openSUSE Security Update : MozillaFirefox (MozillaFirefox-1000)

The Mozilla Firefox browser was updated to version 3.0.11, fixing various bugs and security issues : - MFSA 2009-24/CVE-2009-1392/CVE-2009-1832/CVE-2009-1833 Crashes with evidence of memory corruption rv:1.9.0.11 - MFSA 2009-25/CVE-2009-1834 bmo479413 URL spoofing with invalid unicode characters ...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : linux, linux-source-2.6.15 vulnerabilities (USN-793-1)

Igor Zhbanov discovered that NFS clients were able to create device nodes even when rootsquash was enabled. An authenticated remote attacker could create device nodes with open permissions, leading to a loss of privacy or escalation of privileges. Only Ubuntu 8.10 and 9.04 were affected...

CVE-2009-2611

creationtimestamp| type| source ---|---|--- 2009-06-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9018...

Debian: Security Advisory (DSA-1820-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Security Advisory SUSE-SA:2009:034 (MozillaFirefox)

The remote host is missing updates announced in advisory SUSE-SA:2009:034. OpenVAS Vulnerability Test $Id: susesa2009034.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:034 MozillaFirefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

S-CMS 2.0b3 - Multiple Local File Inclusions

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE LOC...

Solaris Update for lp 114980-25

Check for the Version of lp OpenVAS Vulnerability Test Solaris Update for lp 114980-25 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

DDIVRT-2009-25 IPsession SQL Injection Vulnerability

Title ----- DDIVRT-2009-25 IPsession SQL Injection Vulnerability Severity -------- Medium Date Discovered --------------- March 31, 2009 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: David Marshall and r@b13$ Vulnerability Description...

Dog Pedigree Online Database 1.0.1b - Multiple SQL Injections

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE SQL...

Unfixed XSS vulnerability at www1.gantep.edu.tr

Security researcher BlueMax, has submitted on 25/04/2009 a cross-site-scripting XSS vulnerability affecting www1.gantep.edu.tr, which at the time of submission ranked 165314 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009. It is...

Solaris 2.6 (x86) : 105622-25

SunOS 5.6x86: c2audit, libbsm and cron pa. Date this patch was last updated by Sun : Dec/19/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (sparc) : 105621-25

SunOS 5.6: c2audit, libbsm and cron patch. Date this patch was last updated by Sun : Nov/10/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Design/Logic Flaw

The 1 Airline Product Set aka ALPS, 2 Serial Tunnel Code aka STUN, 3 Block Serial Tunnel Code aka BSTUN, 4 Native Client Interface Architecture NCIA support, 5 Data-link switching aka DLSw, 6 Remote Source-Route Bridging RSRB, 7 Point to Point Tunneling Protocol PPTP, 8 X.25 for Record Boundary...

CVE-2009-0629

Cisco IOS DLSw feature (12.2, 12.3, 12.4, 15.0, 15.1) is affected by a DoS via a sequence of malformed packets exploiting a narrow timing window (Bug ID CSCtf74999). The related Red Hat/NVD entries describe that this vulnerability can cause device crashes or reloads. Mitigation details are not pr...

DNS Tunneling Client Detection (port 25 non-tcp)

Binary data 4975.prm...

Unfixed XSS vulnerability at www.gslc-bsa.org

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.gslc-bsa.org, which at the time of submission ranked 748576 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

GLSA-200903-25 : Courier Authentication Library: SQL Injection vulnerability

The remote host is affected by the vulnerability described in GLSA-200903-25 Courier Authentication Library: SQL Injection vulnerability It has been reported that some parameters used in SQL queries are not properly sanitized before being processed when using a non-Latin locale Postgres database...

CVE-2009-0028

creationtimestamp| type| source ---|---|--- 2009-02-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32815...

Unfixed XSS vulnerability at www.cretaquarium.gr

Security researcher kernelpanic, has submitted on 01/06/2009 a cross-site-scripting XSS vulnerability affecting www.cretaquarium.gr, which at the time of submission ranked 2413123 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It i...

Unfixed XSS vulnerability at acs.geomaticien.org

Security researcher The Rat, has submitted on 25/12/2008 a cross-site-scripting XSS vulnerability affecting acs.geomaticien.org, which at the time of submission ranked 13142349 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2009. It is...