91 matches found
Serendipity 1.6 Backend XSS And SQLi Vulnerability
No description provided by source. Advisory: Serendipity 1.6 Backend Cross-Site Scripting and SQL-Injection vulnerability Advisory ID: KORAMIS-ADV2012-001 Contact: [email protected] Author: Stefan Schurtz Affected Software: Successfully tested on Serendipity 1.6 Vendor URL: http://www.s9y.org...
Fedora Update for check-mk FEDORA-2014-6810
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for check-mk FEDORA-2014-5194
Check for the Version of check-mk OpenVAS Vulnerability Test Fedora Update for check-mk FEDORA-2014-5194 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for check-mk FEDORA-2014-5139
Check for the Version of check-mk OpenVAS Vulnerability Test Fedora Update for check-mk FEDORA-2014-5139 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora 20 : check-mk-1.2.4p2-1.fc20 (2014-5194)
New upstream release. Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330 - CVE-2014-2331 - CVE-2014-2332 Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330 - CVE-2014-2331 - CVE-2014-2332 Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330 - CVE-2014-2331 - CVE-2014-2332 Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330...
Check_MK 任意文件删除漏洞(CVE-2014-2332)
BUGTRAQ ID:66396 CVE ID:CVE-2014-2332 CheckMK是一款通用的Nagios/Icinga数据采集插件。 CheckMK 1.2.2p2及其他版本在实现上存在任意文件删除漏洞，成功利用后可使远程攻击者删除受影响应用上下文内的任意文件。 0 mathias-kettner checkmk 1.2.2p2 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://mathias-kettner.de...
HP Data Protector CRS Opcode 260 Stack Buffer Overflow (CVE-2013-2332)
A stack buffer overflow has been discovered in HP Data Protector...
CVE-2013-2332
HP Data Protector (v6.20/v6.21; v7.00/v7.01) is affected by a remote code execution vulnerability in crs.exe (opcode 260) that allows unauthenticated attackers to copy user-supplied data into a fixed-length stack buffer and execute code as SYSTEM. The issue affects the Cell Manager; vulnerable pa...
[security bulletin] HPSBMU02883 SSRT101227 rev.1 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03781657 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03781657 Version: 1 HPSBMU02883...
CVE-2012-2332
SQL injection vulnerability in serendipity/serendipityadmin.php in Serendipity before 1.6.1 allows remote attackers to execute arbitrary SQL commands via the serendipityplugintoconf parameter. NOTE: this issue might be resultant from cross-site request forgery CSRF...
CVE-2012-2332
The CVE-2012-2332 issue affects Serendipity prior to version 1.6.1. A SQL injection vulnerability exists in serendipity/serendipity_admin.php via the parameter serendipity[plugin_to_conf], potentially allowing remote attackers to execute arbitrary SQL commands. The vulnerability note also mention...
CVE-2012-2332
creationtimestamp| type| source ---|---|--- 2012-05-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18884...
Serendipity 1.6 Backend XSS And SQLi Vulnerability
Exploit for php platform in category web applications Serendipity 1.6 Backend XSS And SQLi Vulnerability Author: Stefan Schurtz Affected Software: Successfully tested on Serendipity 1.6 Vendor URL: http://www.s9y.org Vendor Status: fixed CVE-ID: CVE-2012-2331,CVE-2012-2332...
S9Y Serendipity 1.6 - Backend Cross-Site Scripting SQL Injection
S9Y Serendipity 1.6 - Backend Cross-Site Scripting SQL Injection Advisory: Serendipity 1.6 Backend Cross-Site Scripting and SQL-Injection vulnerability Advisory ID: KORAMIS-ADV2012-001 Contact: [email protected] Author: Stefan Schurtz Affected Software: Successfully tested on Serendipity 1.6...
S9Y Serendipity 1.6 - 'Backend' Cross-Site Scripting / SQL Injection
Advisory: Serendipity 1.6 Backend Cross-Site Scripting and SQL-Injection vulnerability Advisory ID: KORAMIS-ADV2012-001 Contact: [email protected] Author: Stefan Schurtz Affected Software: Successfully tested on Serendipity 1.6 Vendor URL: http://www.s9y.org Vendor Status: fixed CVE-ID:...
Debian Security Advisory DSA 2332-1 (python-django)
The remote host is missing an update to python-django announced via advisory DSA 2332-1. OpenVAS Vulnerability Test $Id: deb23321.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2332-1 python-django Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft...
Debian: Security Advisory (DSA-2332-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-2332-1 : python-django - several issues
Paul McMillan, Mozilla and the Django core team discovered several vulnerabilities in Django, a Python web framework : - CVE-2011-4136 When using memory-based sessions and caching, Django sessions are stored directly in the root namespace of the cache. When user data is stored in the same cache, ...
CVE-2011-2332
CVE-2011-2332 affects Google Chrome (V8 engine) versions prior to 12.0.742.91. The vulnerability is a Same Origin Policy bypass in the V8 engine, allowing remote attackers to bypass SOP via unspecified vectors. The NVD/OpenVAS references confirm a cross-origin bypass in V8; Chrome 12.0.742.91 con...