Scientific Linux Security Update : libxml2 on SL5.x, SL6.x i386/x86_64 (20120918)

The libxml2 library is a development toolbox providing the implementation of various XML standards. Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way libxml2 handled documents that enable entity expansion. A remote attacker could provide a large,...

RHEL 5 / 6 : libxml2 (RHSA-2012:1288)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1288 advisory. - libxml: An off-by-one out-of-bounds write by XPointer part evaluation CVE-2011-3102 - libxml2 64-bit: Multiple integer overflows,...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 8293)

This update fixes header code injection issues in PHP5. CVE-2011-1398 / CVE-2011-4388 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid62198; scriptversion"1.5";...

libxml2 security update

CentOS Errata and Security Advisory CESA-2012:1288 Updated libxml2 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CV...

CVE-2011-4941

CVE-2011-4941 affects Piwik (now Matomo) versions 1.2 through 1.4. The vulnerability enables remote code execution for users with view permission, via unknown attack vectors. The public documents consistently describe an unspecified vulnerability allowing arbitrary code execution, with the CVE en...

Moderate: Red Hat Security Advisory: libxml2 security update

Updated libxml2 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

libxml2 security update

2.7.6-8.0.1.el63.3 - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball 2.7.6-8.el63.3 - Change the XPath code to percolate allocation error CVE-2011-1944 2.7.6-8.el63.2 - Fix an off by one pointer access CVE-2011-3102 2.7.6-8.el63.1 - Fix a failure...

Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : php5 vulnerabilities (USN-1569-1)

It was discovered that PHP incorrectly handled certain character sequences when applying HTTP response-splitting protection. A remote attacker could create a specially crafted URL and inject arbitrary headers. CVE-2011-1398, CVE-2012-4388 It was discovered that PHP incorrectly handled directories...

CVE-2011-4959

SQL injection vulnerability in the addslashes method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6, when connected to a MySQL database using far east character encodings, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-4962

code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a user comment submission, which is not properly handled when it is deserialized...

CVE-2011-4960

SQL injection vulnerability in the Folder::findOrMake method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-4959

CVE-2011-4959 affects SilverStripe: SQL injection in the addslashes method for SilverStripe 2.3.x < 2.3.12 and 2.4.x

CVE-2011-4961

CVE-2011-4961 affects SilverStripe 2.3.x (pre-2.3.12) and 2.4.x (pre-2.4.6). A remote, authenticated user with EDIT_PERMISSIONS can elevate to administrator by manipulating a TreeMultiselectField when adding the user to selected groups, enabling privileged access. The root cause is described as t...

CVE-2011-4962

SilverStripe CMS (2.4.x) before 2.4.6 is affected by CVE-2011-4962: an attacker can trigger remote code execution by crafting a cookie in a user comment submission, due to improper handling during deserialization of PageCommentInterface.php data. The root cause is deserializing untrusted cookie d...

CVE-2011-4960

SilverStripe releases 2.3.x prior to 2.3.12 and 2.4.x prior to 2.4.6 contain an SQL injection in Folder::findOrMake that allows remote execution of arbitrary SQL via unspecified vectors. Impact is described as remote code execution on the database side with partial confidentiality/integrity/avail...

USN-1569-1: PHP vulnerabilities

It was discovered that PHP incorrectly handled certain character sequences when applying HTTP response-splitting protection. A remote attacker could create a specially-crafted URL and inject arbitrary headers. CVE-2011-1398, CVE-2012-4388 It was discovered that PHP incorrectly handled directories...

RedHat Update for quagga RHSA-2012:1258-01

Check for the Version of quagga OpenVAS Vulnerability Test RedHat Update for quagga RHSA-2012:1258-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

RedHat Update for quagga RHSA-2012:1259-01

Check for the Version of quagga OpenVAS Vulnerability Test RedHat Update for quagga RHSA-2012:1259-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

RedHat Update for quagga RHSA-2012:1258-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for quagga CESA-2012:1259 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...