Debian DSA-2480-4 : request-tracker3.8 - several vulnerabilities

Several vulnerabilities were discovered in Request Tracker, an issue tracking system : - CVE-2011-2082 The vulnerable-passwords scripts introduced for CVE-2011-0009 failed to correct the password hashes of disabled users. - CVE-2011-2083 Several cross-site scripting issues have been discovered. -...

[SECURITY] [DSA 2504-1] libspring-2.5-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2504-1 [email protected] http://www.debian.org/security/ Florian Weimer June 28, 2012 http://www.debian.org/security/faq -...

Fedora Update for xen FEDORA-2012-9430

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2012-9430 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for xen FEDORA-2012-9430

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 5 : php (RHSA-2012:1045)

Updated php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Security fix for the ALT Linux 6 package pidgin version 2.10.4-alt0.M60P.1

June 28, 2012 Gleb Fotengauer-Malinovskiy 2.10.4-alt0.M60P.1 - p6 security update fix CVE-2012-2214 CVE-2012-2318 CVE-2012-1178 CVE-2011-4939...

Unbreakable Enterprise kernel security and bugfix update

2.6.39-200.24.1.el5uek - Revert 'Add Oracle VM guest messaging driver' Guru Anbalagane Orabug: 14233627 2.6.39-200.23.1.el5uek - SPEC: add block/net modules to list used by installer Guru Anbalagane Orabug: 14224837 2.6.39-200.22.1.el5uek - NFSv4: include bitmap in nfsv4 get acl data Andy Adamson...

Mandriva Update for rsyslog MDVSA-2012:100 (rsyslog)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for lighttpd FEDORA-2012-9078

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-4956

Cross-site scripting XSS vulnerability in WordPress before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-4956

WordPress is affected by CVE-2011-4956: an XSS vulnerability in versions prior to 3.1.1 that allows remote attackers to inject arbitrary script or HTML via unspecified vectors. The issue is documented across multiple sources (NVD entry CVE-2011-4956 and related advisories) and has been addressed ...

CVE-2011-4957

The vulnerability CVE-2011-4957 affects WordPress prior to 3.1.1, involving the make_clickable function in wp-includes/formatting.php. The root cause is improper URL checking before passing to the PCRE library, enabling a crafted URL in a comment to trigger many recursive calls and cause a denial...

CVE-2011-4956

Cross-site scripting XSS vulnerability in WordPress before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Moderate: Red Hat Security Advisory: php security update

Updated php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CVE-2011-4940

The listdirectory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP header, which makes it easier for remote attackers to conduct cross-site scripting XSS...

CVE-2011-4940

In CVE-2011-4940, the list_directory function in Lib/SimpleHTTPServer.py used by Python’s SimpleHTTPServer does not add a charset parameter in the Content-Type header. This enables cross-site scripting (XSS) in Internet Explorer 7 via UTF-7 encoding. Affected are Python SimpleHTTPServer implement...

Symantec PcAnywhere 12.5.0 Buffer Overflow

!/usr/bin/python Exploit Title: Symantec PcAnywhere login and password field buffer overflow Date: 2012.06.27 Author: S2 Crew Hungary Software Link: symantec.com Version: 12.5.0 Tested on: Windows XP SP2 CVE: CVE-2011-3478 Code : import socket import time import struct import string import sys...

qt security and bug fix update

1:4.6.2-24 - Resolves: bz734444, list of trusted CA certificates should not be compiled into library 1:4.6.2-23 - Resolves: bz805433, CVE-2011-3922 1:4.6.2-22 - Resolves: bz694684, phonon crash 1:4.6.2-21 - Resolves: rhbz757793, add OpenGL 3.1, 3.2, 3.3 and 4.0 recognition to QGLFormat...

CVE-2011-4940

The listdirectory function in Lib/SimpleHTTPServer.py in SimpleHTTPServer in Python before 2.5.6c1, 2.6.x before 2.6.7 rc2, and 2.7.x before 2.7.2 does not place a charset parameter in the Content-Type HTTP header, which makes it easier for remote attackers to conduct cross-site scripting XSS...

Symantec PcAnywhere 12.5.0 Login and Password Field Buffer Overflow

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: Symantec PcAnywhere login and password field buffer overflow Date: 2012.06.27 Author: S2 Crew Hungary Software Link: symantec.com Version: 12.5.0 Tested on: Windows XP SP2 CVE: CVE-2011-3478 Code : import...