CVE-2012-2367

The CVE affects Moodle versions: 1.9.x before 1.9.18, 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3. A remote authenticated user can bypass the moodle/calendar:manageownentries capability and create a calendar entry via New Entry. Root cause is a capability check bypass in the ca...

Fedora Update for moodle FEDORA-2012-8365

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for moodle FEDORA-2012-8325

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian DSA-2367-1 : asterisk - several vulnerabilities

Several vulnerabilities have been discovered in Asterisk, an Open Source PBX and telephony toolkit : - CVE-2011-4597 Ben Williams discovered that it was possible to enumerate SIP user names in some configurations. Please see the upstream advisory for details. This update only modifies the sample...

SUSE: Security Advisory for MozillaFirefox, MozillaThunderbird (SUSE-SA:2011:028)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox Multiple Vulnerabilities July-11 (Windows)

The host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxmultvulnwinjul11.nasl 7052 2017-09-04 11:50:51Z teissa $ Mozilla Firefox Multiple Vulnerabilities July-11 Windows Authors: Sooraj KS Copyright: Copyright c 2011...

CVE-2011-2367

CVE-2011-2367 affects Mozilla Firefox 4.x up to 4.0.1, where the WebGL implementation fails to properly restrict read operations. This can allow a remote attacker to read sensitive GPU memory from arbitrary processes or cause an application crash (DoS). Vectors are described as unspecified in the...

Ubuntu: Security Advisory (USN-1157-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1157-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 11.04 : firefox vulnerabilities (USN-1157-1)

Bob Clary, Kevin Brosnan, Gary Kwong, Jesse Ruderman, Christian Biesinger, Bas Schouten, Igor Bukanov, Bill McCloskey, Olli Pettay, Daniel Veditz and Marcia Knous discovered multiple memory vulnerabilities in the browser rendering engine. An attacker could possibly execute arbitrary code with the...

CVE-2010-2367

Cross-site scripting XSS vulnerability in search.cgi in AD-EDIT2 before 3.0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-2367

The CVE-2010-2367 entry concerns AD-EDIT2 prior to version 3.0.9, with a cross-site scripting (XSS) vulnerability in search.cgi that can allow remote attackers to inject arbitrary script/HTML via unspecified vectors. Affected product: AD-EDIT2 (CMS). Root cause: XSS in the search.cgi handler; imp...

SLES9: Security update for ethereal

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015871 within the Su...

CVE-2009-2367

The CVE-2009-2367 entry concerns the Iomega StorCenter Pro NAS web interface (cgi-bin/makecgi-pro) generating predictable session IDs. The Connected documents confirm exploitability via brute-force guessing of the session_id parameter to hijack active sessions and gain administrative access. A Me...

Gentoo Security Advisory GLSA 200507-27 (Ethereal)

The remote host is missing updates announced in advisory GLSA 200507-27. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2002-2367

CVE-2002-2367 affects NEC SOCKS5 1.0 r11 and earlier. The issue is an off-by-one buffer overflow in hostname handling, enabling a remote attacker to cause a denial of service and potentially execute arbitrary code. Exploitation is described via a long hostname. No remediation details are provided...

CVE-2007-2367

CVE-2007-2367 impacts Wserve HTTP Server (whttp) 4.6, where a buffer overflow in wserve_console.exe can be triggered by a long directory name in the URI. This may allow remote attackers to cause a denial of service (forced application exit). The connected records corroborate the same description ...

CVE-2006-2367

CVE-2006-2367 is a cross-site scripting (XSS) vulnerability in Clansys (Clanpage System) versions 1.0 and 1.1. The flaw resides in index.php where the search function passes a user-controlled func parameter, enabling remote attackers to inject arbitrary web script or HTML. The published entries c...

Debian DSA-853-1 : ethereal - several vulnerabilities

Several security problems have been discovered in ethereal, a commonly used network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2360 Memory allocation errors in the LDAP dissector can cause a denial of service. - CAN-2005-2361...

[SECURITY] [DSA 853-1] New ethereal packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 853-1 [email protected] http://www.debian.org/security/ Martin Schulze October 9th, 2005 http://www.debian.org/security/faq -...