CVE-2009-1343

Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 5.x before 5.x-4.5 and 6.x before 6.x-1.5, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via content titles...

CVE-2009-1343

CVE-2009-1343 describes a cross-site scripting (XSS) vulnerability in the Drupal Print module (also known as Printer, e-mail and PDF versions). The flaw affects 5.x releases before 5.x-4.5 and 6.x releases before 6.x-1.5, where an attacker can inject arbitrary script or HTML via content titles. T...

CVE-2008-1343

creationtimestamp| type| source ---|---|--- 2008-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5355...

CVE-2008-1343

Summary: CVE-2008-1343 describes a directory traversal vulnerability in SCO UnixWare 7.1.4 affecting the built-in tools pkgadd and pkgrm . The root cause and exact exploit vectors are not detailed in the provided documents, but the vulnerability is described as allowing local users to gain privil...

Debian: Security Advisory (DSA-1343-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1343-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1343-2 (file)

The remote host is missing an update to file announced via advisory DSA 1343-2. OpenVAS Vulnerability Test $Id: deb13432.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1343-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1267-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1184-1 (kernel-source-2.6.8)

The remote host is missing an update to kernel-source-2.6.8 announced via advisory DSA 1184-1. For details, please visit the referenced security advisories. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a...

Debian Security Advisory DSA 1184-2 (kernel-source-2.6.8)

The remote host is missing an update to kernel-source-2.6.8 announced via advisory DSA 1184-2. For details on the issues addressed with the missing update, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb11842.nasl 6616 2017-07-07 12:10:49Z cfischer $...

Debian Security Advisory DSA 1267-1 (webcalendar)

The remote host is missing an update to webcalendar announced via advisory DSA 1267-1. It was discovered that WebCalendar, a PHP-based calendar application, insufficiently protects an internal variable, which allows remote file inclusion. OpenVAS Vulnerability Test $Id: deb12671.nasl 6616...

Debian Security Advisory DSA 1343-1 (file)

The remote host is missing an update to file announced via advisory DSA 1343-1. OpenVAS Vulnerability Test $Id: deb13431.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1343-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1184-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-715-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1097-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1343-1 : file - integer overflow

Colin Percival discovered an integer overflow in file, a file type classification tool, which may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

VMSA-2007-0005:Updated Service Console packages (XFree86, UP and SMP kernels, Kerberos libraries) resolve security issues.

VMSA-2007-0005 Updated Service Console packages XFree86, UP and SMP kernels, Kerberos libraries resolve security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2007-0005 VMware Security AdvisorySynopsis: Updated Service Console packages XFree86, UP and SMP kernels,...

FreeBSD : WebCalendar -- 'noSet' variable overwrite vulnerability (72999d57-d6f6-11db-961b-005056847b26)

Secunia reports : A vulnerability has been discovered in WebCalendar, which can be exploited by malicious people to compromise a vulnerable system. Input passed to unspecified parameters is not properly verified before being used with the 'noSet' parameter set. This can be exploited to overwrite...

CVE-2007-1343

includes/functions.php in Craig Knudsen WebCalendar before 1.0.5 does not protect the noSet variable from external modification, which allows remote attackers to set arbitrary global variables via a URL with modified values in the noSet parameter, which leads to resultant vulnerabilities that...

CVE-2007-1343

CVE-2007-1343 concerns WebCalendar, a PHP-based calendar app. The vulnerability arises from WebCalendar’s includes/functions.php not protecting the internal variable noSet from external modification, enabling remote attackers to overwrite variables via a URL-modified noSet parameter, which can le...