Ubuntu: Security Advisory (USN-1732-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1732

Oracle Siebel CRM (UI Framework) on 8.1.1/8.2.2 is affected by CVE-2012-1732 due to a vulnerability in the UI Framework. The Nessus entry notes this CVE as easily exploitable, allowing authenticated network attacks via HTTP and resulting in unauthorized read access to a subset of Siebel CRM data....

CVE-2011-1732

CVE-2011-1732 is a confirmed vulnerability in HP OpenView Storage Data Protector’s Backup Client Service (OmniInet.exe). The issue is a stack-based/buffer overflow in the handling of stutil messages, allowing unauthenticated, remote code execution on affected Windows installations (Data Protector...

ZDI-11-148: HP Data Protector Backup Client Service stutil Message Processing Remote Code Execution Vulnerability

ZDI-11-148: HP Data Protector Backup Client Service stutil Message Processing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-148 April 29, 2011 -- CVE ID: CVE-2011-1732 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected...

Fedora 13 : zikula-1.2.3-1.fc13 (2010-8501)

Upstream pushed this release to fix two security issues one XSS, and one CSRF Upstream also removed a non-free JavaScript library that we previously had to strip. http://community.zikula.org/module-News-display-sid-3012.htm Note that Tenable Network Security has extracted the preceding descriptio...

Fedora Update for zikula FEDORA-2010-8501

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for zikula FEDORA-2010-8464

Check for the Version of zikula OpenVAS Vulnerability Test Fedora Update for zikula FEDORA-2010-8464 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

CVE-2010-1732

Cross-site request forgery CSRF vulnerability in the users module in Zikula Application Framework before 1.2.3 allows remote attackers to hijack the authentication of administrators for requests that change the administrator email address updateemail action...

CVE-2010-1732

Cross-site request forgery CSRF vulnerability in the users module in Zikula Application Framework before 1.2.3 allows remote attackers to hijack the authentication of administrators for requests that change the administrator email address updateemail action...

Debian Security Advisory DSA 1827-1 (ipplan)

The remote host is missing an update to ipplan announced via advisory DSA 1827-1. OpenVAS Vulnerability Test $Id: deb18271.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1827-1 ipplan Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[SECURITY] [DSA 1827-1] New ipplan packages fix cross-site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1827-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 06, 2009 http://www.debian.org/security/faq -...

CVE-2009-1732

Cross-site scripting XSS vulnerability in admin/usermanager in IPplan 4.91a allows remote attackers to inject arbitrary web script or HTML via the grp parameter...

CVE-2009-1732

CVE-2009-1732 is a cross-site scripting (XSS) vulnerability affecting ipplan in the admin/usermanager module, caused by insufficient sanitising of the grp parameter. Remote attackers could inject arbitrary HTML/JavaScript to execute in a user’s browser. Public disclosures tie this to IPplan 4.91a...

CVE-2009-1732

Cross-site scripting XSS vulnerability in admin/usermanager in IPplan 4.91a allows remote attackers to inject arbitrary web script or HTML via the grp parameter...

Debian Security Advisory DSA 1732-1 (squid3)

The remote host is missing an update to squid3 announced via advisory DSA 1732-1. OpenVAS Vulnerability Test $Id: deb17321.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1732-1 squid3 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian DSA-1732-1 : squid3 - denial of service

Joshua Morin, Mikko Varpiola and Jukka Taimisto discovered an assertion error in squid3, a full featured Web Proxy cache, which could lead to a denial of service attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Gentoo Security Advisory GLSA 200605-09 (mozilla-thunderbird)

The remote host is missing updates announced in advisory GLSA 200605-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200605-09 (mozilla-thunderbird)

The remote host is missing updates announced in advisory GLSA 200605-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-1732

CVE-2008-1732 affects Prediction Football 1.x. A SQL injection exists in showpredictionsformatch.php via the matchid parameter in a dupa action, allowing remote attackers to execute arbitrary SQL commands. Exploitation details, patch/version info, and official remediation are not provided in the ...

CVE-2007-1732

Cross-site scripting XSS vulnerability in an mt import in wp-admin/admin.php in WordPress 2.1.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the demo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...