Debian DSA-1866-1 : kdegraphics - several vulnerabilities

Two security issues have been discovered in kdegraphics, the graphics apps from the official KDE release. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0945 It was discovered that the KSVG animation element implementation suffers from a NULL point...

Security fix for the ALT Linux 5 package kdegraphics version 3.5.10-alt4

Dec. 24, 2009 Sergey V Turchin 3.5.10-alt4 - update to lastest branch 3.5 - Security fixes: - CVE-2009-0945 - CVE-2009-1709...

Mandriva Security Advisory MDVSA-2009:331 (kdegraphics)

The remote host is missing an update to kdegraphics announced via advisory MDVSA-2009:331. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Debian Security Advisory DSA 1866-1 (kdegraphics)

The remote host is missing an update to kdegraphics announced via advisory DSA 1866-1. OpenVAS Vulnerability Test $Id: deb18661.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1866-1 kdegraphics Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] [DSA 1866-1] New kdegraphics packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1866-1 [email protected] http://www.debian.org/security/ Steffen Joeris August 19, 2009 http://www.debian.org/security/faq -...

CentOS Security Advisory CESA-2009:1130 (kdegraphics)

The remote host is missing updates to kdegraphics announced in advisory CESA-2009:1130. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

RHEL 5 : kdegraphics (RHSA-2009:1130)

Updated kdegraphics packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop Environment KDE. Scalabl...

Critical: Red Hat Security Advisory: kdegraphics security update

Updated kdegraphics packages that fix two security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The kdegraphics packages contain applications for the K Desktop Environment KDE. Scalabl...

Apple Safari Multiple Vulnerabilities June-09 (Windows) - I

This host is installed with Apple Safari Web Browser and is prone to to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafarimultvulnjun091.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari Multiple Vulnerabilities June-09 Windows - I Authors: Sharath S Copyright: Copyright c...

CVE-2009-1709

CVE-2009-1709 is a use-after-free in KDE kdegraphics3/ KSVG animation element (as cited in openSUSE/SUSE advisories and Scientific Linux) that could allow a remote attacker to cause a denial of service (Konqueror crash) or potentially execute arbitrary code when processing crafted SVG images. Rel...

Debian Security Advisory DSA 1709-1 (shadow)

The remote host is missing an update to shadow announced via advisory DSA 1709-1. OpenVAS Vulnerability Test $Id: deb17091.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1709-1 shadow Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1709-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1709-1 : shadow - race condition

Paul Szabo discovered that login, the system login tool, did not correctly handle symlinks while setting up tty permissions. If a local attacker were able to gain control of the system utmp file, they could cause login to change the ownership and permissions on arbitrary files, leading to a root...

CVE-2008-1709

CVE-2008-1709 describes a buffer overflow in Microsoft Visual InterDev 6.0 (SP6) that allows user-assisted execution of arbitrary code via a Studio Solution (.SLN) file containing a long malformed Project line (Project("{}")== sequence). The connected documents corroborate the vulnerability famil...

CVE-2007-1709

CVE-2007-1709 describes a buffer overflow in the confirm_phpdoc_compiled function of the phpDOC PECL extension for PHP 5.2.1. The vulnerability allows a context-dependent, local attacker to execute arbitrary code via a long argument string. The affected component is the phpDOC extension in PHP 5....

CVE-2006-1709

CVE-2006-1709 describes a Cross-site scripting (XSS) vulnerability affecting shop_main.cgi in interaktiv.shop 5 . The issue allows remote attackers to inject arbitrary web script or HTML via the pn and sbeg parameters. The CVSS v2 base metrics indicate a Medium likelihood of impact with partial c...

CVE-2006-1709

Cross-site scripting XSS vulnerability in shopmain.cgi in interaktiv.shop 5 allows remote attackers to inject arbitrary web script or HTML via the 1 pn and 2 sbeg parameters...

BasiliX SQL Injection Vulnerability

The remote web server contains PHP scripts that are prone to SQL injection attacks. Description : The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions are potentially vulnerable to SQL injection attacks depending on the version of PHP installed...

CVE-2002-1709

CVE-2002-1709 describes a SQL injection vulnerability in BasiliX Webmail, where the vulnerable vector is the id parameter. The OpenVAS entries indicate that remote servers running BasiliX Webmail version 1.1.0 or lower are potentially vulnerable, with susceptibility depending on the installed PHP...

CVE-2005-1709

CVE-2005-1709 concerns Blue Coat Reporter before version 7.1.2. The connected documentation provides no exact root-cause or vulnerable component details beyond the vendor/product scope. The entry states that remote unauthenticated attackers can add a license, implying modification of licensing da...