Fedora 12 : webkitgtk-1.2.4-1.fc12 (2010-14419)

Update to 1.2.4 which fixes: CVE-2010-1780 CVE-2010-1782 CVE-2010-1784 CVE-2010-1785 CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790 CVE-2010-1792 CVE-2010-1793 CVE-2010-2648 Update to 1.2.3 which fixes: CVE-2010-1386 CVE-2010-1392 CVE-2010-1405 CVE-2010-1407 CVE-2010-1416 CVE-2010-1417...

Fedora 13 : webkitgtk-1.2.4-1.fc13 (2010-14409)

Update to 1.2.4 which fixes: CVE-2010-1780 CVE-2010-1782 CVE-2010-1784 CVE-2010-1785 CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790 CVE-2010-1792 CVE-2010-1793 CVE-2010-2648 Update to 1.2.3 which fixes: CVE-2010-1386 CVE-2010-1392 CVE-2010-1405 CVE-2010-1407 CVE-2010-1416 CVE-2010-1417...

FreeBSD Ports: webkit-gtk2

The remote host is missing an update to the system as announced in the referenced advisory. VID 19419b3b-92bd-11df-b140-0015f2db7bde OpenVAS Vulnerability Test $ Description: Auto generated from VID 19419b3b-92bd-11df-b140-0015f2db7bde Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Apple iTunes < 9.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 9.2. It is, therefore, affected by multiple vulnerabilities : - A heap-based buffer overflow vulnerability exists in the handling of images with an embedded ColorSync profile. By using a specially crafted image, a remote attacker...

CVE-2010-1417

The Cascading Style Sheets CSS implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via HTML content th...

CVE-2010-1417

CVE-2010-1417 affects the WebKit CSS implementation in Apple Safari (before 5.0 on Mac OS X 10.5–10.6 and Windows; before 4.1 on Mac OS X 10.4). It allows remote attackers to trigger arbitrary code execution or a denial of service via HTML content that uses multiple :after pseudo-selectors. The p...

Mandriva Security Advisory MDVSA-2009:308 (gnutls)

The remote host is missing an update to gnutls announced via advisory MDVSA-2009:308. OpenVAS Vulnerability Test $Id: mdksa2009308.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:308 gnutls Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Mandriva Linux Security Advisory : gnutls (MDVSA-2009:308)

Multiple vulnerabilities has been found and corrected in gnutls : gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is 1 not yet valid or 2 no longer valid, related ...

FreeBSD Ports: gnutls

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: gnutls

The remote host is missing an update to the system as announced in the referenced advisory. VID b31a1088-460f-11de-a11a-0022156e8794 OpenVAS Vulnerability Test $ Description: Auto generated from VID b31a1088-460f-11de-a11a-0022156e8794 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-1417

CVE-2009-1417 concerns gnutls-cli in GnuTLS prior to 2.6.6, where the time checks for X.509 certificates are not performed in _gnutls_x509_verify_certificate. This allows a remote attacker to present a certificate that is not yet valid or has expired, with downstream impact on affected apps (Exim...

Security fix for the ALT Linux 10 package gnutls30 version 2.6.6-alt1

April 30, 2009 Afanasov Dmitry 2.6.6-alt1 - 2.6.6 release. + fix Corrected double free on signature verification failure CVE-2009-1415 + fix DSA key generation CVE-2009-1416 + fix gnutls-cli expiration/activation time check CVE-2009-1417 - release fixes 19873 also...

Security fix for the ALT Linux 9 package gnutls30 version 2.6.6-alt1

April 30, 2009 Afanasov Dmitry 2.6.6-alt1 - 2.6.6 release. + fix Corrected double free on signature verification failure CVE-2009-1415 + fix DSA key generation CVE-2009-1416 + fix gnutls-cli expiration/activation time check CVE-2009-1417 - release fixes 19873 also...

CVE-2008-1417

The CVE-2008-1417 entry concerns the prerm script in axyl 2.1.7, where a local user can overwrite arbitrary files via a symlink attack on the axyl.conf temporary file. Affected component: axyl 2.1.7 prerm script; root cause: symlink attack enabling local file overwrite. Impact is described as com...

Debian Security Advisory DSA 1417-1 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 1417-1. OpenVAS Vulnerability Test $Id: deb14171.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1417-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian DSA-1417-1 : asterisk - missing input sanitising

Tilghman Lesher discovered that the logging engine of Asterisk, a free software PBX and telephony toolkit, performs insufficient sanitising of call-related data, which may lead to SQL injection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2006-1417

CVE-2006-1417 describes multiple cross-site scripting (XSS) vulnerabilities in Caloris Planitia Online Quiz System (also known as Web Quiz pro ), potentially affecting version ~1.0. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the exam parameter in prequiz...

dwhttpd format string

The remote web server is vulnerable to a format string attack. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell Netbasic Scripting Server Directory Traversal

Novell Netbasic Scripting Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2004 David Kyger Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2005-1417

MaxWebPortal 2.x, 1.35 and related versions are affected by multiple SQL injection vulnerabilities. The flaws allow remote attackers to inject arbitrary SQL via numerous ASP scripts (article_popular.asp, dl_popular.asp, links_popular.asp, pic_popular.asp, article_rate.asp, dl_rate.asp, links_rate...