Microsoft IIS WebDAV Write Access Code Execution

No description provided by source. $Id: iiswebdavuploadasp.rb 10397 2010-09-20 15:59:46Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...

Ubuntu: Security Advisory (USN-1994-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-1994

CVE-2013-1994 concerns multiple integer overflows in X.org’s libchromeXvMC and libchromeXvMCPro used by openChrome 0.3.2 and earlier. The issue allows triggering allocation of insufficient memory and a buffer overflow via vectors related to uniDRIOpenConnection and uniDRIGetClientDriverName, as d...

Ubuntu: Security Advisory (USN-1871-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for xorg-x11-drv-openchrome FEDORA-2013-9138

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 17 : xorg-x11-drv-openchrome-0.3.3-1.fc17 (2013-9138)

Fix integer overflow in libchromeXvMC CVE-2013-1994. - Various bug fixes and improvements. Update to latest upstream release. For details, see http://cgit.freedesktop.org/openchrome/xf86-video-open chrome/tree/NEWS?id=release033 Note that Tenable Network Security has extracted the preceding...

Fedora 19 : xorg-x11-drv-openchrome-0.3.3-1.fc19 (2013-8991)

Fix integer overflow in libchromeXvMC CVE-2013-1994. - Various bug fixes and improvements. Update to latest upstream release. For details, see http://cgit.freedesktop.org/openchrome/xf86-video-open chrome/tree/NEWS?id=release033 Note that Tenable Network Security has extracted the preceding...

Fedora 18 : xorg-x11-drv-openchrome-0.3.3-1.fc18 (2013-9114)

Fix integer overflow in libchromeXvMC CVE-2013-1994. - Various bug fixes and improvements. Update to latest upstream release. For details, see http://cgit.freedesktop.org/openchrome/xf86-video-open chrome/tree/NEWS?id=release033 Note that Tenable Network Security has extracted the preceding...

[SECURITY] [DSA 2679-1] xserver-xorg-video-openchrome security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2679-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2679-1] xserver-xorg-video-openchrome security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2679-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-2679-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-1994

TomatoCMS is affected by a SQL injection in the /news/search handler. The vulnerability is triggered via the q parameter (e.g., q=) and creates injectable SQL in conjunction with the PATH_INFO /news/search. Affects TomatoCMS prior to 2.0.5; 2.0.5 fixes the issue, with the vulnerability reappearin...

CVE-2010-1994

SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATHINFO...

Debian DSA-1994-1 : ajaxterm - weak session IDs

It was discovered that Ajaxterm, a web-based terminal, generates weak and predictable session IDs, which might be used to hijack a session or cause a denial of service attack on a system that uses Ajaxterm. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

CVE-2009-1994

CVE-2009-1994 is an Oracle Database 10.1.0.5 vulnerability in the Spatial component (MDSYS.PRVT_CMT_CBK). The issue is listed under the October 2009 CPU with CVSS v2 base score 6.5 (MEDIUM). It can be triggered by an authenticated remote user via Oracle Net to execute code on MDSYS.PRVT_CMT_CBK, ...

CVE-2008-1994

Multiple stack-based buffer overflows in a acon.c, b menu.c, and c child.c in Acon 1.0.5-5 through 1.0.5-7 allow local users to execute arbitrary code via 1 a long HOME environment variable or 2 a large number of terminal columns...

CVE-2008-1994

CVE-2008-1994 affects Acon 1.0.5-5 through 1.0.5-7, with multiple stack-based buffer overflows in the files acon.c , menu.c , and child.c . The vulnerabilities enable local users to execute arbitrary code via (1) a long HOME environment variable or (2) a large number of terminal columns. Root cau...

HP-UX PHNE_35729 : HP-UX Running ARPA Transport, Local Denial of Service (DoS) (HPSBUX02205 SSRT061120 rev.1)

s700800 11.00 cumulative ARPA Transport patch : A potential security vulnerability has been identified with HP-UX running ARPA Transport. The vulnerability could be exploited by a local user to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

CVE-2007-1994

Concrete details found: CVE-2007-1994 concerns HP-UX B.11.00 ARPA Transport vulnerable to local Denial of Service. The affected component is HP-UX ARPA Transport (Address and Routing Parameter Area) and the vulnerability is triggered by local users, per HP patches and advisories. Remediation is a...

CVE-2006-1994

The CVE-2006-1994 entry concerns a PHP remote file inclusion flaw in dForum 1.5 and earlier. The root cause is an insecure use of the DFORUM_PATH parameter, allowing an attacker to supply a URL that is included by multiple PHP pages (about.php, admin.php, anmelden.php, losethread.php, config.php,...