89 matches found
Fedora 21 : mongodb-2.4.13-1.fc21 (2015-4197)
Security fix for CVE-2015-1609 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
Fedora 22 : mongodb-2.6.8-1.fc22 (2015-4003)
Upgrade to 2.6.8 - CVE-2015-1609 fix. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
SUSE-SU-2015:0751-1 Security update for mongodb
The MongoDB database did validate BSON incorrectly, which could have lead to remote attackers being able to crash the database before authentication. CVE-2015-1609 Security Issues: CVE-2015-1609...
Fedora Update for mantis FEDORA-2014-15142
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for mantis FEDORA-2014-15079
Check the version of mantis SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868569";...
CVE-2014-1609
Multiple SQL injection vulnerabilities in MantisBT before 1.2.16 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to the 1 mcprojectgetattachments function in api/soap/mcprojectapi.php; the 2 newsgetlimitedrows function in core/newsapi.php; the 3...
CVE-2014-1609
CVE-2014-1609 affects MantisBT up to version 1.2.15 (pre-1.2.16); multiple SQL injection vectors arise via unsafely constructed parameters to functions such as mc_project_get_attachments, news_get_limited_rows, summary_print_by_enum/age/developer/reporter/category, plugin graph APIs, and certain ...
Fedora Update for mantis FEDORA-2014-3421
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for mantis FEDORA-2014-3440
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[oCERT-2014-001] MantisBT input sanitization errors
2014-001 MantisBT input sanitization errors Description: The MantisBT web-based bugtracking system suffers from SQL injection vulnerabilities caused by insufficient input sanitization. The MantisBT SOAP API uses the unsafe dbquery function allowing a specially crafted tag within the envelope of a...
CVE-2013-1609
CVE-2013-1609 affects Symantec Enterprise Vault (EV) for File System Archiving, due to unquoted Windows search paths in the File Collector and File PlaceHolder services. Root cause: unquoted service paths enabling local privilege escalation via a Trojan horse program. Affected products/versions: ...
CVE-2013-1609
Multiple unquoted Windows search path vulnerabilities in the 1 File Collector and 2 File PlaceHolder services in Symantec Enterprise Vault EV for File System Archiving before 9.0.4 and 10.x before 10.0.1 allow local users to gain privileges via a Trojan horse program...
Ubuntu: Security Advisory (USN-1609-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-1609
SQL injection vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15su1, 8.0 before 8.03, and 8.5 before 8.51 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtg85647...
CVE-2011-1609
Cisco Unified Communications Manager (CUCM) is affected by SQL injection vulnerabilities (CVE-2011-1609) in 6.x prior to 6.1(5)su2, 7.x prior to 7.1(5)su1, 8.0 prior to 8.0(3), and 8.5 prior to 8.5(1). The flaw allows a remote authenticated user to execute arbitrary SQL commands via unspecified v...
CVE-2011-1609
creationtimestamp| type| source ---|---|--- 2011-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35672...
Multiple Vulnerabilities in JAF CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in JAF CMS which could be exploited to compromise vulnerable system. 1 Remote code execution in JAF CMS The vulnerability exists due to insufficient sanitation of input data in module/log/vislog.php. A remote attack...
CVE-2010-1609
CVE-2010-1609 concerns a cross-site scripting (XSS) vulnerability in SAP NetWeaver 2004 before SP21 and SAP NetWeaver 2004s before SP13. The connected sources confirm the affected product family and versions and describe the issue as an XSS vulnerability that allows remote attackers to inject arb...
CVE-2009-1609
CVE-2009-1609 refers to an unrestricted file upload vulnerability in Battle Blog 1.25, specifically in admin/uploadform.asp. An attacker can upload a file with an executable extension and then access it via a direct request to the uploaded file, enabling remote code execution. The entry is suppor...