174 matches found
RHEL 5 / 6 : Satellite Server (RHSA-2011:1794)
Updated packages that fix one security issue are now available for Red Hat Network Satellite 5.4.1 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives ...
Fedora Update for thunderbird FEDORA-2012-1794
Check for the Version of thunderbird OpenVAS Vulnerability Test Fedora Update for thunderbird FEDORA-2012-1794 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Microsoft RDP Server Private Key Information Disclosure Vulnerability
Remote Desktop Protocol server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
CVE-2010-1794
CVE-2010-1794 affects Mac OS X WebDAV kernel extension (webdav_fs.kext) prior to or in 10.6.x. The vulnerability resides in webdav_mount() where user-supplied pa_socket_namelen is copied into MALLOC without bounds checking, allowing a local unprivileged user to trigger a kernel panic by issuing a...
Debian Security Advisory DSA 1794-1 (linux-2.6)
The remote host is missing an update to linux-2.6 announced via advisory DSA 1794-1. OpenVAS Vulnerability Test $Id: deb17941.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1794-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CVE-2008-1794
The CVE-2008-1794 entry concerns multiple XSS vulnerabilities in the Drupal Webform module affecting versions 5.x before 5.x-1.10, 5.x-2.x before 5.x-2.0-beta3, and 6.x before 6.x-1.0-beta3. The root cause is unspecified in the provided documents, but remote attackers could inject arbitrary web s...
CVE-2008-1794
Multiple cross-site scripting XSS vulnerabilities in the Webform Drupal module 5.x before 5.x-1.10, 5.x-2.x before 5.x-2.0-beta3, and 6.x before 6.x-1.0-beta3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-1794
The CVE-2007-1794 entry concerns the JavaScript engine in Mozilla 1.7 and earlier on Sun Solaris (versions 8/9/10), where a garbage-collection vector may allow remote code execution by deleting a temporary object that is still in use. This is explicitly linked to CVE-2006-3805 in the description....
Solaris 8 (x86) : 120672-08
Mozilla 1.7x86 for Solaris 8 and 9. Date this patch was last updated by Sun : Sep/02/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2006-1794
CVE-2006-1794 describes an SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions. The affected code paths cited are: (1) mosGetParam in includes/mambo.php via the $username variable, (2) mosMenuCheck in includes/mambo.php via the $task parameter, and (3) showCategory i...
CVE-2002-1794
The CVE-2002-1794 entry concerns HP-UX 11.00 and 11.11 running the LDAP-UX Integration product. The vulnerability is described as affecting the pam_authz component, enabling remote attackers to execute r-commands with the privileges of other users. The provided connected documents confirm the aff...
CVE-2005-1794
Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, enabling remote attackers to spoof server public keys and perform MITM. The root cause is improper verification during key exchange, allowing an attacker ...
CVE-2004-1794
The CVE-2004-1794 entry describes a Cross-site Scripting (XSS) vulnerability in the VCard4J Toolkit. The issue allows remote attackers to inject arbitrary web script or HTML via the NICKNAME tag in a vCard. According to the available data, this is a client-side input handling weakness in VCard4J ...
