277 matches found
CVE-2009-1734
CVE-2009-1734 is a SQL injection vulnerability in VidSharePro, specifically in listing_video.php, exploitable via the catid parameter. The connected documents confirm that remote attackers can execute arbitrary SQL commands through this input, indicating a server-side database query vulnerability...
Gentoo Security Advisory GLSA 200605-09 (mozilla-thunderbird)
The remote host is missing updates announced in advisory GLSA 200605-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200804-19 (php-toolkit)
The remote host is missing updates announced in advisory GLSA 200804-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200605-09 (mozilla-thunderbird)
The remote host is missing updates announced in advisory GLSA 200605-09. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-1734
CVE-2008-1734 affects Gentoo Linux users running the Gentoo PHP Toolkit prior to 1.0.1. The vulnerability arises from an interpretation conflict where an unquoted [a-z] argument can be treated as a shell glob instead of a literal string, allowing local users to cause a Denial of Service (PHP outa...
CVE-2007-1734
CVE-2007-1734 is a Linux kernel vulnerability in the DCCP path: do_dccp_getsockopt does not verify the upper bounds of optlen in net/dccp/proto.c for 2.6.20 and later, enabling local attackers on some architectures to read kernel memory or cause a kernel oops. Public detail confirms affected prod...
Fedora Core 5 : thunderbird-1.5.0.2-1.1.fc5 (2006-490)
Updated thunderbird packages that fix various bugs are now available for Fedora Core 4. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several bugs were found in the way Thunderbird...
Solaris 8 (x86) : 120672-08
Mozilla 1.7x86 for Solaris 8 and 9. Date this patch was last updated by Sun : Sep/02/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Debian DSA-1044-1 : mozilla-firefox - several vulnerabilities
Several security related problems have been discovered in Mozilla Firefox. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2005-4134 Web pages with extremely long titles cause subsequent launches of the browser to appear to 'hang' for up to a few...
Ubuntu 4.10 / 5.04 / 5.10 : mozilla vulnerabilities (USN-275-1)
Web pages with extremely long titles caused subsequent launches of Mozilla browser to hang for up to a few minutes, or caused Mozilla to crash on computers with insufficient memory. CVE-2005-4134 Igor Bukanov discovered that the JavaScript engine did not properly declare some temporary variables...
RHEL 4 : thunderbird (RHSA-2006:0330)
Updated thunderbird packages that fix various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include the details of additional issu...
Critical: Red Hat Security Advisory: firefox security update
Updated firefox packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include CVE-2006-0748, an issue fixed by these erratum packages...
CVE-2006-1734
CVE-2006-1734 affects Mozilla Firefox/Thunderbird 1.x prior to 1.5 and 1.0.x prior to 1.0.8, Mozilla Suite prior to 1.7.13, and SeaMonkey prior to 1.0. The vulnerability arises from the Object.watch method being able to access the internal cloneParent function, enabling remote attackers to execut...
CVE-2002-1734
NewsPro 1.01 is vulnerable: remote attackers can gain unauthorized administrator access by setting the authentication cookie to "logged,true". The described root cause is a cookie-based authentication bypass. The available documents do not provide deeper technical details such as affected compone...
CVE-2005-1734
PROMS before 0.11 has multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL via unknown vectors. The connected Red Hat/CVE and CVE records confirm the issue but provide no further technical details, affected modules, exploit vectors, or a remediation within the...
CVE-2004-1734
CVE-2004-1734 affects Mantis 0.19.0a via PHP remote file inclusion: setting t_core_path in bug_api.php or t_core_dir in relationship_api.php to a URL on a remote server causes arbitrary PHP code execution. Exploitation details and affected versions are described in the provided sources; exploitat...
