153 matches found
[slackware-security] qt
New qt packages are available for Slackware 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/qt-4.8.6-i486-1slack14.1.txz: Upgraded. Fixed issues with BMP, ICO, and GIF handling that could lead to a denial of service or the...
Slackware 14.1 / current : qt (SSA:2015-111-13)
New qt packages are available for Slackware 14.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2015-111-13. The text itself is copyright C Slackware...
Mandriva Linux Security Advisory : python-numpy (MDVSA-2015:077)
Updated python-numpy packages fix security vulnerabilities : f2py insecurely used a temporary file. A local attacker could use this flaw to perform a symbolic link attack to modify an arbitrary file accessible to the user running f2py CVE-2014-1858, CVE-2014-1859. %NASLMINLEVEL 70300 C Tenable...
Fedora Update for numpy FEDORA-2014-2387
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : numpy-1.7.2-8.fc19 (2014-2387)
Fix CVE-2014-1858, CVE-2014-1859: 1062009, 1062359 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Updated python-numpy packages fix security vulnerabilities
f2py insecurely used a temporary file. A local attacker could use this flaw to perform a symbolic link attack to modify an arbitrary file accessible to the user running f2py CVE-2014-1858, CVE-2014-1859...
Fedora 20 : numpy-1.8.0-4.fc20 (2014-2289)
Fix CVE-2014-1858, CVE-2014-1859: 1062009, 1062359 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Oracle Linux 3 / 4 : xscreensaver (ELSA-2007-0322)
From Red Hat Security Advisory 2007:0322 : An updated xscreensaver package that fixes a security flaw is now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. XScreenSaver is a collection of...
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : libxi vulnerabilities (USN-1859-1)
Ilja van Sprundel discovered multiple security issues in various X.org libraries and components. An attacker could use these issues to cause applications to crash, resulting in a denial of service, or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding...
CVE-2013-1859
The vulnerability CVE-2013-1859 affects the Drupal contributed module Node Parameter Control (6.x-1.x). The module does not properly restrict access to its configuration options, enabling remote attackers to read and edit configuration via unspecified vectors. All 6.x-1.x versions are affected; D...
SA-CONTRIB-2013-034 - Node Parameter Control - Access Bypass
This module enables you to limit the visibility of the fields on the node edit form. The module doesn't sufficiently check access before allowing users to view and edit the configuration options allowing anonymous and authenticated users the ability to view and edit the configuration options. CVE...
Scientific Linux Security Update : xscreensaver on SL3.0.x i386/x86_64
Alex Yamauchi discovered a flaw in the way XScreenSaver verifies user passwords. When a system is using a remote directory service for login credentials, a local attacker may be able to cause a network outage causing XScreenSaver to crash, unlocking the screen. CVE-2007-1859 %NASLMINLEVEL 70300 C...
Scientific Linux Security Update : xscreensaver on SL4 i386/x86_64
Alex Yamauchi discovered a flaw in the way XScreenSaver verifies user passwords. When a system is using a remote directory service for login credentials, a local attacker may be able to cause a network outage causing XScreenSaver to crash, unlocking the screen. CVE-2007-1859 %NASLMINLEVEL 70300 C...
Microsoft SharePoint XSS scriptresx.ashx Elevation of Privilege (MS12-050; CVE-2012-1859)
An information disclosure and elevation of privilege vulnerability has been reported in Microsoft SharePoint...
CVE-2011-1859
CVE-2011-1859 affects HP Service Manager (versions 7.02, 7.11, 9.20, 9.21) and HP Service Center 6.2.8. The HP Security Bulletin SEC-HP (HPSBMA02674) documents remote disclosure of privileged information and related flaws (including unauthorized remote access) in the Web Tier/Web components, with...
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6331)
This update of acroread fixes the following vulnerabilities : - stack overflow that could lead to code execution. CVE-2009-1855 - integer overflow with potential to lead to arbitrary code execution. CVE-2009-1856 - memory corruption with potential to lead to arbitrary code execution. CVE-2009-185...
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6398)
This update of acroread fixes the following vulnerabilities : - stack overflow that could lead to code execution. CVE-2009-1855 - integer overflow with potential to lead to arbitrary code execution. CVE-2009-1856 - memory corruption with potential to lead to arbitrary code execution. CVE-2009-185...
DeluxeBB 'newpost.php' SQL Injection Vulnerability
The host is running DeluxeBB and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbdeluxbbsqlinjectionvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ DeluxeBB 'newpost.php' SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Networks GmbH,...
DeluxeBB <= 1.3 newpost.php页面SQL注入漏洞
BUGTRAQ ID: 39962 CVE ID: CVE-2010-1859 DeluxeBB是一款基于PHP的论坛程序。 DeluxeBB的newpost.php页面没有正确地过滤用户所提交的SQL查询参数： //inserting thread $db-unbufferedquery"INSERT INTO ".$prefix."threads VALUES NULL, '$infofid', '".$COOKIE'memberid'."', '$subject', '$posticon', '0', '0', '$lock', '$pin', '0',...