Liferay Portal < 6.0.6 Multiple Vulnerabilities

According to its self-reported version number, the installation of Liferay Portal hosted on the remote web server is affected by multiple vulnerabilities : - An arbitrary file download vulnerability exists when Apache Tomcat is used, which allows remote, authenticated users to download arbitrary...

Debian Security Advisory DSA 2430-1 (python-pam)

The remote host is missing an update to python-pam announced via advisory DSA 2430-1. OpenVAS Vulnerability Test $Id: deb24301.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2430-1 python-pam Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2430-1 : python-pam - double free

Markus Vervier discovered a double free in the Python interface to the PAM library, which could lead to denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2430. The text...

[SECURITY] [DSA 2430-1] python-pam security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2430-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 10, 2012 http://www.debian.org/security/faq -...

PyPAM Python bindings for PAM - Double-Free Corruption

PyPAM Python bindings for PAM - Double-Free Corruption === LSE Leading Security Experts - Security Advisory 2012-03-01 === PyPAM -- Python bindings for PAM - Double Free Corruption --------------------------------------------------------- Affected Versions ================= PyPAM = 0.4.2 Red Hat...

PyPAM Python bindings for PAM Double Free Corruption

Exploit for linux platform in category dos / poc PyPAM -- Python bindings for PAM - Double Free Corruption - - --------------------------------------------------------- Affected Versions ================= PyPAM = 0.4.2 Red Hat PyPAM = 0.5.0-12 Debian python-pam = 0.4.2-12.2 Ubuntu python-pam =...

LSE-2012-03-01: PyPAM -- Python bindings for PAM - Double Free Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 === LSE Leading Security Experts - Security Advisory 2012-03-01 === PyPAM -- Python bindings for PAM - Double Free Corruption - --------------------------------------------------------- Affected Versions ================= PyPAM = 0.4.2 Red Hat PyPAM =...

PyPAM Python bindings for PAM - Double-Free Corruption

=== LSE Leading Security Experts - Security Advisory 2012-03-01 === PyPAM -- Python bindings for PAM - Double Free Corruption --------------------------------------------------------- Affected Versions ================= PyPAM = 0.4.2 Red Hat PyPAM = 0.5.0-12 Debian python-pam = 0.4.2-12.2 Ubuntu...

[USN-1395-1] PyPAM vulnerability

========================================================================== Ubuntu Security Notice USN-1395-1 March 08, 2012 python-pam vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

PyPAM 0.4.2 Double-Free Corruption

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 === LSE Leading Security Experts - Security Advisory 2012-03-01 === PyPAM -- Python bindings for PAM - Double Free Corruption - - --------------------------------------------------------- Affected Versio...

Ubuntu Update for python-pam USN-1395-1

Ubuntu Update for Linux kernel vulnerabilities USN-1395-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13951.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for python-pam USN-1395-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : python-pam vulnerability (USN-1395-1)

Markus Vervier discovered that PyPAM incorrectly handled passwords containing NULL bytes. An attacker could exploit this to cause applications using PyPAM to crash, or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block directly from t...

CVE-2011-1502

CVE-2011-1502 affects Liferay Portal Community Edition 6.x up to 6.0.6 GA when deployed with Apache Tomcat. The vulnerability stems from an XML External Entity (XXE) issue: remote authenticated users can read arbitrary files by abusing an entity declaration with an entity reference. The available...

Google Chrome Multiple Vulnerabilities (win)

This host is installed with Google Chrome Web Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnapr10.nasl 5394 2017-02-22 09:22:42Z teissa $ Google Chrome Multiple Vulnerabilities win Authors: Madhuri D Updated By: Madhuri D on 2010-05-10...

CVE-2010-1502

CVE-2010-1502 affects Google Chrome versions prior to 4.1.249.1059. The description indicates an unspecified vulnerability that allows remote attackers to access local files via vectors related to the browser’s developer tools. The CVSS base score is high (9.3). Affected product: Google Chrome be...

Mandrake Security Advisory MDVSA-2009:265 (egroupware)

The remote host is missing an update to egroupware announced via advisory MDVSA-2009:265. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Important: Red Hat Security Advisory: kdegraphics security update

Updated kdegraphics packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop Environment,...

Debian: Security Advisory (DSA-1871-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1871-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1502

CVE-2009-1502 affects S-Cms versions 1.1 Stable and 1.5.2, where the plugin.php page parameter is vulnerable to directory traversal, allowing remote attackers to include and execute arbitrary local files. The vulnerability stems from improper handling of directory traversal sequences, enabling un...