DEBIAN-CVE-2012-1906

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from a remote source, which allows local users to overwrite arbitrary files or install arbitrary packages...

CVE-2012-1906

CVE-2012-1906 affects Puppet 2.6.x (before 2.6.15), 2.7.x (before 2.7.13), and Puppet Enterprise users 1.0–2.5.x before 2.5.1. The root cause is the use of predictable file names when installing Mac OS X packages from a remote source, enabling a local attacker to overwrite arbitrary files or inst...

FreeBSD Ports: puppet

The remote host is missing an update to the system as announced in the referenced advisory. VID 607d2108-a0e4-423a-bf78-846f2a8f01b0 OpenVAS Vulnerability Test $ Description: Auto generated from VID 607d2108-a0e4-423a-bf78-846f2a8f01b0 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2451-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2451-1] puppet security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2451-1 [email protected] http://www.debian.org/security/ Nico Golde April 13, 2012 http://www.debian.org/security/faq -...

USN-1419-1: Puppet vulnerabilities

It was discovered that Puppet used a predictable filename when downloading Mac OS X package files. A local attacker could exploit this to overwrite arbitrary files. CVE-2012-1906 It was discovered that Puppet incorrectly handled filebucket retrieval requests. A local attacker could exploit this t...

CVE-2011-1906

Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, enabling remote attackers to read the event collection table via the management port. This is a separate issue from CVE-2011-0756, which involves hardcoded console credentials. The...

CVE-2010-1906

The CVE-2010-1906 entry concerns tgsrv.exe in Consona Dynamic Agent components (Repair Service, Repair Manager, Subscriber Activation, Subscriber Agent). The root cause is reliance on a predictable timestamp field to validate input to the named pipe \.\pipe\__RepairService_pipe__company, enabling...

Debian DSA-1906-1 : clamav - End-of-life announcement for clamav in stable and oldstable

Security support for clamav, an anti-virus utility for Unix, has been discontinued for the stable distribution lenny and the oldstable distribution etch. Clamav Upstream has stopped supporting the releases in etch and lenny. Also, it is not easily possible to receive signature updates for the vir...

IBM DB2 Multiple Vulnerabilities (Linux)

The host is installed with IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodibmdb2multdosvulnlin01.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM DB2 Multiple Vulnerabilities Linux Authors: Antu Sanadi Updated KB Name Antu Sanadi on 2009-12-21 Copyright:...

IBM Db2 Multiple Vulnerabilities - Windows

IBM Db2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1906

The CVE-2009-1906 entry concerns IBM DB2’s DRDA Services component. The vulnerability affects IBM DB2 9.1 before FP7 and 9.5 before FP4, where a remote attacker can trigger a denial of service (memory corruption and application crash) by sending an IPv6-formatted correlation token in the APPID st...

CVE-2008-1906

CVE-2008-1906 describes a cross-site scripting (XSS) vulnerability in cpCommerce 1.1.0, specifically in calendar.php. The issue allows remote attackers to inject arbitrary web script or HTML via the year parameter in a view.year action. The description and associated references confirm the vulner...

CVE-2008-1906

creationtimestamp| type| source ---|---|--- 2008-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5437...

CVE-2007-1906

Directory traversal vulnerability in richedit/keyboard.php in eCardMAX HotEditor Hot Editor 4.0, and the HotEditor plugin for MyBB, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the first parameter...

CVE-2007-1906

CVE-2007-1906 affects eCardMAX HotEditor (Hot Editor) 4.0 and the HotEditor plugin for MyBB. The vulnerability is a directory traversal that allows remote attackers to include and execute arbitrary local files by supplying a .. sequence in the first parameter of richedit/keyboard.php. Impact desc...

CVE-2006-1906

Cross-site scripting XSS vulnerability in index.php in jjgan852 phpLister 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-1906

CVE-2006-1906 is an XSS vulnerability in the index.php of jjgan852 phpLister 0.4.1 that allows remote attackers to inject arbitrary web script or HTML via the page parameter. The issue affects phpLister 0.4.1 and is rated with a NVD CVSS v2 base score of 2.6 (LOW) with network attack vector and h...

CVE-2005-1906

The connected PT-2005-2863 entry provides concrete details for CVE-2005-1906: Livingmailing version 1.3 is affected, specifically the login.asp component. The vulnerability is an SQL injection via the password parameter, enabling remote attackers to execute arbitrary SQL commands. The entry notes...

CVE-2005-1906

SQL injection vulnerability in login.asp in livingmailing 1.3 allows remote attackers to execute arbitrary SQL commands via the password. NOTE: there is little public information about this product and its vendor, and the original researcher announcement is no longer available...