openSUSE 10 Security Update : cups (cups-2527)

This update fixes a vulnerability which occurs while processing a special PDF file. This bug can lead to a denial-of-service condition, or a memory corruption, or to arbitrary code execution. CVE-2007-0104 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

openSUSE 10 Security Update : lighttpd (lighttpd-3090)

Two remotely exploitable DoS vulnerabilities in lighttpd can be used to crash lighttpd or make it waste CPU time in an enless loop CVE-2007-1869, CVE-2007-1870. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-3547)

This update brings Mozilla Firefox to security update version 2.0.0.4 This is a major upgrade from the Firefox 1.5.0.x line for SUSE Linux 10.0 and 10.1. - MFSA 2007-17 / CVE-2007-2871 : Chris Thomas demonstrated that XUL popups opened by web content could be placed outside the boundaries of the...

openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-2734)

This update brings Mozilla Thunderbird to version 1.5.0.10. It contains stability fixes and some security fixes : - MFSA 2007-01: As part of the Thunderbird 1.5.0.10 update releases several bugs were fixed to improve the stability of the browser. Some of these were crashes that showed evidence of...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-2699)

This update brings Mozilla Firefox to security update version 1.5.0.10. - MFSA 2007-01: As part of the Firefox 2.0.0.2 and 1.5.0.10 update releases several bugs were fixed to improve the stability of the browser. Some of these were crashes that showed evidence of memory corruption and we presume...

openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-3545)

This update brings Mozilla Thunderbird to security update version 1.5.0.12. - MFSA 2007-17 / CVE-2007-2871 : Chris Thomas demonstrated that XUL popups opened by web content could be placed outside the boundaries of the content area. This could be used to spoof or hide parts of the browser chrome...

openSUSE 10 Security Update : seamonkey (seamonkey-2691)

This security update brings Mozilla SeaMonkey to version 1.1.1. http://www.mozilla.org/projects/security/known-vulnerabilities.html for more details. It includes fixes to the following security problems : - MFSA 2007-01: As part of the Firefox 2.0.0.2 and 1.5.0.10 update releases several bugs wer...

openSUSE 10 Security Update : seamonkey (seamonkey-3631)

This update brings Mozilla SeaMonkey to security update version 1.1.2 - MFSA 2007-17 / CVE-2007-2871 : Chris Thomas demonstrated that XUL popups opened by web content could be placed outside the boundaries of the content area. This could be used to spoof or hide parts of the browser chrome such a...

openSUSE 10 Security Update : seamonkey (seamonkey-3632)

This update brings Mozilla SeaMonkey to security update version 1.1.2 - MFSA 2007-17 / CVE-2007-2871 : Chris Thomas demonstrated that XUL popups opened by web content could be placed outside the boundaries of the content area. This could be used to spoof or hide parts of the browser chrome such a...

CVE-2007-5480

Multiple cross-site scripting XSS vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter to msg.jsp, and the 2 contentid parameter to tc/contents/home001.jsp...

CVE-2007-5477

Cross-site scripting XSS vulnerability in auth.w in djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin allows remote attackers to inject arbitrary web script or HTML via the redir parameter...

CVE-2007-5477

CVE-2007-5477 is a cross-site scripting (XSS) vulnerability in the auth.w component of the djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin. The issue allows remote attackers to inject arbitrary web script or HTML through the redir parameter. This is a user-facing web context vulnerable to...

CVE-2007-5483

IBM WebSphere Application Server 6.0.x prior to Fix Pack 23 is affected by an unspecified vulnerability in the Administrative Scripting Tools (wsadmin/ANT). The NASL entry explicitly identifies this version range and tool, but provides no technical details on root cause, impact, or exploit vector...

CVE-2007-5484

The CVE-2007-5484 entry documents a directory traversal vulnerability in WWWISIS 7.1, specifically in wxis.exe, where an attacker can cause local file disclosure by supplying a .. (dot dot) in the IsisScript parameter to iah. The vulnerability affects WWWISIS 7.1; the exact vulnerable component i...

CVE-2007-5478

CVE-2007-5478 describes a cross-site scripting (XSS) defect in the Nabh Stringbeans Portal (sbportal) 3.2. The vulnerability allows remote attackers to inject arbitrary web script or HTML through the project_name parameter. The provided documents do not reveal details about the exact root cause b...

CVE-2007-5479

CVE-2007-5479 is a cross-site scripting (XSS) vulnerability disclosed for Xcomputer, affecting the Search.asp functionality. The issue allows remote attackers to inject arbitrary web script or HTML via the EXPS parameter. The provided documents confirm the vulnerability and its presence in the Se...

CVE-2007-5486

CVE-2007-5486 affects dotProject before version 2.1, where the Companies module does not properly enforce privileges. This allows remote attackers to access the Companies module via a crafted URL. The issue is a privilege-check vulnerability leading to unauthorized access (partial confidentiality...

CVE-2007-5482

Affected product : Sun StorEdge/StorageTek 3510 FC Array. Vulnerability class : unspecified vulnerability in the FTP service. Component/firmware : FTP service on the array with firmware before 4.21. Impact : remote attackers with access to the Ethernet management interface can cause a denial of s...

CVE-2007-5485

SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the album parameter...

CVE-2007-5480

CVE-2007-5480 concerns multiple cross-site scripting (XSS) vulnerabilities in InnovaAge InnovaShop. The affected components are the web interfaces handling user-supplied data: the msg.jsp endpoint (parameter: msg) and the tc/contents/home001.jsp page (parameter: contentid). The root cause is unva...