Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003

The remote host is missing Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

SLES9: Security update for mailman

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mailman For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5014078 within the SuS...

SuSE9 Security Update : mailman (YOU Patch Number 11243)

This update of mailman fixes the following security issues : - A malicious user could visit a specially crafted URI and inject an apparent log message into Mailman's error log which might induce an unsuspecting administrator to visit a phishing site. This has been blocked. Thanks to Moritz Nauman...

CVE-2009-2191

Format string vulnerability in Login Window in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows attackers to execute arbitrary code or cause a denial of service application crash via format string specifiers in an application name...

CVE-2009-2191

CVE-2009-2191 is a format-string vulnerability in Mac OS X Login Window (affecting 10.4.11 and 10.5 up to 10.5.7; fixed in 10.5.8 via Security Update 2009-003). The issue arises from format specifiers in an application name, which can lead to arbitrary code execution or an application crash. Publ...

Mac OS X 10.5.x < 10.5.8 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.8. Mac OS X 10.5.8 contains security fixes for the following products : - bzip2 - CFNetwork - ColorSync - CoreTypes - Dock - Image RAW - ImageIO - Kernel - launchd - Login Window - MobileMe - Networking - XQuery C Tenab...

CVE-2008-2191

The CVE-2008-2191 entry concerns a SQL injection vulnerability in the PostNuke pnEncyclopedia module (version 0.2.0 and earlier). The flaw allows an unauthenticated, remote attacker to inject arbitrary SQL via the id parameter used by the display_term action in index.php. Affected component: pnEn...

CVE-2008-2191

creationtimestamp| type| source ---|---|--- 2008-05-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5541...

SuSE 10 Security Update : mailman (ZYPP Patch Number 2174)

This update of mailman fixes the following security issues : - A malicious user could visit a specially crafted URI and inject an apparent log message into Mailman's error log which might induce an unsuspecting administrator to visit a phishing site. This has been blocked. Thanks to Moritz Nauman...

CVE-2007-2191

CVE-2007-2191 describes multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.2.x . The flaws allow remote attackers to inject arbitrary web script or HTML via SIP-related fields (1) From, (2) To, (3) Call-ID, (4) User-Agent, and potentially other SIP headers, with the malicious data s...

CVE-2006-2191

Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable...

CVE-2006-2191

The CVE-2006-2191 entry concerns a format-string vulnerability in Mailman prior to version 2.1.9, which could allow an attacker to execute arbitrary code via unspecified vectors. The vulnerability is documented across multiple advisories and OpenVAS/Nessus entries, and several sources explicitly ...

CVE-2002-2191

This CVE affects Lotus Domino 5.0.9a and earlier. Affected component: Domino HTTP banner handling; Root cause: when a non-existent .nsf database is requested, the HTTP banner leaks the Domino version, even with DominoNoBanner=1 enabled. Impact described as potential information disclosure of vers...

CVE-2004-2191

CVE-2004-2191 describes a cross-site scripting (XSS) vulnerability in the ttt-webmaster.php component of Turbo Traffic Trader PHP 1.0. The flaw allows remote attackers to inject arbitrary web script or HTML through the parameters (1) msg[0] or (2) siteurl, potentially compromising user data or se...

CVE-2005-2191

CVE-2005-2191 concerns multiple XSS vulnerabilities in Comersus shopping cart. The flaws allow remote attackers to inject arbitrary web script or HTML via the name parameter in comersus_backoffice_listAssignedPricesToCustomer.asp or the message parameter in comersus_backoffice_message.asp. This r...

CVE-2002-2191

Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non-existent .nsf database, which leaks the version in the HTTP banner...