CVE-2010-1956

Directory traversal vulnerability in the Gadget Factory comgadgetfactory component 1.0.0 and 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-1956

Directory traversal vulnerability in the Gadget Factory comgadgetfactory component 1.0.0 and 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-1956

Affected software: Joomla! Gadget Factory component (com_gadgetfactory) versions 1.0.0 and 1.5.0. Vulnerability: Local File Inclusion via directory traversal, allowing a remote attacker to read arbitrary files by supplying a .. (dot dot) in the controller parameter to index.php. Root cause: Insuf...

CVE-2010-1956

creationtimestamp| type| source ---|---|--- 2010-04-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12285...

Debian DSA-1956-1 : xulrunner - several vulnerabilities

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications, such as the Iceweasel web browser. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3986 : David James discovered that the window.opener...

Debian: Security Advisory (DSA-1956-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Security Advisory MDVSA-2009:314 (apr)

The remote host is missing an update to apr announced via advisory MDVSA-2009:314. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

SLES10: Security update for libapr-util1

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libapr-util1 libapr-util1-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES11: Security update for libapr-util1

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libapr-util1 More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at http://download.novell.com/patch/finder/...

SLES11: Security update for libapr-util1

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libapr-util1 More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references. SPDX-FileCopyrightText:...

SuSE 11 Security Update : libapr-util1 (SAT Patch Number 969)

This update of libapr-util1 fixes a memory consumption bug in the XML parser that can cause a remote denial-of-service vulnerability in applications using APR WebDAV for example CVE-2009-1955. Additionally a one byte buffer overflow in function aprbrigadevprintf CVE-2009-1956 and buffer underflow...

SuSE 10 Security Update : libapr-util1 (ZYPP Patch Number 6289)

This update of libapr-util1 fixes a memory consumption bug in the XML parser that can cause a remote denial-of-service vulnerability in applications using APR WebDAV for example CVE-2009-1955. Additionally a one byte buffer overflow in function aprbrigadevprintf CVE-2009-1956 and buffer underflow...

Security fix for the ALT Linux 9 package apache2 version 2.2.12-alt1

July 30, 2009 Aleksey Avdeev 2.2.12-alt1 - 2.2.12 - Security fixes CVE-2008-2939, CVE-2009-0023, CVE-2009-1191, CVE-2009-1195, CVE-2009-1890, CVE-2009-1891, CVE-2009-1955 and CVE-2009-1956 Closes: 20218, 20674 and 20760 - Add support new MIME types Closes: 11460...

Fedora Core 9 FEDORA-2009-6014 (apr-util)

The remote host is missing an update to apr-util announced via advisory FEDORA-2009-6014. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 9 FEDORA-2009-6014 (apr-util)

The remote host is missing an update to apr-util announced via advisory FEDORA-2009-6014. OpenVAS Vulnerability Test $Id: fcore20096014.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-6014 apr-util Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-5969 (apr-util)

The remote host is missing an update to apr-util announced via advisory FEDORA-2009-5969. OpenVAS Vulnerability Test $Id: fcore20095969.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5969 apr-util Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-6261 (apr-util)

The remote host is missing an update to apr-util announced via advisory FEDORA-2009-6261. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora 9 : apr-util-1.2.12-7.fc9 (2009-6014)

Backport security fixes from upstream version 1.3.7: - CVE-2009-0023 Fix underflow in aprstrmatchprecompile. - CVE-2009-1955 Fix a denial of service attack against the aprxml interface using the 'billion laughs' entity expansion technique. - CVE-2009-1956 Fix off by one overflow in...

Fedora 10 : apr-util-1.3.7-1.fc10 (2009-5969)

Update to upstream version 1.3.7, see: http://svn.apache.org/repos/asf/apr /apr-util/tags/1.3.7/CHANGES Security fixes: - CVE-2009-0023 Fix underflow in aprstrmatchprecompile. - CVE-2009-1955 Fix a denial of service attack against the aprxml interface using the 'billion laughs' entity expansion...

Apache APR-Utils Multiple Denial of Service Vulnerabilities

The host is installed with Apache APR-Utils and is prone to Multiple Denial of Service Vulnerabilities. OpenVAS Vulnerability Test $Id: secpodapacheapr-utilsmultdosvulnjun09.nasl 5055 2017-01-20 14:08:39Z teissa $ Apache APR-Utils Multiple Denial of Service Vulnerabilities Authors: Nikita MR...