Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

An updated rhev-hypervisor6 package that fixes two security issues and various bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Installing package Transport Error: Error 1935.An error occurred during the installation of assembly component

Challenge When Veeam Backup & Replication attempts to install the Veeam Transport package VeeamTransport.msiC:\Program Files\Veeam\Backup and Replication\Backup\Packages\VeeamTransport.msi the package fails to install, and the following errors may be displayed in the UI: Installing package...

CVE-2012-1935

CVE-2012-1935 is a documented set of XSS vulnerabilities in Newscoop, affecting versions 3.5.x prior to 3.5.5 and 4.x prior to 4 RC4. The issues arise from insufficient sanitization of user-supplied input in the following parameters: Back (admin/ad.php), token, and f_email (admin/password_check_t...

Multiple vulnerabilities in Newscoop

Advisory ID: HTB23084 Product: Newscoop Vendor: Sourcefabric o.p.s. Vulnerable Versions: 3.5.3 and probably prior, partially 4.0 RC3 Tested Version: 3.5.3 Vendor Notification: 28 March 2012 Vendor Patch: 5 April 2012 Public Disclosure: 18 April 2012 Vulnerability Type: Remote File Inclusion, SQL...

newscoop 3.5.3 - Multiple Vulnerabilities

newscoop 3.5.3 - Multiple Vulnerabilities Advisory ID: HTB23084 Product: Newscoop Vendor: Sourcefabric o.p.s. Vulnerable Versions: 3.5.3 and probably prior, partially 4.0 RC3 Tested Version: 3.5.3 Vendor Notification: 28 March 2012 Vendor Patch: 5 April 2012 Public Disclosure: 18 April 2012...

CVE-2012-1935

creationtimestamp| type| source ---|---|--- 2012-04-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18752...

newscoop 3.5.3 - Multiple Vulnerabilities

Advisory ID: HTB23084 Product: Newscoop Vendor: Sourcefabric o.p.s. Vulnerable Versions: 3.5.3 and probably prior, partially 4.0 RC3 Tested Version: 3.5.3 Vendor Notification: 28 March 2012 Vendor Patch: 5 April 2012 Public Disclosure: 18 April 2012 Vulnerability Type: Remote File Inclusion, SQL...

Newscoop 3.5.3 XSS / RFI / SQL Injection

Exploit for php platform in category web applications Product: Newscoop Vendor: Sourcefabric o.p.s. Vulnerable Versions: 3.5.3 and probably prior, partially 4.0 RC3 Tested Version: 3.5.3 Vendor Notification: 28 March 2012 Vendor Patch: 5 April 2012 Public Disclosure: 18 April 2012 Vulnerability...

Newscoop 3.5.3 XSS / RFI / SQL Injection

Advisory ID: HTB23084 Product: Newscoop Vendor: Sourcefabric o.p.s. Vulnerable Versions: 3.5.3 and probably prior, partially 4.0 RC3 Tested Version: 3.5.3 Vendor Notification: 28 March 2012 Vendor Patch: 5 April 2012 Public Disclosure: 18 April 2012 Vulnerability Type: Remote File Inclusion, SQL...

openMairie openPresse 'dsn[phptype]' LFI Vulnerability

openMairie openPresse is prone to a local file inclusion LFI vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

openMairie openPresse 'dsn[phptype]' Local File Inclusion Vulnerability

This host is running openMairie openPresse and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbopenmairieopenpresselfivuln.nasl 5323 2017-02-17 08:49:23Z teissa $ openMairie openPresse 'dsnphptype' Local File Inclusion Vulnerability Authors: Madhuri D Copyright:...

CVE-2010-1935

Directory traversal vulnerability in scr/soustab.php in openMairie Openpresse 1.01, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

CVE-2010-1935

CVE-2010-1935 affects OpenMairie Openpresse 1.01: a directory traversal/LFI in scr/soustab.php when register_globals is enabled, allowing remote inclusion/execution of local files via dsn[phptype]. Related to CVE-2007-2069. CVSS2 base score 6.8 (MEDIUM). Connected OpenVAS entries corroborate LFI ...

CVE-2010-1935

creationtimestamp| type| source ---|---|--- 2010-04-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12364...

Debian DSA-1935-1 : gnutls13 gnutls26 - several vulnerabilities

Dan Kaminsky and Moxie Marlinspike discovered that gnutls, an implementation of the TLS/SSL protocol, does not properly handle a '\0' character in a domain name in the subject's Common Name or Subject Alternative Name SAN field of an X.509 certificate, which allows man-in-the-middle attackers to...

Debian: Security Advisory (DSA-1935-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1935

CVE-2009-1935 describes an integer overflow in FreeBSD’s pipe_build_write_buffer (sys/kern/sys_pipe.c) within the pipe’s direct write optimization. Affected are FreeBSD 7.1–7.2 and 6.3–6.4. The issue allows local users to bypass virtual-to-physical address lookups and read sensitive data from mem...

FreeBSD Ports: ethereal, ethereal-lite, tethereal, tethereal-lite

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS Windows ASN.1 Remote Exploit (MS04-007)

No description provided by source. Microsoft ASN.1 remote exploit for CVE-2005-1935 Solar Eclipse solareclipse at phreedom dot org http://www.milw0rm.com/sploits/12262006-killbill.tar.gz...

CVE-2008-1935

CVE-2008-1935 affects the Filiale 1.0.4 Joomla! component. The root cause is an SQL injection via the idFiliale parameter, allowing remote attackers to execute arbitrary SQL commands. Reported impact includes partial confidentiality, integrity, and availability. Exploitation details are provided ...