78 matches found
openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2010:0599-1)
PHP was updated to version 5.3.3 to fix serveral security issues. CVE-2010-0397, CVE-2010-1860, CVE-2010-1862, CVE-2010-1864, CVE-2010-1866, CVE-2010-1914, CVE-2010-1915, CVE-2010-1917, CVE-2010-2093, CVE-2010-2094, CVE-2010-2097, CVE-2010-2100, CVE-2010-2101, CVE-2010-2190, CVE-2010-2191,...
PHP 5.2 < 5.2.14 Multiple Vulnerabilities
According to its banner, the version of PHP 5.2 installed on the remote host is older than 5.2.14. Such versions may be affected by several security issues : - An error exists when processing invalid XML-RPC requests that can lead to a NULL pointer dereference. bug 51288 CVE-2010-0397 - An error...
CVE-2010-2101
The 1 striptags, 2 setcookie, 3 strtok, 4 wordwrap, 5 strwordcount, and 6 strpad functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents by causing a userspace interruption of an internal function, related to the...
CVE-2010-2101
CVE-2010-2101 affects PHP 5.2.x (5.2.13) and 5.3.x (5.3.2) where the (1) strip_tags, (2) setcookie, (3) strtok, (4) wordwrap, (5) str_word_count, and (6) str_pad functions can leak memory contents under context-dependent attacks due to a flaw in call-time pass-by-reference. The vulnerability enab...
CVE-2009-2101
Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when registerglobals is enabled, allows remote attackers to delete arbitrary files via a .. dot dot in the deleteTorrent parameter...
CVE-2009-2101
Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when registerglobals is enabled, allows remote attackers to delete arbitrary files via a .. dot dot in the deleteTorrent parameter...
CVE-2009-2101
CVE-2009-2101 affects TorrentVolve 1.4, via archive.php: a directory traversal vulnerability that, when register_globals is enabled, allows remote attackers to delete arbitrary files using a .. in the deleteTorrent parameter. The issue is evidenced by NVD and OpenVAS records with a CVSS v2 base s...
CVE-2009-2101
creationtimestamp| type| source ---|---|--- 2009-06-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8931...
CVE-2008-2101
CVE-2008-2101 affects VMware ESX/VCB: the VCB command-line utilities for ESX 3.0.1–3.0.3 and ESX 3.5 pass the password on the command line, enabling local users to obtain credentials by inspecting the process list. The issue is addressed by VMware patches (VCB/ESX updates) for ESX 3.0.1–3.0.3 and...
VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2008-0014 Synopsis: Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information...
Debian: Security Advisory (DSA-818-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-2101
FAC Guestbook 3.01 has an improper access control flaw exposing data under the web root. The vulnerability allows remote attackers to download the database via a direct request to db/gbdb.mdb, enabling access to sensitive information. The issue is described as affecting FAC Guestbook 3.01 and ste...
CVE-2006-2101
Directory traversal vulnerability in WinISO 5.3 allows remote attackers to write arbitrary files via a .. dot dot in a filename in an ISO image...
[SECURITY] [DSA 818-1] New kdeedu packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 818-1 [email protected] http://www.debian.org/security/ Martin Schulze September 22nd, 2005 http://www.debian.org/security/faq -...
CVE-2005-2101
langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local users to overwrite arbitrary files...
CVE-2005-2101
CVE-2005-2101 affects KDE kdeedu: specifically the langen2kvtml script in the kvoctrain component creates insecure temporary files in /tmp with predictable names, allowing a local attacker to overwrite arbitrary files. Multiple vendors/advisories (Debian DSA-818-1, Mandrake/MKSA-2005:159, SUSE, O...
CVE-2004-2101
The CVE-2004-2101 issue affects the GeoHttpServer’s sysinfo script. An attacker can remotely trigger a denial of service (crash) by sending an excessively long pwd parameter, which may lead to a buffer overflow. This is documented across multiple sources (NVD/CVE records). No explicit remediation...