Stable Channel Update

The Chrome team is delighted to announce the promotion of Chrome 48 to the stable channel for Windows, Mac and Linux. Chrome 48.0.2564.82 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new...

McAfee ePO DLPe Extension < 9.3.400 Multiple Vulnerabilities (SB10098)

The remote McAfee ePO server has a vulnerable version of McAfee Data Loss Protection Endpoint DLPe extension installed that is affected by multiple vulnerabilities : - An unspecified SQL injection vulnerability exists due to improper sanitization of user-supplied input. This allows an...

CVE-2015-1618

The CVE-2015-1618 issue affects the McAfee Data Loss Prevention Endpoint (DLPe) ePO extension prior to 9.3.400. A remote, authenticated user can obtain sensitive password information via a specially crafted URL, due to insufficient access checks in the ePO extension. Impact is information disclos...

KLA10485 Multiple vulnerabilities in McAfee Data Loss Prevention Endpoint

Multiple serious vulnerabilities have been found in McAfee DLPE. Malicious users can exploit these vulnerabilities to obtain sensitive information, inject or execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed URL and other unspecified vectors related ...

CVE-2014-1618

CVE-2014-1618 affects the UAEPD Shopping Cart Script with multiple SQL injection vulnerabilities. The vulnerability allows remote attackers to execute arbitrary SQL commands through the following parameters: cat_id or p_id in products.php, and id in page.php or news.php. The cvss base score is 7....

CVE-2014-1618

creationtimestamp| type| source ---|---|--- 2014-01-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39012 2014-01-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39011...

Opera Multiple Vulnerabilities -01 Feb 13 (Linux)

This host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvuln01feb13lin.nasl 27789 2013-02-11 14:20:02Z feb$ Opera Multiple Vulnerabilities -01 Feb 13 Linux Authors: Arun Kallavi Copyright: Copyright c 2013 Greenbone Networks GmbH,...

Opera Multiple Vulnerabilities -01 Feb 13 (Mac OS X)

This host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvuln01feb13macosx.nasl 27789 2013-02-11 14:02:27Z feb$ Opera Multiple Vulnerabilities -01 Feb 13 Mac OS X Authors: Arun Kallavi Copyright: Copyright c 2013 Greenbone Networks Gmb...

CVE-2013-1618

Technical details specific to CVE-2013-1618 are not publicly provided in the supplied documents; related entries cite timing-side-channel issues linked to CVE-2013-0169 but do not detail this CVE.

PostgreSQL JDBC Driver SQL Injection Vulnerability (Windows)

This host is installed with PostgreSQL with JDBC Driver and is prone to sql injection vulnerability. OpenVAS Vulnerability Test $Id: gbpostgresqljdbcdriversqlinjvulnwin.nasl 5365 2017-02-20 13:46:09Z cfi $ PostgreSQL JDBC Driver SQL Injection Vulnerability Windows Authors: Rachana Shetty Copyrigh...

PostgreSQL JDBC Driver SQL Injection Vulnerability - Windows

PostgreSQL with JDBC Driver is prone to a SQL injection vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Ubuntu Update for exim4 USN-1618-1

Ubuntu Update for Linux kernel vulnerabilities USN-1618-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16181.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for exim4 USN-1618-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS / 12.10 : exim4 vulnerability (USN-1618-1)

It was discovered that Exim incorrectly handled DKIM DNS decoding. This flaw could allow a remote attacker to execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically...

PostgreSQL JDBC驱动程序交互错误SQL注入攻击漏洞

CVE ID: CVE-2012-1618 PostgreSQL JDBC驱动程序可允许Java程序连接到PostgreSQL数据库。 PostgreSQL JDBC 8.2之前版本结合使用启用了"standardconformingstrings"选项的PostgreSQL服务器时存在交互错误，无法正确转义某些JDBC语句参数，可允许远程攻击者执行SQL注入攻击。 0 PostgreSQL JDBC Driver 8.2 厂商补丁： PostgreSQL ---------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2012-1618

Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL server with the "standardconformingstrings" option enabled, such as the default configuration of PostgreSQL 9.1, does not properly escape unspecified JDBC statement parameters, which allows remote attackers to...

CVE-2012-1618

CVE-2012-1618 affects the PostgreSQL JDBC Driver prior to 8.2 when used with servers enabling standard_conforming_strings, allowing remote SQL injection via unescaped JDBC parameters. The issue is documented across multiple sources; exploitation details are not provided in the connected documents...

Moodle Multiple Vulnerabilities

This host is running Moodle and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmoodlemultvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Moodle Multiple Vulnerabilities Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This...

openSUSE Security Update : moodle (openSUSE-SU-2010:0212-1)

Moodle version 1.9.8 fixes several security issues including cross-site-scripting XSS and SQL injection bugs CVE-2010-1613, CVE-2010-1614, CVE-2010-1615, CVE-2010-1616, CVE-2010-1617 CVE-2010-1618, CVE-2010-1619. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

CVE-2010-1618

Cross-site scripting XSS vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message...

CVE-2010-1618

The CVE-2010-1618 issue is a Cross-site Scripting (XSS) vulnerability in the phpCAS client library (pre-1.1.0) used by Moodle 1.8.x and 1.9.x series, where a crafted URL can inject script/HTML due to improper handling in an error message. Affected stack examples include Moodle 1.8.x before 1.8.12...