Fedora Update for kernel FEDORA-2010-9209

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for moin FEDORA-2010-9876

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for openssl FEDORA-2010-9639

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for kernel FEDORA-2010-9209

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2010-9209 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Apple iTunes < 9.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 9.2. As such, it may be affected by multiple vulnerabilities : - A heap-based buffer overflow in the handling of images with an embedded ColorSync profile may lead to an application crash or arbitrary code execution...

Apple iTunes < 9.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 9.2. It is, therefore, affected by multiple vulnerabilities : - A heap-based buffer overflow vulnerability exists in the handling of images with an embedded ColorSync profile. By using a specially crafted image, a remote attacker...

Design/Logic Flaw

istream.c in w3m 0.5.2 and possibly other versions, when sslverifyserver is enabled, does not properly handle a '\0' character in a domain name in the 1 subject's Common Name or 2 Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary S...

CVE-2009-3793

Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service memory consumption or possibly execute arbitrary code via unknown vectors...

CVE-2009-3793

Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service memory consumption or possibly execute arbitrary code via unknown vectors...

CVE-2009-3793

CVE-2009-3793 affects Adobe Flash Player prior to 9.0.277.0 and Flash Player 10.x prior to 10.1.53.64, and Adobe AIR prior to 2.0.2.12610. The vulnerability is described as unspecified with potential for memory consumption-based Denial of Service or possibly arbitrary Code Execution via unknown v...

CVE-2009-4893

UnrealIRCd is affected by CVE-2009-4893 in versions 3.2beta11 through 3.2.8 where the vulnerability is a buffer overflow in the user authentication path when the noident option is enabled. The impact described in the sources is that a remote attacker can crash the server and may potentially execu...

Mac OS X 10.6.x < 10.6.4 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.4. Mac OS X 10.6.4 contains security fixes for the following components : - CUPS - DesktopServices - Flash Player plug-in - Folder Manager - Help Viewer - iChat - ImageIO - Kerberos - Kernel - libcurl - Network...

Adobe - JBIG2Decode Memory Corruption (Metasploit) (1)

$Id: adobejbig2decode.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)

This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...

openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)

This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...

java security update

CentOS Errata and Security Advisory CESA-2010:0339 Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring Syst...

CVE-2009-4883

SQL injection vulnerability in index.php in PHPRecipeBook 2.24 and 2.39 allows remote attackers to execute arbitrary SQL commands via the 1 baseid or 2 courseid parameter in a search action...

CVE-2009-4890

CVE-2009-4890 describes multiple cross-site scripting (XSS) vulnerabilities in the login application of vBook 4.2.17, allowing remote attackers to inject arbitrary script/HTML via the 1) title and 2) message parameters. The affected product is the login component of vBook; the underlying cause is...

CVE-2009-4885

CVE-2009-4885 is a Cross-site Scripting (XSS) vulnerability in phpCommunity 2, version 2.1.8, affecting templates/1/login.php. An attacker can inject arbitrary script/HTML via the msg parameter. CVSS v2 base score: 4.3 (Medium); impact is limited to partial integrity due to user-supplied content,...

CVE-2009-4886

CVE-2009-4886 affects phpCommunity 2.x (notably 2.1.8) with directory traversal flaws that let an attacker read arbitrary server files via the file parameter to module/admin/files/show_file.php or the path parameter to module/admin/files/show_source.php. The OpenVAS entry indicates multiple remot...