Mandriva Update for libxslt MDVSA-2012:164 (libxslt)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 18 : mingw-libpng-1.5.13-1.fc18 (2012-15592)

This is an update to MinGW cross compiled libpng 1.5.13, including a fix to CVE-2011-3464. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

CVE-2011-4051

creationtimestamp| type| source ---|---|--- 2012-10-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/21837 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/indusoftwebstudioexec.rb 2025-02-06 03:13:40+00:00...

Microsoft Windows - 'AfdJoinLeaf' Local Privilege Escalation (MS11-080) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

CVE-2011-5210

CVE-2011-5210 affects Limny 3.0.0, where a directory traversal is possible in admin/preview.php via the theme parameter (encoded ..%2F) to read arbitrary files. Multiple sources (NVD, OpenVAS) confirm the vulnerability and link to Limny 3.0.0 players; OpenVAS describes it as a global directory tr...

CVE-2011-5209

Cross-site scripting XSS vulnerability in search/ in GraphicsClone Script, possibly 1.11, allows remote attackers to inject arbitrary web script or HTML via the term parameter...

CVE-2011-5209

The CVE-2011-5209 entry describes a Cross-site Scripting (XSS) vulnerability in the GraphicsClone Script, specifically in the search/ function, potentially affecting version 1.11. The flaw allows remote attackers to inject arbitrary web script or HTML via the term parameter. The documents do not ...

3S CoDeSys Vulnerabilities

Overview This advisory is a follow-up to the alert update, ICS-ALERT-11-336-01A 3S CoDeSys Vulnerabilities, which was released on the ICS-CERT Web page on December 02, 2011. Security researcher Celil Unuver SignalSec LLC and independent researcher Luigi Auriemma have identified vulnerabilities in...

Novell ZENworks Asset Management rtrlet File Upload Traversal

Added: 10/09/2012 CVE: CVE-2011-2653 BID: 50966 OSVDB: 77583 Background Novell ZENworks is a resource management solution consisting of a management server and management agents. Problem The Asset Management module ZAM of ZENworks version 7.5 fails to validate the name of uploaded files via POST...

CVE-2011-4342

PHP remote file inclusion vulnerability in wpxmlexport.php in the BackWPup plugin before 1.7.2 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the wpabs parameter...

CVE-2011-4928

Cross-site scripting XSS vulnerability in the textile formatter in Redmine before 1.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-4927

Unspecified vulnerability in the bazaar repository adapter in Redmine 1.0.x before 1.0.5 allows remote authenticated users to obtain sensitive information via unknown vectors...

CVE-2011-5208

CVE-2011-5208 concerns the WordPress BackWPup plugin (pre-1.4.1). The vulnerability is a directory traversal in the wpabs parameter that allows remote attackers to read arbitrary files via directory traversal sequences ("..") in two endpoints: app/options-view_log-iframe.php and app/options-runno...

CVE-2011-4928

The CVE-2011-4928 entry is for an XSS vulnerability in Redmine’s textile formatter prior to version 1.0.5, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. The provided documents confirm the affected component and the general impact, but do not include con...

CVE-2011-4928

Cross-site scripting XSS vulnerability in the textile formatter in Redmine before 1.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-5208

Multiple directory traversal vulnerabilities in the BackWPup plugin before 1.4.1 for WordPress allow remote attackers to read arbitrary files via a .. dot dot in the wpabs parameter to 1 app/options-viewlog-iframe.php or 2 app/options-runnow-iframe.php...

CVE-2011-4927

CVE-2011-4927 concerns the Redmine 1.0.x series, where the Redmine Bazaar repository adapter (before 1.0.5) allegedly allows remote authenticated users to obtain sensitive information via unknown vectors. The connected records consistently describe the issue as an unspecified vulnerability with i...

CVE-2011-4929

CVE-2011-4929 affects Redmine 0.9.x and 1.0.x prior to 1.0.5, via the bazaar repository adapter. The issue allows remote attackers to execute arbitrary commands by unspecified vectors. Public advisories (e.g., Debian DSA-2261-1) reiterate a remote command-execution vulnerability; OSV entries like...

CVE-2011-4342

The CVE-2011-4342 vulnerability affects the BackWPup WordPress plugin, specifically the wp_xml_export.php component. It allows remote PHP code execution via a URL in the wpabs parameter due to insecure handling in the BackWPup plugin versions prior to 1.7.2. If exploited, an attacker could run ar...

Important: Red Hat Security Advisory: JBoss Enterprise Portal Platform 5.2.2 security update

An update for the JBoss Web Services component in JBoss Enterprise Portal Platform 5.2.2 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring...