96 matches found
Ubuntu 12.04 LTS : linux vulnerability (USN-1992-1)
An information leak was discovered in the Linux kernel when reading broadcast messages from the notifypolicy interface of the IPSec keysocket. A local user could exploit this flaw to examine potentially sensitive information in kernel memory. Note that Tenable Network Security has extracted the...
SuSE 11.3 Security Update : xorg-x11-libs (SAT Patch Number 7944)
This update of xorg-x11-libs fixes several integer and buffer overflow issues. Bug 815451/821663 CVE-2013-1984 / CVE-2013-1985 / CVE-2013-1986 / CVE-2013-1988 / CVE-2013-1990 / CVE-2013-1991 / CVE-2013-1992 / CVE-2013-1995 / CVE-2013-1996 / CVE-2013-1998 / CVE-2013-1999 / CVE-2013-2000 /...
SuSE 11.2 Security Update : xorg-x11-libs (SAT Patch Number 7846)
This update of xorg-x11-libs fixes several integer and buffer overflow issues. bnc815451, bnc821663 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, In...
CVE-2013-1992
Multiple integer overflows in X.org libdmx 1.1.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 DMXGetScreenAttributes, 2 DMXGetWindowAttributes, and 3 DMXGetInputAttributes functions...
Fedora 18 : libdmx-1.1.2-4.20130524git5074d9d64.fc18 (2013-9115)
Update to latest git to fix the following CVEs: CVE-2013-1992 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
Fedora 19 : libdmx-1.1.2-4.20130524git5074d9d64.fc19 (2013-9078)
Update to latest git to fix the following CVEs: CVE-2013-1992 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
[SECURITY] [DSA 2673-1] libdmx security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2673-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...
CVE-2012-1992
CMS Made Simple
CMS Made Simple <= 1.10.3 XSS Vulnerability
Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : CMS Made Simple = 1.10.3 XSS Vulnerability Date : 02-04-2012 Author : Ivano Binetti...
CVE-2011-1992
CVE-2011-1992 describes an information-disclosure vulnerability in the Internet Explorer 8 XSS filter, where a remote attacker could read content from a different domain/zone via a trial-and-error attack. The issue is associated with IE’s XSS Filter Information Disclosure vulnerability, and is ad...
Microsoft Internet Explorer Multiple Vulnerabilities (2618444)
This host is missing an important security update according to Microsoft Bulletin MS11-099. OpenVAS Vulnerability Test $Id: secpodms11-099.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 2618444 Authors: Rachana Shetty Copyright: Copyright c 2011...
Internet Explorer XSS Filter JavaScript Information Disclosure (MS11-099; CVE-2011-1992)
An information disclosure vulnerability has been reported in Internet Explorer IE. The vulnerability is due to an error in the Internet Explorer XSS filter which incorrectly allows attackers to read content from different domains through trial and error attacks. A remote attacker could exploit th...
CVE-2010-1992
CVE-2010-1992 concerns Google Chrome 1.0.154.48, where an HTML document containing many IFRAMEs with src set to a mailto: URL can trigger the browser to launch the mail application repeatedly, causing a denial of service. Root cause: IFRAME elements with mailto: in SRC attribute. Impact: local/re...
Debian DSA-1992-1 : chrony - several vulnerabilities
Several vulnerabilities have been discovered in chrony, a pair of programs which are used to maintain the accuracy of the system clock on a computer. This issues are similar to the NTP security flaw CVE-2009-3563. The Common Vulnerabilities and Exposures project identifies the following problems ...
Debian Security Advisory DSA 1992-1 (chrony)
The remote host is missing an update to chrony announced via advisory DSA 1992-1. OpenVAS Vulnerability Test $Id: deb19921.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1992-1 chrony Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
CVE-2009-1992
CVE-2009-1992 affects Oracle Database Core RDBMS components (versions 9.2.0.8, 10.1.0.5, 10.2.0.4). The vulnerability allows remote attackers to impact confidentiality, integrity, and availability via unknown vectors. The issue is listed in the Oracle October 2009 CPU with a Base Score of 10.0 (C...
SLES9: Security update for ruby
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ruby For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5016692 within the SuSE...
SLES9: Security update for ruby
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ruby For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5016692 within the SuSE...
CVE-2008-1992
The CVE-2008-1992 entry concerns Acidcat CMS 3.4.1, where access to (1) default_mail_aspemail.asp, (2) default_mail_cdosys.asp, and (3) default_mail_jmail.asp is not properly restricted. This improper access could allow remote attackers to bypass restrictions and relay email messages with modifie...
