(RHSA-2011:1408) Moderate: rhev-hypervisor security update

The rhev-hypervisor package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine KVM hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red...

FreeBSD Ports: ikiwiki

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Apple iTunes < 9.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 9.2. It is, therefore, affected by multiple vulnerabilities : - A heap-based buffer overflow vulnerability exists in the handling of images with an embedded ColorSync profile. By using a specially crafted image, a remote attacker...

CVE-2010-1408

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to bypass intended restrictions on outbound connections to "non-default TCP ports" via a crafted port number, related to an "integer truncation issue." NOTE: this...

CVE-2010-1408

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to bypass intended restrictions on outbound connections to "non-default TCP ports" via a crafted port number, related to an "integer truncation issue." NOTE: this...

CVE-2010-1408

WebKit in Apple Safari vulnerable to bypassing outbound-port restrictions. Affected: Safari before 5.0 on Mac OS X 10.5–10.6 and Windows; Safari before 4.1 on Mac OS X 10.4. Issue: integer truncation that allows remote attackers to reach non-default TCP ports via crafted port numbers. This CVE ma...

CVE-2010-1408

Removed by vendor...

CVE-2009-1408

CVE-2009-1408 affects webSPELL 4.2.0c with a cross-site scripting (XSS) flaw in BBCode handling. The described vulnerability enables remote attackers to inject arbitrary web script or HTML by abusing Javascript events (e.g., onmouseover) inside nested BBCode tags (email, img, url). Multiple sourc...

CVE-2009-1408

creationtimestamp| type| source ---|---|--- 2009-04-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8453...

CVE-2008-1408

phpBP 2 RC3 (2.204) FIX 4 contains a SQL injection in includes/functions/banners-external.php via the id parameter in a banner_out action. This allows remote attackers to execute arbitrary SQL commands. The affected component is the phpBP banner_out flow, and the root cause is unsafely concatenat...

CVE-2008-1408

creationtimestamp| type| source ---|---|--- 2008-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5263...

Debian DSA-1408-1 : kdegraphics - buffer overflow

Alin Rad Pop discovered a buffer overflow in kpdf, which could allow the execution of arbitrary code if a malformed PDF file is displayed. The old stable distribution sarge will be fixed later. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2003-1408

Technical details about CVE-2003-1408 (affected product/version, root cause, impact, patch) are not provided in the supplied documents. Monitor for updates.

CVE-2007-1408

CVE-2007-1408 concerns multiple vulnerabilities in the Vallheru project by Bartek Jasicki (before 1.3 beta), affecting files: bank.php, landfill.php, outposts.php, tribes.php, house.php, tribearmor.php, tribeastral.php, tribeware.php, and includes/head.php. The entry notes unknown impact and remo...

CVE-2006-1408

CVE-2006-1408 affects Vavoom 1.19.1 and earlier. A remote attacker can cause a denial of service (infinite loop) by sending either a packet with no data or a large packet, which prevents Vavoom from discarding the packet from the socket. The connected documents confirm the same description across...

CVE-2005-1408

Apple Keynote 2.0/2.0.1 is affected by CVE-2005-1408 due to a flaw in the keynote: URI handler that can be triggered by a crafted Keynote presentation. The vulnerability allows remote attackers to read arbitrary files on the local system. The related Nessus NASL entry confirms the issue exists in...

Apple Keynote Presentation < 2.0.2 keynote: URI Handler Arbitrary File Access

The remote host contains a version of Keynote 2 which is older than 2.0.2. The installed version is affected by a security issue which may allow an attacker to send a rogue keynote file containing malformed URI links in it. An attacker can exploit this issue to read and upload arbitrary local fil...

CVE-2004-1408

The CVE-2004-1408 issue affects Image Gallery Web Application 0.9.10, specifically the addImage method in admin.class.php, which fails to properly validate filenames. This enables remote attackers to upload and execute arbitrary files. The vulnerability details are supported by CVE records (NVD/N...

CVE-2004-1408

The addImage method for admin.class.php in Image Gallery Web Application 0.9.10 does not properly check filenames, which allows remote attackers to upload and execute arbitrary files...

CVE-2002-1408

CVE-2002-1408 concerns HP OpenView EMANATE 14.2 snmpModules where the SNMP read-write community name can be exposed, related to (1) 'read-only' community access, and/or (2) an easily guessable community name. This exposure could enable unauthorized SNMP read/write access to affected data and conf...