CentOS Update for thunderbird CESA-2012:1413 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 5 / 6 : thunderbird (RHSA-2012:1413)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:1413 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Multiple flaws were found in the location object implementation in...

CVE-2012-1413

Zen Cart CVE-2012-1413 affects Zen Cart 1.5.0 and earlier during installation. The XSS flaw resides in zc_install/includes/modules/pages/database_setup/header_php.php, exploitable via the db_username parameter to zc_install/index.php, allowing remote script/HTML injection. No exploit details or m...

Mozilla Firefox 8/9 - 'AttributeChildRemoved()' Use-After-Free (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Firefox 8/9...

Ubuntu Update for nova USN-1413-1

Ubuntu Update for Linux kernel vulnerabilities USN-1413-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14131.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for nova USN-1413-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

CVE-2011-1413

Google Chrome before 10.0.648.127 on Linux does not properly mitigate an unspecified flaw in an X server, which allows remote attackers to cause a denial of service application crash via vectors involving long messages...

CVE-2011-1413

Google Chrome on Linux is affected by CVE-2011-1413: an unspecified flaw in the X server allows remote attackers to cause a denial of service via long X messages. Affected software is Chrome prior to 10.0.648.127 on Linux; root cause and mitigation details are not provided in the connected docume...

CVE-2010-1413

CVE-2010-1413 affects WebKit in Apple Safari prior to 5.0 on Windows and macOS (and Safari before 4.1 on Mac OS X 10.4). The flaw allows NTLM credentials to be sent in cleartext under unspecified circumstances, enabling man-in-the-middle attackers to access sensitive information via unspecified v...

CVE-2009-1413

CVE-2009-1413 concerns Google Chrome 1.x, where timeouts are not canceled during a page transition, enabling Universal XSS by scheduling code with setTimeout and then redirecting with document.location. The issue can be leveraged through a chromehtml: argument-injection path for remote execution ...

Gentoo Security Advisory GLSA 200410-08 (ncompress)

The remote host is missing updates announced in advisory GLSA 200410-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-1413

The vulnerability CVE-2008-1413 affects SNewsCMS Rus versions 2.1 through 2.4, where the XSS flaw resides in the search.php parameter handling. The root cause is a cross-site scripting flaw that allows remote attackers to inject arbitrary web script or HTML via the query parameter, potentially en...

CVE-2008-1413

creationtimestamp| type| source ---|---|--- 2008-03-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31406...

Debian Security Advisory DSA 1413-1 (mysql-dfsg, mysql-dfsg-5.0, mysql-dfsg-4.1)

The remote host is missing an update to mysql-dfsg, mysql-dfsg-5.0, mysql-dfsg-4.1 announced via advisory DSA 1413-1. OpenVAS Vulnerability Test $Id: deb14131.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1413-1 Authors: Thomas Reinke Copyright: Copyright...

Debian: Security Advisory (DSA-1413-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1413-1 : mysql - multiple vulnerabilities

Several vulnerabilities have been found in the MySQL database packages with implications ranging from unauthorized database modifications to remotely triggered server crashes. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2583 The indecimal::set...

CVE-2003-1413

The CVE-2003-1413 entry concerns Apple Darwin Streaming Server 4.1.1, where parse_xml.cgi is vulnerable to a path-based check that leaks file existence information. By supplying a filename parameter containing ".." sequences, an attacker can trigger distinct error messages that allow remote deter...

CVE-2007-1413

CVE-2007-1413 concerns a buffer overflow in the PHP snmp extension’s snmpget function. Affects PHP 5.2.3 and earlier (including PHP 4.4.6 and likely other PHP 4 versions). An attacker could trigger a context-dependent buffer overflow by supplying a long value in the third argument (the object id)...

CVE-2006-1413

CVE-2006-1413 affects EZHomepagePro 1.5 and earlier, exposing multiple XSS vectors. The vulnerability arises from reflectively injected scripts/HTML via specific query parameters and pages: (1) adid or (2) aname in common/email.asp, users/users_search.asp, or users/users_profiles.asp; (3) page in...

CVE-2004-1413

Kayako eSupport 2.x is affected by multiple SQL injection vulnerabilities (in index.php via subcat, rate, questiondetails, ticketkey22, email22 parameters, and in the Forgot Key email field). The underlying issue allows remote attackers to execute arbitrary SQL commands. Affected product/componen...

CVE-2001-1413

Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries such as FTP server, may allow remote attackers to execute arbitrary code via a long filename argument...