18185 matches found
DSA-1551-1 python2.4 - several vulnerabilities
Bulletin has no description...
Fedora 8 : nagios-plugins-1.4.11-2.fc8 (2008-3061)
Upstream released a new version. This also fixes CVE-2007-5198 315101. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
RHEL 3 / 4 / 5 : ImageMagick (RHSA-2008:0145)
Updated ImageMagick packages that correct several security issues are now available for Red Hat Enterprise Linux versions 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagick is an image display and manipulation tool for the...
wikepage-xss.txt
Wikepage Wiki v.2007-2 Cross-Site Scripting Author: Gerendi Sandor Attila Date: April 09, 2008 Package: Wikepage Wiki Product homepage: http://wikepage.org/ Versions Affected: v.2007-2 Other versions may also be affected Severity: XSS Input passed to "wiki" in "index.php" is not properly sanitise...
Fedora 7 : nagios-plugins-1.4.11-2.fc7 (2008-3146)
Upstream released a new version. This also fixes CVE-2007-5198 315101. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
openoffice.org security update
1.1.5-10.0.3 - rhbz435685 CVE-2007-5746, CVE-2008-0320 Various flaws...
Stack overflow
Stack-based buffer overflow in the ParseSSA function modules/demux/subtitle.c in VLC 0.8.6e allows remote attackers to execute arbitrary code via a long subtitle in an SSA file. NOTE: this issue is due to an incomplete fix for CVE-2007-6681...
CVE-2008-1881
Stack-based buffer overflow in the ParseSSA function modules/demux/subtitle.c in VLC 0.8.6e allows remote attackers to execute arbitrary code via a long subtitle in an SSA file. NOTE: this issue is due to an incomplete fix for CVE-2007-6681...
CVE-2007-6715
CVE-2007-6715 : Mozilla Firefox is vulnerable to a denial of service (crash) via a crafted image, as demonstrated by the zzuf lol-firefox.gif test case. Public sources (NVD/SUSE/Ubuntu) confirm the vulnerability in Firefox and note the fix has been applied in the product (status: Fixed). The avai...
CVE-2007-6714
CVE-2007-6714 affects DBMail prior to 2.2.9 where authldap against LDAP servers that allow anonymous login (e.g., Active Directory) lets remote attackers bypass authentication with an empty password. This causes LDAP bind to succeed via anonymous authentication, enabling partial confidentiality/i...
CVE-2007-5745
OpenOffice.org before 2.4 is affected by CVE-2007-5745 (and related issues in related notes) due to heap-based overflows in the Quattro Pro import filter, EMF parser, and OLE Structured Storage parser. Exploitation could crash the application or allow arbitrary code execution when processing craf...
ImageMagick security update
CentOS Errata and Security Advisory CESA-2008:0145 Updated ImageMagick packages that correct several security issues are now available for Red Hat Enterprise Linux versions 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagic...
Important: Red Hat Security Advisory: openoffice.org security update
Updated openoffice.org 2.x packages to correct multiple security issues are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity...
Sun JDK/JRE: Multiple vulnerabilities
Background The Sun Java Development Kit JDK and the Sun Java Runtime Environment JRE provide the Sun Java platform. Description Multiple vulnerabilities have been discovered in Sun Java: Daniel Soeder discovered that a long codebase attribute string in a JNLP file will overflow a stack variable...
OpenOffice < 2.4 Multiple Vulnerabilities
Binary data 4474.prm...
IBM DB2数据库db2dasrrm缓冲区溢出和文件创建漏洞
BUGTRAQ ID: 27870 CVECAN ID: CVE-2007-5758,CVE-2007-5664 IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。...
ImageMagick security update
6.2.8.0-4.el51.1 - backport functionality for CVE patches - Add patch for CVE-2007-1797 235071 - Add patch for CVE-2007-4988 310081 - Add patch for CVE-2007-4985 310091 - Add patch for CVE-2007-4986 310121 - Add patch for CVE-2008-1096 286411 - Add patch for CVE-2008-1097 285861...
Debian DSA-1543-1 : vlc - several vulnerabilities
Luigi Auriemma, Alin Rad Pop, Remi Denis-Courmont, Quovodis, Guido Landi, Felipe Manzano, Anibal Sacco and others discovered multiple vulnerabilities in vlc, an application for playback and streaming of audio and video. In the worst case, these weaknesses permit a remote, unauthenticated attacker...
SuSE 10 Security Update : flash-player (ZYPP Patch Number 5159)
This flash player update to version 9.0.124.0 fixes several security problems. In the worst case an attacker could potentially have flash-player execute arbitrary code via specially crafted files. CVE-2007-5275 / CVE-2007-6243 / CVE-2007-6637 / CVE-2007-6019 / CVE-2007-0071 / CVE-2008-1655 /...