Fedora Update for thunderbird FEDORA-2012-4910

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for condor FEDORA-2012-3263

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for xulrunner FEDORA-2012-1800

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for python-docs FEDORA-2012-5892

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for lighttpd FEDORA-2012-9040

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for kernel FEDORA-2012-8824

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-2777

samples/powerbtn/powerbtn.sh in acpid aka acpid2 2.0.16 and earlier uses the pidof program incorrectly, which allows local users to gain privileges by running a program with the name kded4 and a DBUSSESSIONBUSADDRESS environment variable containing commands...

CVE-2011-4578

event.c in acpid aka acpid2 before 2.0.11 does not have an appropriate umask setting during execution of event-handler scripts, which might allow local users to 1 perform write operations within directories created by a script, or 2 read files created by a script, via standard filesystem system...

CVE-2011-4578

CVE-2011-4578 affects the acpid (aka acpid2) package: the file event.c executes event-handler scripts without a proper umask prior to version 2.0.11. This may allow a local attacker to either (1) write into directories created by a script or (2) read files created by a script via standard filesys...

CVE-2011-2777

CVE-2011-2777 affects acpid/acpid2 (2.0.16 and older). The flaw lies in how powerbtn.sh uses the pidof program, which can be exploited by a local attacker to gain elevated privileges by launching a program named kded4 with a crafted DBUS_SESSION_BUS_ADDRESS. Impact is local privilege escalation. ...

CVE-2011-5128

CVE-2011-5128 pertains to the Adminimize WordPress plugin (before 1.7.22). The vulnerability stems from cross-site scripting (XSS) in multiple entry points: the page parameter to adminimize.php, and the page parameter(s) to adminimize/adminimize_page.php as well as options-related endpoints (inc-...

CVE-2011-4918

CVE-2011-4918 affects Elxis CMS versions 2009.2, 2009.3 and 2009.3 Aphrodite prior to revision 2684. The vulnerability is multiple cross-site scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML via (1) the task parameter to elxis/index.php and (2) PATH_INFO to elxi...

CVE-2011-4926

CVE-2011-4926 | Adminimize (WordPress) vulnerability : A cross-site scripting flaw exists in the Adminimize plugin before 1.7.22, in adminimize/adminimize_page.php, where an attacker can inject arbitrary script/HTML via the page parameter. Affected product: WordPress Adminimize plugin (pre-1.7.22...

CVE-2011-4944

Python 2.6 through 3.2 creates /.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file...

CVE-2012-1587

This CVE-2012-1587 entry is rejected/not used; it is a duplicate of CVE-2011-4944.

Oracle Outside In JPEG 2000 COD and COC Parameter Heap Buffer Overflow (CVE-2011-4516)

A heap buffer overflow vulnerability exists in Oracle Outside In, a set of libraries used to decode many file formats. Successful exploitation can result in arbitrary code execution in the context of the affected application...

PHP Exif Header Parsing Integer Overflow (CVE-2011-4566)

An integer overflow vulnerability has been reported in PHP...

CVE-2011-4944

Python 2.6 through 3.2 creates /.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file...

CVE-2011-5125

Cross-site scripting XSS vulnerability in Blue Coat Director before 5.5.2.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving the HTTP TRACE method...

CVE-2011-5126

The CVE-2011-5126 entry concerns Blue Coat ProxySG (SGOS) versions affected by an information disclosure flaw. Specifically, Blue Coat ProxySG 6.1 prior to SGOS 6.1.5.1 and 6.2 prior to SGOS 6.2.2.1 write the secure heap to core images. This allows context-dependent attackers to obtain sensitive ...