84 matches found
RHEL 4 / 5 : xmlsec1 (RHSA-2011:0486)
The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0486 advisory. The XML Security Library is a C library based on libxml2 and OpenSSL that implements the XML Digital Signature and XML Encryption standards. A fl...
xmlsec1 security and bug fix update
1.2.9-8.1.2 - disable xslt i/o support in library, tools and examples, CVE-2011-1425 - Resolves: rhbz694124 - limit the paths used for searching the security library loaded dynamically...
[SECURITY] [DSA 2219-1] xmlsec1 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2219-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 18, 2011 http://www.debian.org/security/faq -...
Mandriva Update for xmlsec1 MDVSA-2011:063 (xmlsec1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2011-1425
xslt.c in XML Security Library aka xmlsec before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackers to create or overwrite arbitrary files via vectors involving the libxslt output extension and a ds:Transform element during signature verification...
CVE-2011-1425
XML Security Library (xmlsec) prior to 1.2.17 with XSLT enabled is vulnerable: during signature verification, using the libxslt output extension and a ds:Transform element can cause an attacker to create or overwrite arbitrary files. This is triggered by the XSLT processing path and affects produ...
CVE-2010-1425
Summary: CVE-2010-1425 affects F-Secure and related antivirus products, whose scanning engines fail to detect malware in specially crafted 7Z, GZIP, CAB, and RAR archives. The issue enables remote malware delivery by archive content evasion, impacting several F-Secure offerings (including Interne...
SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 1425)
Adobe Reader has been updated to fix numerous security vulnerabilities. Some of the vulnerabilities allowed attackers to potentially execute arbitrary code on the victim's system via specially crafted PDF files. CVE-2007-0048 / CVE-2007-0045 / CVE-2009-2564 / CVE-2009-2979 / CVE-2009-2980 /...
CVE-2009-1425
The CVE-2009-1425 entry affects HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier. It is described as an unspecified vulnerability that allows remote attackers to cause a denial of service by triggering a stop or crash in httpd. This CVE is distinct from CVE-2009...
[security bulletin] HPSBGN02446 SSRT090111 rev.1 - HP ProCurve Threat Management Services zl Module (J9155A), Remote Unauthorized Access, Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01803910 Version: 1 HPSBGN02446 SSRT090111 rev.1 - HP ProCurve Threat Management Services zl Module J9155A, Remote Unauthorized Access, Denial of Service DoS NOTICE: The information in this...
CVE-2008-1425
CVE-2008-1425 is a SQL injection vulnerability in Easy-Clanpage 2.2, affecting the gallery module’s index.php. The flaw allows remote attackers to execute arbitrary SQL commands through the id parameter in a kate action, enabling potentially unauthorized data access or manipulation. Affected soft...
CVE-2008-1425
creationtimestamp| type| source ---|---|--- 2008-03-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5275 2010-03-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11964...
Debian: Security Advisory (DSA-1425-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1425-1 : xulrunner - several vulnerabilities
Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5947 Jesse Ruderman and Petko D. Petkov discovered that the URI handler for JAR archives...
CVE-2003-1425
The CVE affects cPanel 5.0’s guestbook.cgi, where the template parameter is not properly filtered, enabling remote command execution. An attacker could run arbitrary commands on the host with the web server’s privileges via the /guestbook.cgi?template=... input. Exploitation details in connected ...
CVE-2007-1425
CVE-2007-1425 describes a SQL injection vulnerability in Triexa SonicMailer Pro ≤ 3.2.3. The flaw occurs in index.php where the vulnerable parameter is the list parameter handled during an archive action. The vulnerability allows remote attackers to execute arbitrary SQL commands, with impact sta...
CVE-2006-1425
The CVE-2006-1425 entry concerns phpMyFamily 1.4.1, where track.php is vulnerable to a Cross-site Scripting (XSS) flaw via the name parameter. The underlying issue enables remote attackers to inject arbitrary web script/HTML, with the NVD noting a Medium severity (CVSS v2: AV:N/AC:M/Au:N/C:N/I:P/...
CVE-2001-1425
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login...
CVE-2004-1425
CVE-2004-1425 describes a directory traversal vulnerability in Moodle 1.4.2 and earlier, where an attacker can read arbitrary session files by manipulating the file parameter with a .. sequence. The affected component is Moodle’s file.php; root cause is improper validation of the file path, enabl...