Amazon Linux AMI : mysql55 (ALAS-2013-187)

This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found in the References section. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security Advisory ALAS-2013-18...

Ubuntu: Security Advisory (USN-1807-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2667-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2667-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 12, 2013 http://www.debian.org/security/faq -...

CentOS Update for mysql CESA-2013:0772 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2391

CVE-2013-2391 affects Oracle MySQL server components (versions 5.1.68 and earlier, 5.5.30 and earlier, 5.6.10 and earlier). The vulnerability is described as unspecified and relates to Server Install, with local attackers potentially impacting confidentiality and integrity (I:P, C:P) while leavin...

Fedora Update for rubygem-activemodel FEDORA-2013-2391

Check for the Version of rubygem-activemodel OpenVAS Vulnerability Test Fedora Update for rubygem-activemodel FEDORA-2013-2391 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...

CVE-2012-2391

...

CVE-2012-2391

CVE-2012-2391 is a duplicate of CVE-2012-2942 for HAProxy. The connected sources describe a buffer overflow in the header capture code (CVE-2012-2942) affecting HAProxy releases prior to mitigations in 1.4.x series. Public advisories note remote impact via malformed HTTP headers and header rewrit...

FreeBSD Ports: haproxy

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian DSA-2391-1 : phpmyadmin - several vulnerabilities

Several vulnerabilities have been discovered in phpMyAdmin, a tool to administer MySQL over the web. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-4107 The XML import plugin allowed a remote attacker to read arbitrary files via XML data containing...

CVE-2010-2391

CVE-2010-2391 affects Oracle Database Server Core RDBMS components in Oracle Database Server versions 10.1.0.5 and 10.2.0.3. The vulnerability is described as unspecified, allowing remote authenticated users to impact confidentiality and integrity via unknown vectors. The CVSS data from the refer...

CVE-2009-2391

creationtimestamp| type| source ---|---|--- 2009-06-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9022...

CVE-2008-2391

CVE-2008-2391 affects SubSonic. The vulnerability allows remote attackers to bypass pagesize limits and trigger a denial-of-service via a pageindex (data page number) of -1, causing CPU consumption. Affected product is SubSonic (details specify improper handling of pageindex values leading to DoS...

CVE-2002-2391

The CVE-2002-2391 entry describes a SQL injection in WebChat 1.5 (included with XOOPS 1.0) via the roomid parameter in index.php, enabling remote arbitrary SQL commands. The connected documents provide concrete details (affected software and vulnerable parameter) but do not include exploitation s...

CVE-2007-2391

The CVE-2007-2391 entry describes a cross-site scripting (XSS) vulnerability in Apple Safari Beta 3.0.1 for Windows. The issue allows an attacker to inject arbitrary script or HTML via a web page containing a Windows.setTimeout function that is activated after the user navigates away from the cur...

CVE-2007-2391

Cross-site scripting XSS vulnerability in Apple Safari Beta 3.0.1 for Windows allows remote attackers to inject arbitrary web script or HTML via a web page that includes a windows.setTimeout function that is activated after the user has moved from the current page...

Wireshark多个协议处理单元安全漏洞

Wireshark是一款非常流行的网络协议分析工具,以前名为Ethereal，。 Wireshark中存在多个安全漏洞，具体如下： 1 SCSI协议处理单元中的漏洞可能导致应用程序崩溃； 2 如果编译了ESP解密支持的话，IPSec ESP偏好解析器中就会存在单字节缓冲区溢出漏洞； 3 由于Glib中的一个bug，DHCP协议处理单元中的漏洞可能导致Wireshark崩溃。这个漏洞仅影响Windows版本； 4 Q.2391协议处理单元中的漏洞可能导致耗尽内存。 受影响系统： Wireshark Wireshark 0.7.9 - 0.99.2 不受影响系统： Wireshark...

CVE-2006-4333

The SSCOP dissector in Wireshark formerly Ethereal before 0.99.3 allows remote attackers to cause a denial of service resource consumption via malformed packets that cause the Q.2391 dissector to use excessive memory...

CVE-2006-4333

The SSCOP dissector in Wireshark formerly Ethereal before 0.99.3 allows remote attackers to cause a denial of service resource consumption via malformed packets that cause the Q.2391 dissector to use excessive memory...

CVE-2006-2391

CVE-2006-2391 : A buffer overflow in EMC Retrospect Client 5.1–7.5 can be triggered by a crafted packet sent to port 497/TCP, allowing an unauthenticated remote attacker to crash the client or execute arbitrary code. The issue arises from a boundary error in the client’s packet handling. Affected...