Fedora 19 : check-mk-1.2.4p2-1.fc19 (2014-5139)

New upstream release. Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330 - CVE-2014-2331 - CVE-2014-2332 Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330 - CVE-2014-2331 - CVE-2014-2332 Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330 - CVE-2014-2331 - CVE-2014-2332 Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330...

Check_MK任意文件上传漏洞(CVE-2014-2331)

BUGTRAQ ID:66394 CVE ID:CVE-2014-2331 CheckMK是一款通用的Nagios/Icinga数据采集插件。 CheckMK 1.2.2p2及其他版本在实现上存在任意文件上传漏洞，成功利用后可使远程攻击者向受影响系统上传任意文件。 0 mathias-kettner checkmk 1.2.2p2 目前厂商还没有提供补丁或者升级程序： http://mathias-kettner.de...

HP Data Protector CRS Opcode 1092 Stack Buffer Overflow (CVE-2013-2331)

A stack buffer overflow has been discovered in HP Data Protector...

CVE-2013-2331

HP Data Protector (v6.20/v6.21/v7.00/v7.01) is vulnerable to a remote code execution due to a stack-based buffer overflow in crs.exe when parsing opcode 1092. The issue, ZDI-CAN-1652, allows unauthenticated, remote attackers to execute arbitrary code (SYSTEM context) on vulnerable installations. ...

[security bulletin] HPSBMU02883 SSRT101227 rev.1 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03781657 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03781657 Version: 1 HPSBMU02883...

Fedora Update for php FEDORA-2012-10936

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-2331

CVE-2012-2331 is a documented XSS vulnerability in Serendipity prior to 1.6.1. The issue occurs in the backend component located at serendipity/serendipity_admin_image_selector.php, where an attacker can inject script/HTML via the serendipity[textarea] parameter (potential CSRF relation noted). A...

Serendipity 1.6 Backend XSS And SQLi Vulnerability

Exploit for php platform in category web applications Serendipity 1.6 Backend XSS And SQLi Vulnerability Author: Stefan Schurtz Affected Software: Successfully tested on Serendipity 1.6 Vendor URL: http://www.s9y.org Vendor Status: fixed CVE-ID: CVE-2012-2331,CVE-2012-2332...

S9Y Serendipity 1.6 - Backend Cross-Site Scripting SQL Injection

S9Y Serendipity 1.6 - Backend Cross-Site Scripting SQL Injection Advisory: Serendipity 1.6 Backend Cross-Site Scripting and SQL-Injection vulnerability Advisory ID: KORAMIS-ADV2012-001 Contact: [email protected] Author: Stefan Schurtz Affected Software: Successfully tested on Serendipity 1.6...

CVE-2012-2331

creationtimestamp| type| source ---|---|--- 2012-05-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18884...

S9Y Serendipity 1.6 - 'Backend' Cross-Site Scripting / SQL Injection

Advisory: Serendipity 1.6 Backend Cross-Site Scripting and SQL-Injection vulnerability Advisory ID: KORAMIS-ADV2012-001 Contact: [email protected] Author: Stefan Schurtz Affected Software: Successfully tested on Serendipity 1.6 Vendor URL: http://www.s9y.org Vendor Status: fixed CVE-ID:...

Debian: Security Advisory (DSA-2331-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2331-1 : tor - several vulnerabilities

It has been discovered by 'frostyun' that a design flaw in Tor, an online privacy tool, allows malicious relay servers to learn certain information that they should not be able to learn. Specifically, a relay that a user connects to directly could learn which other relays that user is connected t...

CVE-2011-2331

HP Intelligent Management Center (IMC) contains a heap-based buffer overflow in img.exe triggered by a crafted length value in a packet, allowing remote attackers to execute arbitrary code. Affected component: img.exe in IMC. Root cause: integer overflow leading to heap overflow. Impact: remote c...

CVE-2010-2331

CVE-2010-2331 affects iSharer File Sharing Wizard 1.5.0. A stack-based buffer overflow allows remote attackers to execute arbitrary code via a long HEAD request. Impact is remote code execution with full compromise risk on affected systems. Related Red Hat entries (CVE-2019-17415/16724) describe ...

CVE-2010-2331

creationtimestamp| type| source ---|---|--- 2010-06-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13903...

Mac OS X 10.5.5 Update / Security Update 2008-006

The remote host is missing Mac OS X 10.5.5 Update / Security Update 2008-006. One or more of the following components are affected: ATS BIND ClamAV Directory Services Finder ImageIO Kernel libresolv Login Window mDNSResponder OpenSSH QuickDraw Manager Ruby SearchKit System Configuration System...

CVE-2009-2331

CVE-2009-2331 affects CMS Chainuk 1.2 and earlier. Two static code injection flaws permit remote PHP code execution: (1) settings.php via the menu parameter to admin_settings.php, and (2) a content/=NUMBER.php file via the title parameter to admin_new.php. Root cause: insecure handling of paramet...

CVE-2009-2331

creationtimestamp| type| source ---|---|--- 2009-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9069...

CVE-2008-2331

Technical details about CVE-2008-2331 are not provided in the connected documents. The initial description summarizes the issue in OS X Finder permissions. Monitor for updates from official advisories; no further specifics available in provided sources.