FreeBSD : apache -- multiple vulnerabilities (c84dc9ad-41f7-11dd-a4f9-00163e000016)

Apache HTTP server project reports : The following potential security flaws are addressed : - CVE-2008-2364: modproxyhttp: Better handling of excessive interim responses from origin server to prevent potential denial of service and high memory usage. Reported by Ryujiro Shibuya. - CVE-2007-6420:...

Fedora 9 : php-5.2.6-2.fc9 (2008-3606)

This release updates PHP to the latest upstream version 5.2.6, fixing multiple bugs and security issues. See upstream release notes for further details: http://www.php.net/releases/526.php It was discovered that the PHP escapeshellcmd function did not properly escape multi-byte characters which a...

CVE-2007-3535

creationtimestamp| type| source ---|---|--- 2008-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5870...

CVE-2007-3048

creationtimestamp| type| source ---|---|--- 2008-06-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/4028...

screen 4.0.3 Local Authentication Bypass Vulnerability (OpenBSD)

Exploit for linux platform in category local exploits ================================================================ screen 4.0.3 Local Authentication Bypass Vulnerability OpenBSD ================================================================ / / / / / / / / / / / / / // / / / / / / / / / // ...

Mozilla Firefox, Thunderbird, Seamonkey. Several vulnerabilitys (Linux)

The remote host is probable affected by the vulnerabilitys described in CVE-2008-0416, CVE-2007-4879, CVE-2008-1195, CVE-2008-1233, CVE-2008-1234, CVE-2008-1235, CVE-2008-1236, CVE-2008-1237, CVE-2008-1238, CVE-2008-1240, CVE-2008-1241 and more. Impact Mozilla contributors mozbugra4, Boris Zbarsk...

Mozilla Firefox, Thunderbird, Seamonkey. Several vulnerabilitys (Windows)

The remote host is probable affected by the vulnerabilities described in CVE-2008-0416, CVE-2007-4879, CVE-2008-1195, CVE-2008-1233, CVE-2008-1234, CVE-2008-1235, CVE-2008-1236, CVE-2008-1237, CVE-2008-1238, CVE-2008-1240, CVE-2008-1241 and more. OpenVAS Vulnerability Test $Id: smbclmozilla.nasl...

fetchmail security announcement fetchmail-SA-2007-02 (CVE-2007-4565)

fetchmail-SA-2007-02: Crash when a local warning message is rejected Topics: Crash when a fetchmail-generated warning message is rejected Author: Matthias Andree Version: 1.1 Announced: 2007-08-28 Type: NULL pointer dereference trigged by outside circumstances Impact: denial of service possible...

Fedora 7 : roundcubemail-0.2-0.alpha.fc7.1 (2008-5315)

XSS fixes. Requires manual intervention for DB upgrades, see UPGRADING for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

forumpayperpost-sql.txt

-+================================================================================+- -+ Forum Pay Per Post Exchange = 2.0 SQL Injection Vulnerabilitys +- -+================================================================================+- By : Stack...

apache -- multiple vulnerabilities

Apache HTTP server project reports: The following potential security flaws are addressed: CVE-2008-2364: modproxyhttp: Better handling of excessive interim responses from origin server to prevent potential denial of service and high memory usage. Reported by Ryujiro Shibuya. CVE-2007-6420:...

[SECURITY] [DSA 1597-1] New mt-daapd packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1597-1 [email protected] http://www.debian.org/security/ Devin Carraway June 12, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1597-1] New mt-daapd packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1597-1 [email protected] http://www.debian.org/security/ Devin Carraway June 12, 2008 http://www.debian.org/security/faq -...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Insanely Simple Blog 0.5 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter, or 2 the term parameter in a search action. NOTE: the currentsubsection parameter is already covered by CVE-2007-3889...

openSUSE 10 Security Update : xorg-x11-Xvnc (xorg-x11-Xvnc-5317)

This update fixes multiple vulnerabilities reported by iDefense : - CVE-2008-2360 - RENDER Extension heap buffer overflow - CVE-2008-2361 - RENDER Extension crash - CVE-2008-2362 - RENDER Extension memory corruption - CVE-2008-1379 - MIT-SHM arbitrary memory read - CVE-2008-1377 - RECORD and...

Debian Security Advisory DSA 1588-2 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1588-2. OpenVAS Vulnerability Test $Id: deb15882.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1588-2 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1588-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BrowserCRM 5.002.00 (clients.php) Remote File Inclusion Vulnerability

No description provided by source. script: browsercrm-5.002.00 remote file including Download From: http://www.browsercrm.com/download/browsercrm-5.002.00.tar.gz dork: Copyright 2007 BrowserCRM Ltd Vuln Code : requireonce$bcrmpubroot . "/publicprepend.inc.php" exploit:...

MS08-011: Vulnerabilities in Microsoft Works File Converter Could Allow Remote Code Execution (947081)

The remote host is running a version of Microsoft Office Works Converter that may allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it. Then a bug in the wps header handler would result in code execution. C...

Cross site scripting

Cross-site scripting XSS vulnerability in Fenriru Sleipnir 2.7.1 Release2 and earlier, Portable Sleipnir 2.7.1 Release2 and earlier, and Grani 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a history mechanism and favorites search...