CVE-2012-1293

CVE-2012-1293 concerns multiple XSS vulnerabilities in Frams’ Fast File Exchange (FEX, fex). The web interface is vulnerable to script/HTML injection via the (1) to and (2) from parameters, allowing remote attackers to execute arbitrary client-side code in a victim’s browser. The issues affect ve...

Ubuntu: Security Advisory (USN-1293-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.10 : linux vulnerabilities (USN-1293-1)

A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. CVE-2011-4077 Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions...

RHEL 6 : squid (RHSA-2011:1293)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:1293 advisory. - squid: buffer overflow flaw in Squid's Gopher reply parser SQUID-2011:3 CVE-2011-3205 Note that Nessus has not tested for this issue but has instea...

Debian Security Advisory DSA 2245-1 (chromium-browser)

The remote host is missing an update to chromium-browser announced via advisory DSA 2245-1. OpenVAS Vulnerability Test $Id: deb22451.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2245-1 chromium-browser Authors: Thomas Reinke Copyright: Copyright c 2011...

2245

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2245-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano May 29, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2245-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2245-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano May 29, 2011 http://www.debian.org/security/faq -...

Google Chrome multiple vulnerabilities - March 11 (Windows)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnmar11win.nasl 7024 2017-08-30 11:51:43Z teissa $ Google Chrome multiple vulnerabilities - March 11 Windows Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...

CVE-2011-1293

The CVE-2011-1293 entry concerns a use-after-free vulnerability in Google Chrome’s HTMLCollection implementation, affecting Chrome versions prior to 10.0.648.204. The vulnerability allows remote attackers to cause a denial of service and potentially other impact via unknown vectors. The provided ...

Google Fixes Six High-Risk Bugs in New Chrome Release

Google has released a new version of its Chrome browser, fixing six high-risk security bugs in the process and paying out $8,500 in bug bounties along the way. The latest version of Chrome, version 10.0.648.204, also includes a number of other new features for some of the supported platforms. The...

CVE-2010-1293

Adobe ColdFusion CVE-2010-1293 is an XSS vulnerability affecting the Admin page in ColdFusion 8.0, 8.0.1, and 9.0. The issue arises from improper sanitization in the administrative interface, notably input to cfadminUserId on /CFIDE/administrator/login.cfm when Separate user name and password aut...

CVE-2010-1293

Cross-site scripting XSS vulnerability in the Administrator page in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-1293

The CVE-2009-1293 issue affects Novell Teaming 1.0–SP3 (1.0.3) web login (c/portal/login). The vulnerability enables remote user enumeration because the login responses differ for valid versus invalid usernames. Nessus also notes a likely related cross-site scripting risk due to unsanitized p_p_s...

Debian Security Advisory DSA 1561-1 (ldm)

The remote host is missing an update to ldm announced via advisory DSA 1561-1. OpenVAS Vulnerability Test $Id: deb15611.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1561-1 ldm Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-1293

ldm in Linux Terminal Server Project LTSP 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 aka display :6...

CVE-2008-1293

ldm in Linux Terminal Server Project LTSP 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 aka display :6...

CVE-2008-1293

The CVE-2008-1293 entry describes a vulnerability in LTSP’s ldm where -ac is passed to the X server on LTSP clients, enabling a remote attacker to connect to the client X display (display :6, TCP port 6006) and potentially observe/record keystrokes. Connected advisories (Ubuntu USN-610-1, Debian ...

[SECURITY] [DSA 1561-1] New ldm packages fix information disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1561-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 28, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1561-1] New ldm packages fix information disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1561-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 28, 2008 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 1293-1 (quagga)

The remote host is missing an update to quagga announced via advisory DSA 1293-1. OpenVAS Vulnerability Test $Id: deb12931.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1293-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...