123 matches found
[ MDVSA-2010:107 ] mysql
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:107 http://www.mandriva.com/security/ Package : mysql Date : May 25, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been...
RHEL 5 : mysql (RHSA-2010:0442)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0442 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and...
mysql security update
5.0.77-4.3 - Add fixes for CVE-2010-1626, CVE-2010-1848, CVE-2010-1850...
MySQL COM_FIELD_LIST命令绕过权限检查漏洞
BUGTRAQ ID: 40109 CVE ID: CVE-2010-1848 MySQL是一款使用非常广泛的开放源代码关系数据库系统,拥有各种平台的运行版本。 MySQL在处理COMFIELDLIST命令的表格名称参数时没有正确的执行权限检查,对一个表格拥有DELETE或SELECT权限的认证用户可以读取或删除其他表格的内容。 MySQL 5.1/5.0 厂商补丁: Oracle ------ 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://bugs.mysql.com/bug.php?id=53371...
Debian Security Advisory DSA 1848-1 (znc)
The remote host is missing an update to znc announced via advisory DSA 1848-1. OpenVAS Vulnerability Test $Id: deb18481.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1848-1 znc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Debian: Security Advisory (DSA-1848-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-1848
SQL injection vulnerability in the JoomlaMe AgoraGroups aka AG or comagoragroup component 0.3.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a groupdetail action to index.php...
CVE-2009-1848
CVE-2009-1848 affects Joomla! through the JoomlaMe AgoraGroups (com_agoragroup) component (version 0.3.5.3). The vulnerability is a SQL injection in the id parameter of the groupdetail action (index.php), allowing remote attackers to execute arbitrary SQL commands. This is documented in the NVD e...
CVE-2009-1848
creationtimestamp| type| source ---|---|--- 2009-05-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8814...
CVE-2008-1848
CVE-2008-1848 describes a cross-site scripting (XSS) vulnerability in the joomlaXplorer (com_joomlaxplorer) component for Mambo/Joomla!
CVE-2008-1848
creationtimestamp| type| source ---|---|--- 2008-04-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5431...
CVE-2007-1848
CVE-2007-1848 describes a cross-site scripting (XSS) flaw in Drake CMS where the admin/classes/ui.dta.php script fails to properly sanitize the desc[][title] input, allowing remote attackers to inject arbitrary web-script or HTML. The issue is associated with Drake CMS’s beta release; the vendor ...
CVE-2006-1848
LinPHA 1.1.0 is vulnerable to multiple cross-site scripting (XSS) in stats_view.php via the date_from, date_to, and date parameters due to insufficient input sanitization. Remote attackers may inject arbitrary script in the victim’s browser context. Exploit details are evidenced by sources such a...
WS_FTP Server Multiple Vulnerabilities (Nov 2005)
WSFTP Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ipswitch:wsftpserver";...
RHEL 2.1 : dhcpcd (RHSA-2005:603)
An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of bounds memory read bug was found in dhcpcd. A malicious...
dhcpcd security update
CentOS Errata and Security Advisory CESA-2005:603-01 An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of...
Moderate: Red Hat Security Advisory: dhcpcd security update
An updated dhcpcd package that fixes a denial of service issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcpcd package includes a DHCP client daemon. An out of bounds memory read bug was found in dhcpcd. A malicious...
[SECURITY] [DSA 750-1] New dhcpcd packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 750-1 [email protected] http://www.debian.org/security/ Martin Schulze July 11th, 2005 http://www.debian.org/security/faq -...
CVE-2005-1848
CVE-2005-1848 affects the dhcpcd DHCP client (pre-1.3.22). The issue is an out-of-bounds memory read that can cause the dhcpcd daemon to crash, enabling a denial-of-service condition. Public references note advisories and distributions (e.g., Debian DSA-750-1, Gentoo GLSA 200507-16, Slackware SSA...