SuSE Update for kernel SUSE-SA:2011:020

Check for the Version of kernel OpenVAS Vulnerability Test SuSE Update for kernel SUSE-SA:2011:020 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Number 4376)

The SUSE Linux Enterprise 11 Service Pack 1 kernel was updated to 2.6.32.36 and fixes various bugs and security issues. The following security issues were fixed : - When parsing the FACNATIONALDIGIS facilities field, it was possible for a remote host to provide more digipeaters than expected,...

CVE-2011-1477

Multiple array index errors in sound/oss/opl3.c in the Linux kernel before 2.6.39 allow local users to cause a denial of service heap memory corruption or possibly gain privileges by leveraging write access to /dev/sequencer...

CVE-2010-1477

SQL injection vulnerability in the SermonSpeaker comsermonspeaker component before 3.2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a latestsermons action to index.php...

CVE-2010-1477

CVE-2010-1477 affects Joomla! SermonSpeaker (com_sermonspeaker) prior to version 3.2.1. The vulnerability is an SQL injection in the id parameter of the latest_sermons action to index.php, allowing remote attackers to execute arbitrary SQL commands. Impact per sources is partial confidentiality, ...

CVE-2010-1477

creationtimestamp| type| source ---|---|--- 2010-04-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12184...

CVE-2009-1477

The CVE-2009-1477 issue affects ATEN IP KVM devices and PN9108 with the listed firmware versions (KH1516i 1.0.063, KN9116 1.1.104, PN9108). The root cause is a hardcoded SSL private key used for HTTPS web interfaces, enabling an attacker who can extract the key from one device to decrypt HTTPS se...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-1477

CVE-2008-1477 concerns multiple cross-site scripting (XSS) vulnerabilities in busca.php of eForum 0.4. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) busca and (2) link parameters. The NVD entry lists the impact as confidentiality: NONE, integrity: PARTIAL, a...

Debian DSA-1477-1 : yarssr - missing input sanitising

Duncan Gilmore discovered that yarssr, an RSS aggregator and reader, performs insufficient input sanitising, which could result in the execution of arbitrary shell commands if a malformed feed is read. Due to a technical limitation of the archive management scripts, the fix for the old stable...

CVE-2003-1477

CVE-2003-1477 affects MAILsweeper for SMTP versions 4.3.6 and 4.3.7. A remote attacker can trigger a DoS by sending a PowerPoint attachment that is corrupt or contains embedded objects, causing CPU exhaustion and making the server unresponsive. Documents confirm the vulnerable product and the DoS...

CVE-2007-1477

CVE-2007-1477 affects PHP Point Of Sale for osCommerce v1.1. The vulnerability is a directory traversal in the index.php file, exploitable via a ".." sequence in the cfg_language parameter, allowing remote attackers to include and execute local files. Documentation notes that the issue has been d...

CVE-2007-1477

Directory traversal vulnerability in index.php in PHP Point Of Sale for osCommerce 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cfglanguage parameter. NOTE: this issue has been disputed by CVE, since the cfglanguage variable is configured upon...

CentOS 4 : firefox (CESA-2005:434)

Updated firefox packages that fix various security bugs are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several bugs were found in the way Firefox executes JavaScript code...

CentOS 3 / 4 : mozilla (CESA-2005:435)

Updated mozilla packages that fix various security bugs are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 24 May 2005 This erratum now includes updated devhelp packages which are required to satisfy a dependency on...

CVE-2006-1477

Turnkey Web Tools PHP Live Helper 1.8 is affected by multiple remote file inclusion vulnerabilities. The issue arises from improper handling of the abs_path parameter in scripts (initiate.php, waiting.php, welcome.php, admin/index.php, javascript.php, checkchat.php, blank.php), allowing an attack...

RHEL 4 : mozilla (RHSA-2005:435)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:435 advisory. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several bugs were found in the...

Important: Red Hat Security Advisory: mozilla security update

Updated mozilla packages that fix various security bugs are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 24 May 2005 This erratum now includes updated devhelp packages which are required to satisfy a dependancy on...

Important: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix various security bugs are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several bugs were found in the way Firefox executes javascript code...

CVE-2001-1477

BEA Tuxedo 7.1 Domain gateway is vulnerable: it does not perform authorization checks for imported services and qspaces on remote domains, even when an ACL exists, allowing access to remote-domain services. The issue is described across multiple records (NVD/CVE and CVE listing). No remediation d...