Cross site scripting

Cross-site scripting XSS vulnerability in Blogn BURO GUN 1.9.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2006-6176...

libtiff security update

CentOS Errata and Security Advisory CESA-2008:0848 Updated libtiff packages that fix various security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages conta...

RHEL 4 : libtiff (RHSA-2008:0848)

Updated libtiff packages that fix various security issues and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff packages contain a library of functions for manipulating Tagged...

Sun Solaris Netscape Portable Runtime API Local Privilege Escalation Vulnerabili

CVE-2006-4842 The Netscape Portable Runtime API running on Sun Solaris 10 operating system is prone to a local privilege-escalation vulnerability. A successful exploit of this issue allows an attacker to gain superuser privileges, completely compromising the affected computer. Version 4.6.1 runni...

Mercur Mailserver/Messaging <= 5.0 IMAP Overflow Vulnerability

The Mercur IMAP4 Service running on the host is vulnerable to buffer overflows by sending a special crafted SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

CVE-2008-3714

Cross-site scripting XSS vulnerability in awstats.pl in AWStats 6.8 allows remote attackers to inject arbitrary web script or HTML via the querystring, a different vulnerability than CVE-2006-3681 and CVE-2006-1945...

Debian Security Advisory DSA 1618-1 (ruby1.9)

The remote host is missing an update to ruby1.9 announced via advisory DSA 1618-1. OpenVAS Vulnerability Test $Id: deb16181.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1618-1 ruby1.9 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1612-1 (ruby1.8)

The remote host is missing an update to ruby1.8 announced via advisory DSA 1612-1. OpenVAS Vulnerability Test $Id: deb16121.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1612-1 ruby1.8 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2006-7233

Cross-site scripting XSS vulnerability in the login form login.jsp of the admin console in Openfire formerly Wildfire 2.6.0, and possibly other versions before 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2006-6199

creationtimestamp| type| source ---|---|--- 2008-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6217 2009-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9329 2009-08-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9360 2010-06-17...

CVE-2006-5016

creationtimestamp| type| source ---|---|--- 2008-08-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6191...

Updated ESX service console packages for Samba and vmnix

I Service Console rpm updates a. Security Update to Service Console Kernel This fix upgrades service console kernel version to 2.4.21-57.EL. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2007-5001, CVE-2007-6151, CVE-2007-6206, CVE-2008-0007,...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the 1 query string to a announcements/messages.php; b lostPassword.php and c profile.php in auth/; d calendar/myagenda.php; e group/group.php; f learningPath.php...

CVE-2008-3315

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the 1 query string to a announcements/messages.php; b lostPassword.php and c profile.php in auth/; d calendar/myagenda.php; e group/group.php; f learningPath.php...

RHEL 4 : mysql (RHSA-2008:0768)

Updated mysql packages that fix various security issues, several bugs, and add an enhancement are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database...

irb, ruby security update

CentOS Errata and Security Advisory CESA-2008:0562 Updated ruby packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting...

CVE-2006-1278

creationtimestamp| type| source ---|---|--- 2008-07-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6040...

Microsoft Dynamics GP拒绝服务和缓冲区溢出漏洞

BUGTRAQ ID: 29991 CVE ID:CVE-2006-5266 CVE-2006-5265 CNCVE ID：CNCVE-20065266 CNCVE-20065265 Microsoft Dynamics GP是一款高效解决方案，可以管理和集成组织内的财务、电子商务、供应链、制造、项目记帐、现场服务、客户关系和人力资源等。 Microsoft Dynamics GP存在多个安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务和缓冲区溢出攻击。 -Microsoft Dynamics...

CVE-2006-5265

CVE-2006-5265 affects Microsoft Dynamics GP (Great Plains) 9.0 and earlier. The vulnerability lies in the Distributed Process Server (DPS) (and DPS messages) where an invalid magic number in a DPS message can cause a crash (DoS). Threats described in connected documents also include DPS overflow ...

CVE-2006-5266

Microsoft Dynamics GP (Great Plains) versions up to 9.0 are affected by multiple buffer-overflow vulnerabilities in DPS/DPM components. Exploitation possible via crafted DPS/DPM messages: long strings, long IPs, or invalid magic numbers, leading to remote code execution with partial impact on con...