Debian DSA-2470-1 : wordpress - several vulnerabilities

Several vulnerabilities were identified in WordPress, a web blogging tool. As the CVEs were allocated from releases announcements and specific fixes are usually not identified, it has been decided to upgrade the wordpress package to the latest upstream version instead of backporting the patches...

CVE-2011-2470

CVE-2011-2470 is a Cross-site Scripting (XSS) vulnerability in A Really Simple Chat (ARSC) 3.3-rc2. The issue affects the login form at chat/base/admin/login.php via the arsc_message parameter, allowing remote attackers to inject arbitrary script/HTML. CVSSv2 base score is 4.3 (Medium) with vecto...

CVE-2010-2470

Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6.1 and 3.7 through 3.7.1, when usesuexec is enabled, uses world-readable permissions within 1 .bzr/ and 2 data/webdot/, which allows local users to obtain potentially sensitive data by reading files in these directories, a different vulnerability...

CVE-2010-2470

CVE-2010-2470 affects Bugzilla’s Install/Filesystem.pm in Bugzilla versions 3.5.1–3.6.1 and 3.7–3.7.1 when use_suexec is enabled. It allows local users to read potentially sensitive data due to world-readable permissions inside the directories in question: (.bzr/ and data/webdot/), per the descri...

thunderbird security update

CentOS Errata and Security Advisory CESA-2010:0154 An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CV...

SLES9: Security update for Acrobat Reader

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: acroread For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5013639 within the Su...

SLES9: Security update for Acrobat Reader

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: acroread For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5013639 within the Su...

FreeBSD Ports: firefox, linux-firefox-devel

The remote host is missing an update to the system as announced in the referenced advisory. VID 49e8f2ee-8147-11de-a994-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 49e8f2ee-8147-11de-a994-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora Core 10 FEDORA-2009-8288 (perl-Gtk2-MozEmbed)

The remote host is missing an update to perl-Gtk2-MozEmbed announced via advisory FEDORA-2009-8288. OpenVAS Vulnerability Test $Id: fcore20098288.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8288 perl-Gtk2-MozEmbed Authors: Thomas Reinke Copyrigh...

Fedora Core 10 FEDORA-2009-8288 (perl-Gtk2-MozEmbed)

The remote host is missing an update to perl-Gtk2-MozEmbed announced via advisory FEDORA-2009-8288. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

Fedora Core 11 FEDORA-2009-8279 (xulrunner)

The remote host is missing an update to xulrunner announced via advisory FEDORA-2009-8279. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

CVE-2009-2470

CVE-2009-2470 is a Firefox/Thunderbird issue where remote SOCKS5 proxy replies with a long domain name can cause data stream corruption and a denial of service. Public details in connected documents reference Firefox versions affected (pre-3.0.12 and 3.5.x before 3.5.2) and note a related Thunder...

Gentoo Security Advisory GLSA 200508-11 (acroread)

The remote host is missing updates announced in advisory GLSA 200508-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Macrovision InstallShield Update Service Agent ActiveX Memory Corruption (CVE-2008-2470)

Macrovision InstallShield is a software tool for creating installers or software packages. A memory corruption vulnerability has been reported in Macrovision InstallShield Update Service. The vulnerability is due to a design error in the Macrovision InstallShield Update Service while processing...

CVE-2008-2470

CVE-2008-2470 : The InstallShield Update Service Agent ActiveX control in isusweb.dll has a memory corruption vulnerability triggered by ExecuteRemote() with a URL returning 404. This can allow remote, unauthenticated attackers to execute arbitrary code or crash the browser. The issue affects the...

CVE-2007-2470

CVE-2007-2470 describes multiple cross-site scripting (XSS) vulnerabilities in index.php of FileRun before or at version 1.0, enabling remote attackers to inject arbitrary script or HTML via the (1) page, (2) module, or (3) section parameters. The available connected sources confirm the affected ...

CVE-2006-2470

Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies...

CVE-2006-2470

Technical details about CVE-2006-2470 are not publicly provided in the supplied documents. Monitor for updates.

SUSE-SA:2005:047: acroread

The remote host is missing the patch for the advisory SUSE-SA:2005:047 acroread. A buffer overflow was found in the core application plug-in for the Adobe Reader, that allows attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors. This is tracked by t...

CVE-2004-2470

Technical details about CVE-2004-2470 are not publicly available in the provided documents; no specifics on affected product versions, impact, or vectors are given. Monitor for updates.