183 matches found
Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-10344
Check for the Version of perl-Gtk2-MozEmbed OpenVAS Vulnerability Test Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-10344 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
CVE-2010-1197
Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting XSS...
CVE-2010-1197
CVE-2010-1197 affects Mozilla Firefox 3.5.x before 3.5.10, Firefox 3.6.x before 3.6.4, and SeaMonkey before 2.0.5. Root cause: Firefox/SeaMonkey fail to handle cases where both Content-Disposition: attachment and Content-Type: multipart are present in HTTP headers, enabling remote XSS via an uplo...
RHEL 3 / 4 : seamonkey (RHSA-2010:0499)
Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
Critical: Red Hat Security Advisory: firefox security, bug fix, and enhancement update
Updated firefox packages that address several security issues, fix bugs, add numerous enhancements, and upgrade Firefox to version 3.6.4, are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common...
Critical: Red Hat Security Advisory: firefox security, bug fix, and enhancement update
An updated firefox package that addresses security issues, fixes bugs, adds numerous enhancements, and upgrades Firefox to version 3.6.4, is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common...
Mandriva Update for ldetect-lst MDVA-2010:125 (ldetect-lst)
Check for the Version of ldetect-lst OpenVAS Vulnerability Test Mandriva Update for ldetect-lst MDVA-2010:125 ldetect-lst Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Marvell Driver Null SSID Association Request Vulnerability
Title: ------ Marvell Driver Null SSID Association Request Vulnerability Summary: ------ The wireless drivers in some Wi-Fi access points such as the MARVELL-based Netgear WN802T do not correctly parse SSID information element included in association requests. Most information elements are used b...
CVE-2008-1197
CVE-2008-1197 affects Netgear WN802T (firmware 1.3.16) using Marvell 88W8361P-BEM1. The driver fails to correctly parse the SSID information element in an association request, enabling remote authenticated users to trigger a denial of service (device reboot/hang) and potentially execute arbitrary...
Debian: Security Advisory (DSA-1197-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1197-1 (python2.4)
The remote host is missing an update to python2.4 announced via advisory DSA 1197-1. Benjamin C. Wiley Sittler discovered that the repr of the Python interpreter allocates insufficient memory when parsing UCS-4 Unicode strings, which might lead to execution of arbitrary code through a buffer...
CVE-2007-1197
Technical details for CVE-2007-1197 are not publicly available in the provided documents; no concrete affected product/version or exploit information is given. Monitor for updates.
CVE-2003-1197
Cross-site scripting XSS vulnerability in index.php for Ledscripts.com LedForums Beta 1 allows remote attackers to inject arbitrary web script or HTML via the 1 topmessage parameter or 2 topic field of a new thread...
CVE-2003-1197
The CVE-2003-1197 entry documents a cross-site scripting (XSS) vulnerability in LedForums Beta 1 running on Ledscripts.com, exploitable via index.php in the parameters top_message or the topic field when creating a new thread. Affected software is LedForums Beta 1; the underlying issue is imprope...
CVE-2005-1197
CVE-2005-1197 is a SQL injection vulnerability in Oracle Database Server 10g affecting the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure via the CHANGE_SET_NAME parameter. Remote attackers could potentially execute arbitrary SQL commands; impact and remediation details are not specified i...
CVE-2004-1197
CVE-2004-1197 is an XSS vulnerability in Insite InShop (inshop.pl) where the screen parameter can be abused to inject arbitrary script/HTML. Nessus details additionally note an input-validation error in inshop.pl (screen argument) and inmail.pl (acao argument) enabling cross-site scripting and po...
CVE-2002-1197
bugzillaemailappend.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows remote attackers to execute arbitrary code via shell metacharacters in a system call to processmail...
CVE-2002-1197
CVE-2002-1197 affects Bugzilla versions 2.14.x before 2.14.4 and 2.16.x before 2.16.1. A flaw in bugzilla_email_append.pl allows remote attackers to execute arbitrary code by injecting shell metacharacters into a system call to processmail. The vulnerability is introduced in the email processing ...
CVE-2002-1197
bugzillaemailappend.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows remote attackers to execute arbitrary code via shell metacharacters in a system call to processmail...
CVE-2001-1197
CVE-2001-1197 affects KDE2 KDEUtils, specifically the klprfax_filter component. The vulnerability enables local users to overwrite arbitrary files by performing a symlink attack against the klprfax.filter temporary file. The root cause is a symlink manipulation in the temporary file handling with...