Ubuntu 11.10 : linux vulnerabilities (USN-1607-1)

Vadim Ponomarev discovered a flaw in the Linux kernel causing a reference leak when PID namespaces are used. A remote attacker could exploit this flaw causing a denial of service. CVE-2012-2127 A flaw was found in how the Linux kernel's KVM Kernel-based Virtual Machine subsystem handled MSI Messa...

CVE-2012-1607

TYPO3 CLI vulnerability CVE-2012-1607 affects TYPO3 4.4.0–4.4.13, 4.5.0–4.5.13, 4.6.0–4.6.6, 4.7, and 6.0, where a direct request allows remote attackers to obtain the database name. The issue is described across multiple sources (NVD, Red Hat, GHSA, OSV) as an information disclosure in the CLI s...

Debian Security Advisory DSA 2445-1 (typo3-src)

The remote host is missing an update to typo3-src announced via advisory DSA 2445-1. OpenVAS Vulnerability Test $Id: deb24451.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2445-1 typo3-src Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

[SECURITY] [DSA 2445-1] typo3-src security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2445-1 [email protected] http://www.debian.org/security/ Florian Weimer March 31, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2445-1] typo3-src security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2445-1 [email protected] http://www.debian.org/security/ Florian Weimer March 31, 2012 http://www.debian.org/security/faq -...

CVE-2011-1607

CVE-2011-1607 affects Cisco Unified Communications Manager (CUCM) with a directory traversal vulnerability in the POST upload path that allows an authenticated remote attacker to upload files to arbitrary directories. Affected CUCM versions: 6.x (before 6.1(5)su3), 7.x (before 7.1(5b)su3), 8.0 (b...

CVE-2010-1607

Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface aka WMI or comwmi component 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1607

CVE-2010-1607 is a directory traversal (local file inclusion) vulnerability in the Webmoney Web Merchant Interface (com_wmi) Joomla! component 1.5.0. The issue allows exploitation by remote attackers who supply a .. in the controller parameter to index.php to cause inclusion and execution of arbi...

CVE-2010-1607

Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface aka WMI or comwmi component 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1607

creationtimestamp| type| source ---|---|--- 2010-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12316...

CVE-2009-1607

Cross-site scripting XSS vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the username in a registration, which is not properly handled when the administrator accesses the Users menu...

CVE-2009-1607

Cross-site scripting XSS vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the username in a registration, which is not properly handled when the administrator accesses the Users menu...

Debian: Security Advisory (DSA-1607-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-1607

CVE-2008-1607 is a SQL injection vulnerability in haberoku.php of Serbay Arslanhan Bomba Haber 2.0, exploitable via the haber parameter to allow remote execution of arbitrary SQL commands. The affected component is the haberoku.php routine; the underlying issue is improper input handling in the p...

CVE-2008-1607

creationtimestamp| type| source ---|---|--- 2008-03-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31531...

CVE-2007-1607

search.php in w-Agora Web-Agora allows remote attackers to obtain potentially sensitive information via a ' quote value followed by certain SQL sequences in the 1 searchforum or 2 searchuser parameter, which force a SQL error...

CVE-2007-1607

The CVE-2007-1607 entry concerns the w-Agora (Web-Agora) web app. The vulnerable component is search.php, where the (1) search_forum and (2) search_user parameters can be injected with a quote followed by certain SQL sequences, triggering a SQL error and potentially exposing sensitive information...

CVE-2006-1607

CVE-2006-1607 – Exponent CMS : A PHP injection vulnerability exists in the banner module of Exponent CMS prior to 0.96.5 RC1. The issue is triggered via unspecified attack vectors, affecting the banner component and potentially impacting confidentiality, integrity, and availability. The NVD CVSS ...

CVE-2005-1607

CVE-2005-1607 describes an XSS vulnerability in the Remote Cart product’s shop.cgi, permitting remote attackers to inject arbitrary web script or HTML via the (1) merchant or (2) demo parameters. The issue is confirmed across multiple sources (e.g., NVD, Red Hat advisory) and is caused by inadequ...

CVE-2002-1607

The CVE-2002-1607 entry describes a local-privilege escalation vulnerability in HP Tru64 UNIX: a buffer overflow in the ypmatch component affects Tru64 UNIX versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f, which could allow a local user to execute arbitrary code. The available sources confirm the affect...