RedHat Update for wireshark RHSA-2010:0360-01

Check for the Version of wireshark OpenVAS Vulnerability Test RedHat Update for wireshark RHSA-2010:0360-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for wireshark CESA-2010:0360 centos3 i386

Check for the Version of wireshark OpenVAS Vulnerability Test CentOS Update for wireshark CESA-2010:0360 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

RedHat Update for wireshark RHSA-2010:0360-01

Check for the Version of wireshark OpenVAS Vulnerability Test RedHat Update for wireshark RHSA-2010:0360-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Linux Security Advisory : gimp (MDVSA-2009:332-1)

A vulnerability was discovered and corrected in gimp : Integer overflow in the readchanneldata function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a crafted PSD file that triggers a heap-based buffer overflow CVE-2009-3909. Additionall...

Mandriva Linux Security Advisory : java-1.6.0-openjdk (MDVSA-2010:084)

Multiple Java OpenJDK security vulnerabilities has been identified and fixed : - TLS: MITM attacks via session renegotiation CVE-2009-3555. - Loader-constraint table allows arrays instead of only the b ase-classes CVE-2010-0082. - Policy/PolicyFile leak dynamic ProtectionDomains. CVE-2010-0084. -...

Mandriva Update for openssl MDVSA-2010:076-1 (openssl)

Check for the Version of openssl OpenVAS Vulnerability Test Mandriva Update for openssl MDVSA-2010:076-1 openssl Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for krb5 FEDORA-2010-7130

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2009-4826

Cross-site request forgery CSRF vulnerability in hosting/adminac.php in ScriptsEz Mini Hosting Panel allows remote attackers to hijack the authentication of administrators for requests that alter administrative settings via a cp action...

CVE-2009-4828

Cross-site request forgery CSRF vulnerability in administration/admins.php in Ad Manager Pro aka AdManagerPro 3.0 allows remote attackers to hijack the authentication of administrators for requests that create new administrative users via an admincreated action. NOTE: some of these details are...

Authorization

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware ACE 2.6 before 2.6.1 build 2276...

CVE-2009-4814

Cross-site scripting XSS vulnerability in Wolfram Research webMathematica allows remote attackers to inject arbitrary web script or HTML via the URI to the MSP script...

CVE-2009-4816

Directory traversal vulnerability in api/downloadchecker.php in MegaLab The Uploader 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2009-4825

The CVE-2009-4825 entry relates to 8pixel.net Blog 4, where sensitive data is stored under the web root with insufficient access control, enabling remote retrieval of a database via a direct request for App_Data/sb.mdb. The incident is described as a direct file download vulnerability (no exploit...

CVE-2009-4819

CVE-2009-4819 concerns PHPhotoalbum’s upload.php where there are unrestricted file upload vulnerabilities. The issue arises from double extensions (1) .php.pgif and (2) .php.pjpeg, enabling remote attackers to upload a PHP-disguised file and then access it directly under albums/userpics/ to execu...

CVE-2009-4812

CVE-2009-4812 affects Wolfram Research WebMathematica. An unauthenticated remote attacker can cause the MSP script to disclose the installation path in an error message, resulting in information disclosure. No remediation details are provided in the supplied documents. Exploitation status is not ...

CVE-2009-4814

CVE-2009-4814 describes a cross-site scripting (XSS) vulnerability in Wolfram Research WebMathematica, allowing remote attackers to inject arbitrary web script or HTML via the URI to the MSP script. The documents identify the affected component as the WebMathematica MSP script handling URI input,...

CVE-2009-4827

The CVE-2009-4827 issue affects Mail Manager Pro, specifically the admin.php component. A cross-site request forgery (CSRF) vulnerability exists that allows remote attackers to hijack administrator sessions and perform password-change actions via a crafted request. The underlying impact is that a...

CVE-2009-4818

The CVE-2009-4818 entry refers to an unrestricted file upload vulnerability in PHPSimplicity Simplicity oF Upload 1.3.2. Affected component is upload.php; attackers could upload a double-extension file (e.g., .php.gif) to trigger remote PHP code execution. Public references in the connected docum...

CVE-2009-4829

CVE-2009-4829 affects Drupal’s Automated Logout module, specifically 6.x-1.x before 6.x-1.7 and 6.x-2.x before 6.x-2.3. The issue is an XSS vulnerability that remote authenticated users with administer autologout privileges can exploit to inject arbitrary web script or HTML via unspecified vector...

CVE-2009-4822

CVE-2009-4822 affects Kasseler CMS 1.3.4 via XSS in index.php, exploitable through parameters (do, id, uname). The NVD entry documents multiple XSS vulnerabilities that allow remote script/HTML injection; impact listed as Partial integrity with no confidentiality/availability impact, and no authe...