CentOS Update for xmlsec1 CESA-2009:1428 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for weechat FEDORA-2011-7843

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for weechat FEDORA-2011-7839

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 15 : weechat-0.3.5-1.fc15 (2011-7843)

Update to most recent + spell-aspell rename. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 14 : weechat-0.3.5-1.fc14 (2011-7839)

Update to most recent + spell-aspell rename. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2011-1428

WeeChat (Wee Enhanced Environment for Chat) versions up to 0.3.4 are affected by CVE-2011-1428, where the client does not properly validate that the server hostname matches the subject of an X.509 certificate, enabling MITM with an arbitrary certificate due to incorrect GnuTLS API usage. Exploita...

JBoss企业应用平台多个非授权访问漏洞

BUGTRAQ ID: 39710 CVE ID: CVE-2010-0738,CVE-2010-1428,CVE-2010-1429 JBoss企业应用平台（EAP）是J2EE应用的中间件平台。 JBoss企业应用平台中存在多个非授权访问漏洞，远程用户可以绕过认证执行非授权操作或读取敏感信息。 1 JMX控制台配置仅对使用GET和POST HTTP命令的请求指定了认证要求，远程攻击者可以创建没有指定GET或POST的HTTP请求，导致无需认证便被默认的GET处理器执行。 2...

CVE-2010-1428

The Web Console aka web-console in JBossAs in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an...

CVE-2010-1428

CVE-2010-1428 affects Red Hat JBoss Enterprise Application Platform (JBEAP) Web Console, where access control was enforced only for GET/POST; other methods allowed unauthorized access to sensitive information. Affected versions are JBEAP 4.2 up to 4.2.0.CP08/4.3 up to 4.3.0.CP07 (per initial desc...

Critical: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP08 update

Updated JBoss Enterprise Application Platform JBEAP 4.3 packages that fix three security issues and multiple bugs are now available for Red Hat Enterprise Linux 5 as JBEAP 4.3.0.CP08. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability...

CentOS Security Advisory CESA-2009:1428 (xmlsec1)

The remote host is missing updates to xmlsec1 announced in advisory CESA-2009:1428. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

CentOS Security Advisory CESA-2009:1428 (xmlsec1)

The remote host is missing updates to xmlsec1 announced in advisory CESA-2009:1428. CESA-2009:1428 64901 6 $Id: ovcesa20091428.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1428 xmlsec1 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

xmlsec1 security update

CentOS Errata and Security Advisory CESA-2009:1428 Updated xmlsec1 packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The XML Security Library is a C...

CentOS 4 / 5 : xmlsec1 (CESA-2009:1428)

Updated xmlsec1 packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The XML Security Library is a C library based on libxml2 and OpenSSL. It implements the...

CVE-2009-1428

The CVE-2009-1428 entry describes two parsing errors in the ccLgView.exe component of the Symantec Log Viewer used by multiple Norton/Symantec products (SAV before 10.1 MR8, SEP before 11.0 MR1, Norton 360 1.0, Norton Internet Security 2005–2008). The vulnerability enables remote XSS via a crafte...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Ubercart 5.x before 5.x-1.0-rc1 module for Drupal allow remote attackers to inject arbitrary web script or HTML via text fields intended for the 1 address and 2 order information, which are later displayed on the order view page and...

CVE-2008-1428

CVE-2008-1428 refers to multiple XSS vulnerabilities in the Ubercart 5.x for Drupal, exploitable via a text attribute value for a product. Affected release: Ubercart 5.x before 5.x-1.0-beta7. Connected documents confirm related Ubercart XSS CVEs with different vectors (e.g., node titles, address/...

Debian Security Advisory DSA 1428-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1428-1. OpenVAS Vulnerability Test $Id: deb14281.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1481-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1428-2 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1428-2. OpenVAS Vulnerability Test $Id: deb14282.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1428-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian DSA-1428-2 : linux-2.6 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : This is an update to DSA 1428-1 which omitted a reference...