[SECURITY] [DLA 158-1] request-tracker3.8 security update

Package : request-tracker3.8 Version : 3.8.8-7+squeeze8 CVE ID : CVE-2014-9472 CVE-2015-1165 CVE-2015-1464 Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the following...

[SECURITY] [DSA 3176-1] request-tracker4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3176-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 26, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3176-1] request-tracker4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3176-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 26, 2015 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 3176-1 (request-tracker4 - security update)

Multiple vulnerabilities have been discovered in Request Tracker, an extensible trouble-ticket tracking system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2014-9472 Christian Loos discovered a remote denial of service vulnerability, exploitable via the...

rt -- Remote DoS, Information disclosure and Session Hijackingvulnerabilities

Best Practical reports: RT 3.0.0 and above, if running on Perl 5.14.0 or higher, are vulnerable to a remote denial-of-service via the email gateway; any installation which accepts mail from untrusted sources is vulnerable, regardless of the permissions configuration inside RT. This...

Debian: Security Advisory (DSA-3176-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2011:0645-1)

This php5 update fixes : - CVE-2011-0421: CVSS v2 Base Score: 2.6 AV:N/AC:H/Au:N/C:N/I:N/A:P: Input Validation CWE-20 - CVE-2011-1092: CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Numeric Errors CWE-189 - CVE-2011-1148: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Resource Managemen...

openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2011:0645-1)

This php5 update fixes : - CVE-2011-0421: CVSS v2 Base Score: 2.6 AV:N/AC:H/Au:N/C:N/I:N/A:P: Input Validation CWE-20 - CVE-2011-1092: CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Numeric Errors CWE-189 - CVE-2011-1148: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Resource Managemen...

[SECURITY] [DSA 2772-1] typo3-src security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2772-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 10, 2013 http://www.debian.org/security/faq -...

CVE-2013-1464

Vulnerability summary (CVE-2013-1464): Cross-site scripting in the WordPress Audio Player plugin’s assets/player.swf, prior to version 2.0.4.6. The flaw allows remote attackers to inject arbitrary web script or HTML via the playerID parameter. Impact is XSS on pages rendering the audio player; ex...

CVE-2013-1464

creationtimestamp| type| source ---|---|--- 2013-01-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38300...

CVE-2012-3262

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1464...

Design/Logic Flaw

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1464...

CVE-2012-3262

HP SiteScope SOAP vulnerability CVE-2012-3262 affects SiteScope versions 11.10–11.12. The issue allows remote code execution via the SOAP API due to vulnerabilities in the SOAP features, with CVSS 2.0 base score 10.0 (high). HP’s remediation is SiteScope update v11.13, and to mitigate, disable th...

CVE-2012-3262

Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1464...

PHP 5.3 < 5.3.6 Multiple Vulnerabilities

PHP is prone to multiple vulnerabilities. Copyright C 2012 NopSec Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...

Ubuntu: Security Advisory (USN-1464-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU02764)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

CVE-2012-1464

CVE-2012-1464 affects NetMechanica NetDecision Dashboard Server prior to 4.6.1. A trailing "?" in a request causes Dashboard to access a non-existent resource, enabling remote attackers to disclose the installation path (information disclosure). Documented across NVD and OpenVAS entries; CVSSv2 b...

Debian Security Advisory DSA 2408-1 (php5)

The remote host is missing an update to php5 announced via advisory DSA 2408-1. OpenVAS Vulnerability Test $Id: deb24081.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2408-1 php5 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...