Fedora Core 11 FEDORA-2009-8046 (kdelibs3)

The remote host is missing an update to kdelibs3 announced via advisory FEDORA-2009-8046. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 10 FEDORA-2009-8049 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory FEDORA-2009-8049. OpenVAS Vulnerability Test $Id: fcore20098049.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8049 kdelibs Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora 11 : kdelibs3-3.5.10-13.fc11 (2009-8046)

This update fixes several security issues in the KDE 3 compatibility version of KHTML CVE-2009-1725, CVE-2009-1690, CVE-2009-1687, CVE-2009-1698, CVE-2009-2537 which may lead to a denial of service or potentially even arbitrary code execution. In addition, the package was fixed to build with the...

Fedora Core 10 FEDORA-2009-8020 (kdelibs3)

The remote host is missing an update to kdelibs3 announced via advisory FEDORA-2009-8020. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 10 FEDORA-2009-8049 (kdelibs)

The remote host is missing an update to kdelibs announced via advisory FEDORA-2009-8049. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

RedHat Security Advisory RHSA-2009:1128

The remote host is missing updates announced in advisory RHSA-2009:1128. The kdelibs packages provide libraries for the K Desktop Environment KDE. A flaw was found in the way the KDE CSS parser handled content for the CSS style attribute. A remote attacker could create a specially-crafted CSS...

RedHat Security Advisory RHSA-2009:1128

The remote host is missing updates announced in advisory RHSA-2009:1128. The kdelibs packages provide libraries for the K Desktop Environment KDE. A flaw was found in the way the KDE CSS parser handled content for the CSS style attribute. A remote attacker could create a specially-crafted CSS...

Critical: Red Hat Security Advisory: kdelibs security update

Updated kdelibs packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The kdelibs packages provide libraries for the K Desktop Environment KDE. A flaw...

CVE-2009-1698

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets CSS attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code ...

CVE-2009-1698

CVE-2009-1698 affects WebKit-based components (Safari before 4.0 and iPhone OS/iPod touch up to 2.2.1). The issue is an uninitialized pointer during handling of a CSS attr() function with a large numeric argument, enabling remote code execution or memory-corruption-induced denial of service via a...

Debian DSA-1698-1 : gforge - insufficient input sanitising

It was discovered that GForge, a collaborative development tool, insufficiently sanitises some input allowing a remote attacker to perform SQL injection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

CVE-2008-1698

CVE-2008-1698 is an XSS vulnerability in Simple Gallery 2.2, exploitable via the album parameter to index.php in gallery.php. The occurrence is described as a remote script/HTML injection. The NVD entry lists a MEDIUM risk (CVSS v2 base score 4.3) with network access and no authentication require...

CVE-2008-1698

Cross-site scripting XSS vulnerability in gallery.php in Simple Gallery 2.2 allows remote attackers to inject arbitrary web script or HTML via the album parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1698

Philex 0.2.3 and earlier are affected. download.php accepts a file parameter that allows remote attackers to read arbitrary files and source code, revealing sensitive information due to improper handling of the parameter. Vulnerability details indicate a failure to validate or constrain the file ...

CVE-2006-1698

CVE-2006-1698 describes a cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1. According to the provided sources, remote attackers can trigger script/HTML execution through the input parameters (url, city, state, or country). The vulnerability is documented across multiple fee...

CVE-2002-1698

The CVE-2002-1698 entry concerns Microsoft MSN Messenger Service versions 1.0 through 4.6. A buffer overflow vulnerability exists in the message header’s FN (font) field, allowing a remote attacker to trigger a denial of service (crash). The issue is caused by improper handling of a long font arg...

CVE-2005-1698

CVE-2005-1698 affects PostNuke 0.750 and 0.760RC3, enabling remote attackers to obtain sensitive information through direct requests to a set of files across the Xanthia module, pnblocks directory, NS-Multisites module, and xmlrpc.php. The listed targets include theme.php, Xanthia.php, user.php, ...

CVE-2004-1698

The Base64 function in PopMessenger 1.60 before 20 Sep 2004 and earlier allows remote attackers to cause a denial of service application crash via invalid characters in a message, which causes several alert dialogs to be displayed and leads to a crash...

CVE-2004-1698

The issue CVE-2004-1698 affects PopMessenger 1.60 and earlier, where the Base64 function mishandles invalid characters in a message, causing multiple alert dialogs to appear and the application to crash (DoS). The available documents do not specify a patch version or workaround; no exploitation d...

CVE-2004-1698

The Base64 function in PopMessenger 1.60 before 20 Sep 2004 and earlier allows remote attackers to cause a denial of service application crash via invalid characters in a message, which causes several alert dialogs to be displayed and leads to a crash...