143 matches found
PHP 5.4.x < 5.4.12 Multiple Vulnerabilities
Binary data 6708.prm...
PHP 5.3.x < 5.3.22 Multiple Vulnerabilities
Binary data 6707.prm...
PHP 5.3.x < 5.3.22 Multiple Vulnerabilities
Binary data 801086.prm...
Ubuntu: Security Advisory (USN-1635-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-1635
The CVE-2012-1635 issue affects the Drupal Revisioning module (7.x-1.x) prior to 7.x-1.3. The hook_node_access() implementation checks the current user’s permissions even when evaluating access for other user accounts, enabling bypass of intended access restrictions (notably demonstrated via the ...
CVE-2012-1635
The hooknodeaccess function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even when it is called to check permissions of other users, which allows remote attackers to bypass intended access restrictions, as demonstrated when using the XML...
Gentoo Security Advisory GLSA 201206-22 (Samba)
The remote host is missing updates announced in advisory GLSA 201206-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 201206-22 (Samba)
The remote host is missing updates announced in advisory GLSA 201206-22. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
SA-CONTRIB-2012-009 - Revisioning - Access bypass
CVE: CVE-2012-1635 This module enables you to create moderation publication workflows, allowing authors to create content that isn't visible to the public until it has been approved by a moderator/publisher. The module's implementation of hooknodeaccess assumes that access is to granted/denied...
Mandriva Linux Security Advisory : samba (MDVSA-2010:141)
Multiple vulnerabilities has been discovered and corrected in samba : The chainreply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service NULL pointer dereference and process crash via a Negotiate Protocol request with a...
CVE-2010-1635
The chainreply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service NULL pointer dereference and process crash via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request wit...
CVE-2010-1635
Samba (smbd) vulnerable via chain_reply in process.c (CVE-2010-1635): a crafted Negotiate Protocol request with 0x0003 followed by a Session Setup AndX with 0x8003 can cause a NULL pointer dereference and remote DoS. Affected are Samba versions before 3.4.8 and 3.5.x before 3.5.2. Remediation is ...
CVE-2009-1635
CVE-2009-1635 : Novell GroupWise WebAccess (7.x pre-7.03 HP3 and 8.x pre-8.0 HP2) is affected by cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary script/HTML via (1) the login page User.lang parameter, (2) style expressions in HTML emails, or (3) vectors ...
Novell Groupwise Cross Site Scripting
Novell GroupWise Web Access Multiple XSS /============================================\ / SecureState R&D Team - leroy and sasquatch \ / Discovered: 11-24-08, 03-05-09 \ \ Vendor Notified: 01-06-09, 03-05-09 / \ Vendor Publication: 05-21-09 / ============================================/...
Debian Security Advisory DSA 1635-1 (freetype)
The remote host is missing an update to freetype announced via advisory DSA 1635-1. OpenVAS Vulnerability Test $Id: deb16351.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1635-1 freetype Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian: Security Advisory (DSA-1635-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1635-1 : freetype - multiple vulnerabilities
Several local vulnerabilities have been discovered in freetype, a FreeType 2 font engine, which could allow the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1806 An integer overflow allows context-dependent attackers ...
CVE-2008-1635
Directory traversal vulnerability in viewprivate.php in Keep It Simple Guest Book KISGB 5.0.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tmptheme parameter. NOTE: 5.1.1 is also reportedly affected...
CVE-2008-1635
CVE-2008-1635 affects Keep It Simple Guest Book (KISGB) up to version 5.0.0 (and reportedly 5.1.1) via a directory-traversal flaw in view_private.php. The vulnerability arises from a .. path in the tmp_theme parameter, allowing remote attackers to include and execute arbitrary local files. Docume...
CVE-2006-1635
CVE-2006-1635 affects LucidCMS 2.0.0 RC4. The vulnerability arises from a direct request to /lucid_phplib/translator.php, where an error message reveals the server path, enabling remote disclosure of sensitive information. No explicit exploit details or in‑the‑wild data are provided in the docume...