175 matches found
Medium: rubygems
Issue Overview: RubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which makes it easier for remote attackers to observe or modify a gem during installation via a man-in-the-middle attack. Affected Packages: rubygems Issue Correction: Run yum update rubygems or yum update --advisory...
Fedora Update for rubygems FEDORA-2012-6409
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 17 : rubygems-1.8.23-20.fc17 (2012-6132)
New version 1.8.23 is released. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
Gentoo Security Advisory GLSA 201110-11 (Adobe Flash Player)
The remote host is missing updates announced in advisory GLSA 201110-11. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
CVE-2011-2125
Buffer overflow in Dirapix.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors...
CVE-2011-2125
CVE-2011-2125 is a buffer overflow in Dirapix.dll of Adobe Shockwave Player prior to 11.6.0.626 that allows arbitrary code execution via unspecified vectors. Affected product: Shockwave Player; root cause: Dirapix.dll buffer overflow; impact: arbitrary code execution; remediation: update to 11.6....
Fedora Update for mailman FEDORA-2011-2125
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2010-2125
Multiple cross-site scripting XSS vulnerabilities in the Rotor Banner module 5.x before 5.x-1.8 and 6.x before 6.x-2.5 for Drupal allow remote authenticated users, with "create rotor item" or "edit any rotor item" privileges, to inject arbitrary web script or HTML via the 1 srs, 2 title, or 3 alt...
CVE-2010-2125
CVE-2010-2125 describes multiple XSS vulnerabilities in the Drupal Rotor Banner module. Affected: rotor_banner 5.x series before 5.x-1.8 and 6.x series before 6.x-2.5. Vulnerability arises when an authenticated user with either “create rotor item” or “edit any rotor item” privileges can inject ar...
CVE-2008-2125
SQL injection vulnerability in viewalbums.php in Musicbox 2.3.6 and 2.3.7 allows remote attackers to execute arbitrary SQL commands via the artistId parameter...
CVE-2008-2125
CVE-2008-2125: Concrete details present. Musicbox versions 2.3.6 and 2.3.7 expose an SQL injection in viewalbums.php via the artistId parameter, allowing remote attackers to execute arbitrary SQL commands. The vulnerability stems from improper handling of the artistId input, enabling possible dat...
CVE-2008-2125
creationtimestamp| type| source ---|---|--- 2008-05-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5560 2008-11-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7152...
CVE-2007-2125
Technical details (affected components, root cause, impact, or fixes) for CVE-2007-2125 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2004-2125
The CVE-2004-2125 entry describes a local privilege escalation in BlackICE PC Protection before 3.6.ccb, caused by a buffer overflow in blackd.exe when a long packetLog.fileprefix value is written into the application’s INI file. Affected product: BlackICE PC Protection 3.6 and earlier (3.6.ccb)....