documents a Cross-Site Scripting (XSS) vulnerability in the NextGEN Gallery WordPress plugin. Affected component: xml/media-rss.php; vulnerable until version 1.5.2 where the mode parameter is reflected without proper escaping, enabling remote attackers to inject arbitrary ...
CVE-2010-1186
creationtimestamp| type| source ---|---|--- 2010-04-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12098...
Mandriva Security Advisory MDVSA-2009:103-1 (udev)
The remote host is missing an update to udev announced via advisory MDVSA-2009:103-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
SLES10: Security update for Sun Java
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java-142-sun java-142-sun-alsa java-142-sun-devel java-142-sun-jdbc java-142-sun-plugin More details may also be found by searching for the SuSE Enterprise...
SLES10: Security update for Sun Java
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java-142-sun java-142-sun-alsa java-142-sun-devel java-142-sun-jdbc java-142-sun-plugin More details may also be found by searching for the SuSE Enterprise...
SLES9: Security update for enscript
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: enscript For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5011436 within the Su...
SLES9: Security update for enscript
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: enscript For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5011436 within the Su...
SLES9: Security update for Java2
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java2-jre java2 For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5023078 within...
SuSE9 Security Update : enscript (YOU Patch Number 9867)
Unsanitised input can caues the execution of arbitrary commands via EPSF pipe support. This has been disabled, also upstream. CVE-2004-1184 - Due to missing sanitising of filenames it is possible that a specially crafted filename can cause arbitrary commands to be executed. CVE-2004-1185 -...
RHEL 4 / 5 : java-1.5.0-sun (RHSA-2008:0186)
Updated java-1.5.0-sun packages that correct several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Java Runtime Environment JRE contains the...
RedHat Security Advisory RHSA-2009:1186
The remote host is missing updates announced in advisory RHSA-2009:1186. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing, calendar time,...
RHEL 5 : nspr and nss (RHSA-2009:1186)
Updated nspr and nss packages that fix security issues, bugs, and add an enhancement are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The packages with this update are identical to the packages...
VMSA-2008-0010 : Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter
ESX patches and updates for VirtualCenter fix the following application vulnerabilities. a. Tomcat Server Security Update The ESX patches and the updates for VirtualCenter update the Tomcat Server package to version 5.5.26, which addresses multiple security issues that existed in earlier releases...
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : udev vulnerabilities (USN-758-1)
Sebastian Krahmer discovered that udev did not correctly validate netlink message senders. A local attacker could send specially crafted messages to udev in order to gain root privileges. CVE-2009-1185 Sebastian Krahmer discovered a buffer overflow in the path encoding routines in udev. A local...
Fedora 10 : udev-127-5.fc10 (2009-3711)
udev provides a user-space API and implements a dynamic device directory, providing only the devices present on the system. udev replaces devfs in order to provide greater hot plug functionality. Netlink is a datagram oriented service, used to transfer information between kernel modules and...
udev
New udev packages are available for Slackware 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. The udev packages in Slackware 10.2, 11.0, 12.0, 12.1, 12.2, and -current contained a local root hole vulnerability: https://vulners.com/cve/CVE-2009-1185 The udev packages in Slackwar...
Fedora Core 10 FEDORA-2009-3711 (udev)
The remote host is missing an update to udev announced via advisory FEDORA-2009-3711. OpenVAS Vulnerability Test $Id: fcore20093711.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3711 udev Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...