CVE-2011-2147

Openswan 2.2.x does not properly restrict permissions for 1 /var/run/starter.pid, related to starter.c in the IPsec starter, and 2 /var/lock/subsys/ipsec, which allows local users to kill arbitrary processes by writing a PID to a file, or possibly bypass disk quotas by writing arbitrary data to a...

CVE-2011-2147

Technical details for CVE-2011-2147 are not provided in the connected documents. The initial description summarizes local permission issues in OpenSwan 2.2.x; monitor for updated advisories or vendor patches.

Debian Security Advisory DSA 2147-1 (pimd)

The remote host is missing an update to pimd announced via advisory DSA 2147-1. OpenVAS Vulnerability Test $Id: deb21471.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2147-1 pimd Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian DSA-2147-1 : pimd - insecure temporary files

Vincent Bernat discovered that pimd, a multicast routing daemon, creates files with predictable names upon the receipt of particular signals. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

CVE-2010-2147

Cross-site scripting XSS vulnerability in the My Car commycar component 1.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the modveh parameter to index.php...

CVE-2010-2147

The CVE-2010-2147 entry describes a Cross-site Scripting (XSS) vulnerability in the Joomla! My Car component (com_mycar) version 1.0. The flaw allows remote attackers to inject arbitrary web script or HTML through the modveh parameter in index.php. Connected sources confirm the affected product/c...

openSUSE Security Update : viewvc (viewvc-2147)

Query forms didn't escape user provided input, therefore allowing cross-site-scripting XSS attacks. CVE-2010-0736 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...

openSUSE Security Update : viewvc (viewvc-2147)

Query forms didn't escape user provided input, therefore allowing cross-site-scripting XSS attacks. CVE-2010-0736 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...

Debian Security Advisory DSA 1819-1 (vlc)

The remote host is missing an update to vlc announced via advisory DSA 1819-1. OpenVAS Vulnerability Test $Id: deb18191.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1819-1 vlc Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-2147

The CVE-2009-2147 entry describes a SQL injection in fdown.php of phpWebThings (versions 1.5.2 and earlier) that lets remote attackers execute arbitrary SQL commands via the id parameter. Multiple connected sources (NVD, CVE list, PRION, etc.) corroborate the vulnerability as a SQL-injection flaw...

CVE-2009-2147

creationtimestamp| type| source ---|---|--- 2009-06-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8939...

FreeBSD Ports: trac

The remote host is missing an update to the system as announced in the referenced advisory. VID b02c1d80-e1bb-11d9-b875-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-2147

Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under the modules/ or plugins/ subdirectories of the current working directory...

DEBIAN-CVE-2008-2147

Untrusted search path vulnerability in VideoLAN VLC before 0.9.0 allows local users to execute arbitrary code via a malicious library under the modules/ or plugins/ subdirectories of the current working directory...

CVE-2008-2147

CVE-2008-2147 affects VLC media player and relates to an untrusted search path vulnerability that could allow local privilege escalation via a malicious library placed in modules/ or plugins/ within the current working directory. Public disclosures in 2008-2009 reference VLC and related Debian/Ge...

Debian: Security Advisory (DSA-1047-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-2147

admin/options.php in Stephen Craton aka WiredPHP Chatness 2.5.3 and earlier does not check for administrative credentials, which allows remote attackers to read and modify the classes/vars.php and classes/varstuff.php configuration files via direct requests...

CVE-2007-2147

The CVE-2007-2147 entry affects Stephen Craton (WiredPHP) Chatness 2.5.3 and earlier. The issue is that admin/options.php does not verify administrative credentials, allowing remote attackers to read and modify the configuration files classes/vars.php and classes/varstuff.php via direct requests....

CVE-2006-2147

CVE-2006-2147 affects resmgr/resmgrd on SUSE Linux and other distributions. The vulnerability arises when access to a USB device is granted via the usb:, notation, which improperly handles authorization and can grant access to all USB devices, allowing local users to bypass intended access restri...

CVE-2002-2147

...