Sql injection

Multiple SQL injection vulnerabilities in akocomment allow remote attackers to execute arbitrary SQL commands via the 1 acparentid or 2 acitemid parameter to an unspecified component, different vectors than CVE-2006-1421...

Sql injection

SQL injection vulnerability in reply.php in VBZooM 1.12 allows remote attackers to execute arbitrary SQL commands via the UserID parameter to sub-join.php. NOTE: this may be the same as CVE-2006-3691.4...

CVE-2006-7216

CVE-2006-7216 affects Apache Derby prior to 10.2.1.6. The vulnerability arises because Derby does not determine privilege requirements for lock table statements at compilation time, and therefore does not enforce privilege checks at execution time. This allows remote authenticated users to lock a...

CVE-2006-7217

CVE-2006-7217 affects Apache Derby prior to 10.2.1.6. The vulnerability arises because the DropSchemaNode bind phase does not correctly enforce schema privilege requirements, allowing remote authenticated users to execute arbitrary DROP SCHEMA statements when SQL authorization mode is in effect. ...

Security fix for the ALT Linux 9 package apache2 version 2.2.4-alt31

July 5, 2007 Aleksey Avdeev 2.2.4-alt31 - Using Fedora Project patchs for security fixes: + CVE-2006-5752 apache2-2.2.3-fedora-fix-CVE-2006-5752.patch + CVE-2007-1863 apache2-2.2.3-fedora-fix-CVE-2007-1863.patch + CVE-2007-3304 apache2-2.2.4-alt-fix-CVE-2007-3304.0.1.patch...

Security fix for the ALT Linux 8 package apache2 version 2.2.4-alt31

July 5, 2007 Aleksey Avdeev 2.2.4-alt31 - Using Fedora Project patchs for security fixes: + CVE-2006-5752 apache2-2.2.3-fedora-fix-CVE-2006-5752.patch + CVE-2007-1863 apache2-2.2.3-fedora-fix-CVE-2007-1863.patch + CVE-2007-3304 apache2-2.2.4-alt-fix-CVE-2007-3304.0.1.patch...

Mandrake Linux Security Advisory : apache (MDKSA-2007:140)

A vulnerability was discovered in the the Apache modstatus module that could lead to a cross-site scripting attack on sites where the server-status page was publically accessible and ExtendedStatus was enabled CVE-2006-5752. A vulnerability was found in the Apache modcache module that could cause...

Security fix for the ALT Linux 10 package apache2 version 2.2.4-alt31

July 5, 2007 Aleksey Avdeev 2.2.4-alt31 - Using Fedora Project patchs for security fixes: + CVE-2006-5752 apache2-2.2.3-fedora-fix-CVE-2006-5752.patch + CVE-2007-1863 apache2-2.2.3-fedora-fix-CVE-2007-1863.patch + CVE-2007-3304 apache2-2.2.4-alt-fix-CVE-2007-3304.0.1.patch...

Security fix for the ALT Linux 9 package apache2 version 2.2.4-alt30

July 4, 2007 Aleksey Avdeev 2.2.4-alt30 - Add Fedora Project patchs for security fixes: + CVE-2006-5752 apache2-2.2.3-fedora-fix-CVE-2006-5752.patch + CVE-2007-1863 apache2-2.2.3-fedora-fix-CVE-2007-1863.patch + CVE-2007-3304 apache2-2.2.3-fedora-fix-CVE-2007-3304.patch...

Security fix for the ALT Linux 8 package apache2 version 2.2.4-alt30

July 4, 2007 Aleksey Avdeev 2.2.4-alt30 - Add Fedora Project patchs for security fixes: + CVE-2006-5752 apache2-2.2.3-fedora-fix-CVE-2006-5752.patch + CVE-2007-1863 apache2-2.2.3-fedora-fix-CVE-2007-1863.patch + CVE-2007-3304 apache2-2.2.3-fedora-fix-CVE-2007-3304.patch...

Security fix for the ALT Linux 10 package apache2 version 2.2.4-alt30

July 4, 2007 Aleksey Avdeev 2.2.4-alt30 - Add Fedora Project patchs for security fixes: + CVE-2006-5752 apache2-2.2.3-fedora-fix-CVE-2006-5752.patch + CVE-2007-1863 apache2-2.2.3-fedora-fix-CVE-2007-1863.patch + CVE-2007-3304 apache2-2.2.3-fedora-fix-CVE-2007-3304.patch...

CVE-2006-7215

CVE-2006-7215 affects Intel Core 2 Extreme X6800 and Core 2 Duo E6000/E4000 processors. The issue is that memory page Access (A) bit is incorrectly set for a page in certain circumstances when the code segment limit is near the end of a code page. The impact is unclear and described as unknown; a...

VMSA-2007-0005:Updated Service Console packages (XFree86, UP and SMP kernels, Kerberos libraries) resolve security issues.

VMSA-2007-0005 Updated Service Console packages XFree86, UP and SMP kernels, Kerberos libraries resolve security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2007-0005 VMware Security AdvisorySynopsis: Updated Service Console packages XFree86, UP and SMP kernels,...

Fedora Core 5 : httpd-2.2.2-1.3 (2007-617)

The Apache HTTP Server did not verify that a process was an Apache child process before sending it signals. A local attacker with the ability to run scripts on the Apache HTTP Server could manipulate the scoreboard and cause arbitrary processes to be terminated which could lead to a denial of...

Solaris 9 (sparc) : 114356-19

SunOS 5.9: /usr/bin/ssh patch. Date this patch was last updated by Sun : Sep/16/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

WinZip ActiveX Control Instantiation Buffer Overflow (CVE-2006-5198; CVE-2006-6884)

WinZip is a file archiver and compressor for Microsoft Windows. The vulnerability is due to an error in the WinZip FileView ActiveX control WZFILEVIEW.FileViewCtrl.61. To trigger the vulnerability, an attacker can create a malicious web page that initiates the vulnerable ActiveX control with a lo...

Solaris 9 (x86) : 114357-18

SunOS 5.9x86: /usr/bin/ssh patch. Date this patch was last updated by Sun : Sep/16/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (x86) : 123325-03

SunOS 5.10x86: sshd patch. Date this patch was last updated by Sun : Jun/21/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (sparc) : 123324-03

SunOS 5.10: sshd patch. Date this patch was last updated by Sun : Jun/20/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Xerox WorkCentre Multiple OpenSSL Vulnerabilities (XRX07-001)

According to its model number and software version, the remote host is a Xerox WorkCentre device that reportedly suffers from multiple issues in the ESS / Network Controller that could allow remote execution of arbitrary code on the affected device, initiation of denial of service attacks, and...