Fedora Update for openstack-nova FEDORA-2013-15373

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : openstack-nova-2013.1.3-2.fc19 (2013-15373)

Fixes 2 CVEs that were missed with the 2013.1.3 stable update Update to latest stable/grizzly 2013.1.3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Moderate: Red Hat Security Advisory: openstack-nova security and bug fix update

Updated openstack-nova packages that fix multiple security issues and various bugs are now available for Red Hat OpenStack 3.0. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

CVE-2013-2256

OpenStack Compute Nova before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:ispublic property, which allows remote authenticated users to obtain sensitive information flavor properties, boot arbitrary flavors, and possibly have other unspecified impacts by...

Debian Security Advisory DSA 2256-1 (tiff)

The remote host is missing an update to tiff announced via advisory DSA 2256-1. OpenVAS Vulnerability Test $Id: deb22561.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2256-1 tiff Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian DSA-2256-1 : tiff - buffer overflow

Tavis Ormandy discovered that the Tag Image File Format TIFF library is vulnerable to a buffer overflow triggered by a crafted OJPEG file which allows for a crash and potentially execution of arbitrary code. The oldstable distribution lenny is not affected by this problem. %NASLMINLEVEL 70300 C...

CVE-2010-2256

Pay Per Minute Video Chat Script 2.0 and 2.1 are affected by CVE-2010-2256, a cross-site scripting (XSS) vulnerability. The issue arises from user-supplied input in two parameters: the id parameter to admin/memberviewdetails.php and the model parameter to videos.php. Exploitation would allow remo...

CVE-2009-2256

The CVE-2009-2256 entry concerns Netgear DG632 routers running firmware 3.4.0_ap. Affected component: the administrative web interface. Root cause: handling of an HTTP POST to cgi-bin/firmwarecfg allows remote attackers to trigger a denial of service (web outage). Impact: availability loss of the...

CVE-2009-2256

creationtimestamp| type| source ---|---|--- 2009-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8964...

Microsoft IE HTML组件处理多个内存破坏漏洞（MS08-045）

BUGTRAQ ID: 30614,30611,30612 CVECAN ID: CVE-2008-2254,CVE-2008-2256,CVE-2008-2259 Internet Explorer是微软操作系统中默认捆绑的WEB浏览器。 IE访问尚未正确初始化或已被删除的对象的方式中存在远程执行代码漏洞，在打印预览处理过程中处理参数验证的方式中存在另一个远程执行代码漏洞。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Internet Explorer 7.0...

CVE-2008-2256

CVE-2008-2256 is an uninitialized memory corruption vulnerability in Microsoft Internet Explorer 5.01, 6, and 7. The issue arises when IE handles objects that were not correctly initialized or that have been deleted, enabling remote code execution and a crash. Multiple connected sources confirm t...

MS08-045: Cumulative Security Update for Internet Explorer (953838)

The remote host is missing the IE cumulative security update 953838. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33874;...

Microsoft Internet Explorer HTTP Response Double Free Memory Corruption (MS08-045; CVE-2008-2256)

Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability was reported in the way Microsoft Internet Explorer accesses an object that has not been correctly initialized or that has been deleted. By convincing a user to visit a specially crafted HT...

Debian Security Advisory DSA 759-1 (phppgadmin)

The remote host is missing an update to phppgadmin announced via advisory DSA 759-1. A vulnerability has been discovered in phppgadmin, a set of PHP scripts to administrate PostgreSQL over the WWW, that can lead to disclose sensitive information. Successful exploitation requires that magicquotesg...

CVE-2002-2256

The CVE-2002-2256 entry concerns the pWins Webserver (versions 0.2.5 and earlier). Affected component: the webserver’s handling of Unicode characters enables a directory traversal vulnerability, allowing remote attackers to read arbitrary files. The public records describe the vulnerability as a ...

CVE-2007-2256

Cross-site scripting XSS vulnerability in you.php in TJSChat 0.95 allows remote attackers to inject arbitrary web script or HTML via the user parameter...

CVE-2007-2256

This CVE-2007-2256 entry describes a Cross-site scripting (XSS) vulnerability in TJSChat 0.95, specifically in you.php, exploitable via the user parameter to inject arbitrary script/HTML. Affected component: you.php in TJSChat 0.95. Root cause: untrusted input in the user parameter leads to scrip...

CVE-2006-2256

EQdkp 1.3.0 and earlier are affected by a PHP remote file inclusion in includes/dbal.php, exploitable via a URL supplied to the eqdkp_root_path parameter, allowing execution of arbitrary PHP code on the server. Root cause is improper handling of user-controlled URL input leading to inclusion of r...

FreeBSD : phppgadmin -- 'formLanguage' local file inclusion vulnerability (88188a8c-eff6-11d9-8310-0001020eed82)

A Secunia Advisory reports : A vulnerability has been reported in phpPgAdmin, which can be exploited by malicious people to disclose sensitive information. Input passed to the 'formLanguage' parameter in 'index.php' isn't properly verified, before it is used to include files. This can be exploite...

[SECURITY] [DSA 759-1] New phppgadmin packages fix directory traversal vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 759-1 [email protected] http://www.debian.org/security/ Martin Schulze July 18th, 2005 http://www.debian.org/security/faq -...