CVE-2013-1673

The CVE-2013-1673 entry concerns Mozilla Firefox on Windows. The issue arises in the Mozilla Updater/Maintenance Service where registry entries were not properly updated during upgrades from older Firefox versions, allowing local users with write access to a trusted path to escalate privileges. A...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5605)

This kernel security update fixes lots of bugs and some %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid59130; scriptversion"1.5";...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5608)

This update of the SUSE Linux Enterprise 10 Service Pack 1 kernel contains lots of bugfixes and several security fixes : - Added missing capability checks in sbniioctl. CVE-2008-3525 - On AMD64 some string operations could leak kernel information into userspace. CVE-2008-0598 - Added range checki...

CVE-2012-1673

The CVE-2012-1673 issue affects the e-ticketing product, specifically the loginscript.php component, where both the user_name and password POST parameters can be used to perform SQL injection. The root cause is improper handling of input that allows remote attackers to execute arbitrary SQL comma...

'e-ticketing' SQL Injection (CVE-2012-1673)

'e-ticketing' SQL Injection CVE-2012-1673 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in loginscript.php that allows for SQL injection of the 'username' and 'password' POST parameters. II. TESTED VERSION...

e-ticketing SQL Injection

'e-ticketing' SQL Injection CVE-2012-1673 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in loginscript.php that allows for SQL injection of the 'username' and 'password' POST parameters. II. TESTED VERSION...

e-ticketing - SQL Injection

e-ticketing - SQL Injection 'e-ticketing' SQL Injection CVE-2012-1673 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in loginscript.php that allows for SQL injection of the 'username' and 'password' POST parameters. II. TEST...

Fedora Update for ikiwiki FEDORA-2011-5173

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for ikiwiki FEDORA-2011-5173

Check for the Version of ikiwiki OpenVAS Vulnerability Test Fedora Update for ikiwiki FEDORA-2011-5173 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora 13 : ikiwiki-3.20100815.7-1.fc13 (2011-5173)

Update to upstream version 3.20100815.7. Security fixes : - Possible JavaScript insertion via insufficient htmlscrubbing of alternate stylesheets. CVE-2011-1401 - JavaScript insertion via insufficient checking in comments. CVE-2011-0428 - JavaScript insertion via insufficient htmlscrubbing of...

CVE-2011-1673

BackupConfig.php on the NetGear ProSafe WNAP210 allows remote attackers to obtain the administrator password by reading the configuration file...

CVE-2011-1673

The CVE-2011-1673 entry concerns NetGear ProSafe WNAP210 where the BackupConfig.php component exposes the administrator password by allowing remote reads of the configuration file. This is a remote, unauthenticated exposure affecting the device’s config handling. The connected sources confirm the...

SuSE 11 Security Update : pyxml (SAT Patch Number 1673)

Specially crafted XML documents could make pyxml run into an enless loop, therefore locking up applications using pyxml. CVE-2009-3720 / CVE-2009-3560 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SLES10: Security update for Linux kernel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kernel-bigsmp kernel-debug kernel-default kernel-kdump kernel-smp kernel-source kernel-syms kernel-vmi kernel-vmipae kernel-xen kernel-xenpae More details ma...

SuSE 10 Security Update : Linux Kernel (x86) (ZYPP Patch Number 5565)

This kernel security update fixes lots of bugs and some %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41534; scriptversion"1.12";...

openSUSE Security Update : kernel (kernel-171)

The openSUSE 11.0 kernel was updated to 2.6.25.16. It fixes various stability bugs and also security bugs. CVE-2008-1673: Fixed the range checking in the ASN.1 decoder in NAT for SNMP and CIFS, which could have been used by a remote attacker to crash the machine. CVE-2008-3276: An integer overflo...

CVE-2009-1673

CVE-2009-1673 : Solaris 9 kernel vulnerability allows local users to trigger a denial of service (panic) by calling fstat with a first argument of AT_FDCWD. The available sources confirm the affected platform and the specific function/argument combination, but do not provide additional exploit st...

Ubuntu: Security Advisory (USN-625-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for kernel FEDORA-2008-5308

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2008-5308 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for kernel FEDORA-2008-5454

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...