Ubuntu Update for php5 USN-1905-1

Check for the Version of php5 OpenVAS Vulnerability Test $Id: gbubuntuUSN19051.nasl 8650 2018-02-03 12:16:59Z teissa $ Ubuntu Update for php5 USN-1905-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

CVE-2013-1905

Cross-site scripting XSS vulnerability in the Zero Point theme 7.x-1.x before 7.x-1.9 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-1905

The CVE-2013-1905 entry corresponds to a real XSS vulnerability in the Zero Point Drupal theme (7.x-1.x) prior to version 7.x-1.9. The issue arises because the theme does not escape user-supplied text, enabling remote attackers to inject arbitrary script/HTML via untrusted input (e.g., in URLs). ...

SA-CONTRIB-2013-036 - Zero Point - Cross Site Scripting (XSS)

Zero Point is a theme which includes many options, ideal for a wide range of sites. The theme does not escape user supplied text which creates a reflected Cross site scripting XSS vulnerability in URLs. There are no mitigating factors. CVE identifiers issued CVE-2013-1905 Versions affected...

CVE-2011-1905

Technical details about CVE-2011-1905 are not publicly available in the provided connected documents. The records summarize CSRF vulnerabilities in Proofpoint products but do not specify affected components, versions beyond general ranges, or remediation details. Monitor for updates.

CVE-2010-1905

CVE-2010-1905 concerns multiple cross-site scripting (XSS) vulnerabilities in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance. The XSS can be triggered by crafted input to ASP pages, demonstrated via the backurl parameter to sdccommon/verify/asp/n6plugindestructor.asp. The avail...

CVE-2010-1905

creationtimestamp| type| source ---|---|--- 2010-05-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33959...

IBM Db2 Multiple Vulnerabilities - Windows

IBM Db2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM DB2 Multiple Vulnerabilities (Linux)

The host is installed with IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb2multdosvulnlin01.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM DB2 Multiple Vulnerabilities Linux Authors: Antu Sanadi Updated KB Name Antu Sanadi on 2009-12-21 Copyright:...

CVE-2009-1905

The Common Code Infrastructure component in IBM DB2 8 before FP17, 9.1 before FP7, and 9.5 before FP4, when LDAP security aka IBMLDAPauthserver and anonymous bind are enabled, allows remote attackers to bypass password authentication and establish a database connection via unspecified vectors...

CVE-2009-1905

CVE-2009-1905 is an IBM DB2 vulnerability in the Common Code Infrastructure where LDAP authentication (IBMLDAPauthserver) with anonymous bind can be bypassed, allowing remote attackers to establish a database connection without valid credentials. Affected products and versions (as stated): IBM DB...

Gentoo Security Advisory GLSA 200604-15 (xine-ui)

The remote host is missing updates announced in advisory GLSA 200604-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200604-15 (xine-ui)

The remote host is missing updates announced in advisory GLSA 200604-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-1905

CVE-2008-1905 affects NMMediaServer.exe in Nero MediaHome 3.3.3.0 and earlier (as used in Nero 8.3.2.1 and earlier). The vulnerability allows remote denial of service via a crafted request; mode of impact differs from CVE-2007-2322, but both involve NMMediaServer.exe. The CVE description indicate...

Fedora 8 : moin-1.5.8-4.fc8 (2008-1905)

Wed Feb 20 2008 Lubomir Kundrak 1.5.8-4 - Fix CVE-2008-0780 XSS in login action 2f952fa361c7 - Fix CVE-2008-0781 multiple XSS in AttachFile action db212dfc58ef - Fri Feb 8 2008 Matthias Saou 1.5.8-3 - Include e69a16b6e630 1.5 changeset as cookieidfix 432017. Note that Tenable Network Security has...

CVE-2007-1905

CVE-2007-1905 is a cross-site scripting (XSS) vulnerability in Pineapple Technologies QuizShock 1.6.1 and earlier, occurring in auth.php. The issue allows remote attackers to inject arbitrary scripts/HTML by supplying encoded characters in the forward_to parameter (example: "<"

Format string

Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.4 might allow attackers to cause a denial of service via format string specifiers in an MP3 filename specified on the command line. NOTE: this is a different vulnerability than CVE-2006-1905. In addition, if the only attack...

GLSA-200604-15 : xine-ui: Format string vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200604-15 xine-ui: Format string vulnerabilities Ludwig Nussel discovered that xine-ui incorrectly implements formatted printing. Impact : By constructing a malicious playlist file, a remote attacker could exploit these...

CVE-2006-1905

CVE-2006-1905 affects xine (xiTK, xiTk/main.c) with multiple format-string vulnerabilities in the xine UI when processing a long filename on an EXTINFO line in a playlist. A remote attacker could execute arbitrary code via format specifiers. Affected software is xine 0.99.3 (and related CVE-2006-...

CVE-2002-1905

CVE-2002-1905 describes a buffer overflow in the Polycom ViaVideo web server (versions 2.2 and 3.0) that can be triggered by a long HTTP GET request, leading to remote denial of service (crash). Affected software: Polycom ViaVideo web server (2.2, 3.0). Root cause: improper handling of long HTTP ...