CVE-2011-1838

Vulnerability summary: TWiki before 5.0.2 contains multiple XSS flaws in TemplateLogin.pm, exploitable via the origurl parameter in both the view and login scripts. The OpenVAS NASL entry and CVE records corroborate the vulnerable module and vector. Impact (as described): cross-site scripting cou...

TWiki 5.0.1 Cross Site Scripting

Information ----------------------------------- Name : XSS vulnerability in TWiki Software : TWiki 5.0.1 and possibily below. Vendor Hompeage : http://twiki.org/ Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Mesut Timur Advisory Reference : NS-11-005 CVE : CVE-2011-1838...

CVE-2011-1838

creationtimestamp| type| source ---|---|--- 2011-05-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35761...

CVE-2010-1838

Directory Services in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 does not properly handle errors associated with disabled mobile accounts, which allows remote attackers to bypass authentication by providing a valid account name...

CVE-2010-1838

CVE-2010-1838 affects Apple Mac OS X Directory Services: a data/error-handling flaw in disabled mobile account processing can allow a local attacker to bypass password validation and log in with a valid account name on Mac OS X 10.5.8 and 10.6.x up to but not including 10.6.5. The issue is addres...

Debian DSA-1838-1 : pulseaudio - privilege escalation

Tavis Ormandy and Julien Tinnes discovered that the pulseaudio daemon does not drop privileges before re-executing itself, enabling local attackers to increase their privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CentOS 5 : thunderbird (CESA-2009:1126)

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were...

CentOS 5 : firefox (CESA-2009:1095)

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

SLES11: Security update for MozillaFirefox

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: MozillaFirefox MozillaFirefox-translations mozilla-xulrunner190 mozilla-xulrunner190-gnomevfs mozilla-xulrunner190-translations More details may also be foun...

SLES9: Security update for epiphany

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla mozilla-devel mozilla-dom-inspector mozilla-irc mozilla-mail mozilla-venkman For more information, please visit the referenced security advisories...

SLES9: Security update for epiphany

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla mozilla-devel mozilla-dom-inspector mozilla-irc mozilla-mail mozilla-venkman For more information, please visit the referenced security advisories...

openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-6347)

Mozilla Thunderbird was updated to the 2.0.0.22 security release. It fixes various bugs and security issues : - MFSA-2009-14/CVE-2009-1302/CVE-2009-1303/CVE-2009-1304 CVE-2009-1305 Crashes with evidence of memory corruption rv:1.9.0.9 - MFSA 2009-17/CVE-2009-1307 bmo481342 Same-origin violations...

Debian: Security Advisory (DSA-1838-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Core 11 FEDORA-2009-7614 (seamonkey)

The remote host is missing an update to seamonkey announced via advisory FEDORA-2009-7614. OpenVAS Vulnerability Test $Id: fcore20097614.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7614 seamonkey Authors: Thomas Reinke Copyright: Copyright c 200...

Fedora Core 11 FEDORA-2009-7614 (seamonkey)

The remote host is missing an update to seamonkey announced via advisory FEDORA-2009-7614. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-1000)

The Mozilla Firefox browser was updated to version 3.0.11, fixing various bugs and security issues : - MFSA 2009-24/CVE-2009-1392/CVE-2009-1832/CVE-2009-1833 Crashes with evidence of memory corruption rv:1.9.0.11 - MFSA 2009-25/CVE-2009-1834 bmo479413 URL spoofing with invalid unicode characters ...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-1091)

Mozilla Thunderbird was updated to the 2.0.0.22 security release. It fixes various bugs and security issues : - MFSA-2009-14/CVE-2009-1302/CVE-2009-1303/CVE-2009-1304 CVE-2009-1305 Crashes with evidence of memory corruption rv:1.9.0.9 - MFSA 2009-17/CVE-2009-1307 bmo481342 Same-origin violations...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-1091)

Mozilla Thunderbird was updated to the 2.0.0.22 security release. It fixes various bugs and security issues : - MFSA-2009-14/CVE-2009-1302/CVE-2009-1303/CVE-2009-1304 CVE-2009-1305 Crashes with evidence of memory corruption rv:1.9.0.9 - MFSA 2009-17/CVE-2009-1307 bmo481342 Same-origin violations...

Fedora 10 : seamonkey-1.1.17-1.fc10 (2009-7567)

Update to upstream version 1.1.17, fixing multiple security flaws: http://www.mozilla.org/security/known- vulnerabilities/seamonkey11.htmlseamonkey1.1.17 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 11 : seamonkey-1.1.17-1.fc11 (2009-7614)

Update to upstream version 1.1.17, fixing multiple security flaws: http://www.mozilla.org/security/known- vulnerabilities/seamonkey11.htmlseamonkey1.1.17 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...