Ubuntu: Security Advisory (USN-2565-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2560-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2561-1: Linux kernel (OMAP4) vulnerabilities

It was discovered that the Linux kernel's Infiniband subsystem did not properly sanitize its input parameters while registering memory regions from userspace. A local user could exploit this flaw to cause a denial of service system crash or to potentially gain administrative privileges...

Adobe ColdFusion HTTP Response Splitting (APSB12-15) (credentialed check)

The version of Adobe ColdFusion running on the remote host is affected by an HTTP response splitting vulnerability. The coldfusion.filter.ComponentFilter class does not properly sanitize input used in the Location header of an HTTP response. A remote attacker could exploit this by tricking a user...

CVE-2013-2041

Multiple cross-site scripting XSS vulnerabilities in ownCloud 5.0.x before 5.0.6 allow remote authenticated users to inject arbitrary web script or HTML via the 1 tag parameter to apps/bookmarks/ajax/addBookmark.php or 2 dir parameter to apps/files/ajax/newfile.php, which is passed to...

Ubuntu Update for linux-lts-raring USN-2041-1

Check for the Version of linux-lts-raring OpenVAS Vulnerability Test $Id: gbubuntuUSN20411.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for linux-lts-raring USN-2041-1 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This progra...

Ubuntu: Security Advisory (USN-2041-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2012-2041)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-2041 advisory. 2.6.32-300.38.1 - net/sfc limit number of segments per skb on tx Maxim Uvarov Orabug: 14769994 CVE-2012-3412 Tenable has extracted the preceding description...

Adobe ColdFusion HTTP响应分离漏洞

CVE ID: CVE-2012-2041 Adobe ColdFusion是一个动态Web服务器。 Adobe ColdFusion 8.0至9.0.1版本没有正确过滤某些输入即返回给用户，在实现上存在CRLF注入漏洞，可被利用插入任意HTTP标头，并执行HTTP响应分离攻击。 0 Adobe ColdFusion 9.x Adobe ColdFusion 8.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（apsb12-15）以及相应补丁: apsb12-15：Security update: Hotfix available for ColdFusio...

CVE-2012-2041

CVE-2012-2041 describes a CRLF injection in the Component Browser of Adobe ColdFusion 8.0–9.0.1 , enabling remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via unspecified vectors. Public references point to Adobe’s APSB12-15 security bulletin, which provided ...

CVE-2012-2041

CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2011-2041

CVE-2011-2041 describes a Local Privilege Escalation in Cisco AnyConnect Secure Mobility Client on Windows (and Windows Mobile) via the Start Before Logon (SBL) UI. Unprivileged users can elevate to LocalSystem by interacting with the GUI at the Windows logon screen. The issue is restricted to Wi...

CVE-2010-2041

Multiple cross-site scripting XSS vulnerabilities in index.php in PHP-Calendar before 2.0 Beta7 allow remote attackers to inject arbitrary web script or HTML via the 1 description and 2 lastaction parameters...

CVE-2010-2041

PHP-Calendar is prone to Cross Site Scripting (XSS) in index.php, specifically via the parameters (1) description and (2) lastaction, affecting versions before 2.0 Beta7. The vulnerability allows remote attackers to inject arbitrary script/HTML in the web page. Affected product: PHP-Calendar; the...

CVE-2009-2041

Cross-site scripting XSS vulnerability in A51 D.O.O. activeCollab 0.7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1772...

CVE-2009-2041

CVE-2009-2041 is an XSS vulnerability in activeCollab 0.7.1 (A51 D.O.O.) allowing remote script injection via unspecified vectors. The Connected records show related entries for activeCollab 2.1 Corporate with an XSS in the re_route parameter, indicating a recurring vulnerability class in the sam...

Gentoo Security Advisory GLSA 200805-04 (egroupware)

The remote host is missing updates announced in advisory GLSA 200805-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200805-04 (egroupware)

The remote host is missing updates announced in advisory GLSA 200805-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ GLSA 200805-04 ] eGroupWare: Multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200805-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

CVE-2008-2041

CVE-2008-2041 affects eGroupWare = www-apps/egroupware-1.4.004. If applicable, apply the vendor-provided upgrade as described in advisories. The connected documents also reference related vulnerabilities (e.g., CVE-2008-1502) affecting HTML filtering, but CVE-2008-2041 itself is tied to the file ...