CVE-2011-2616

Summary (CVE-2011-2616) : An unspecified vulnerability in Opera prior to 11.50 could be exploited remotely to cause a denial of service via memory consumption on a web page (demonstrated by test262.ecmascript.org). The connected documents consistently identify Opera as the affected product and de...

Wrong HTTP response codes leak information

There are some resources exposed in FeCru where depending on their existence user may get 403 or 404 http response code depending on the existence of the resource. Because the permission check is done earlier than existence check, server may leak the existence of particular resource to the...

PHP Bible Search 'bible.php' SQL Injection and Cross Site Scripting Vulnerabilities

PHP Bible Search is prone to SQL injection and cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-2616

CVE-2010-2616 : PHP Bible Search (bible.php) is vulnerable to SQL injection via the chapter parameter, affecting the PHP Bible Search project (around version 0.99). The OpenVAS entry explicitly notes SQL injection (and also mentions cross-site scripting in its description). The root cause is unsa...

CVE-2010-2616

SQL injection vulnerability in bible.php in PHP Bible Search, probably 0.99, allows remote attackers to execute arbitrary SQL commands via the chapter parameter...

CVE-2009-2616

The CVE-2009-2616 vulnerability concerns DataCheck Solutions SitePal 1.x, where a flaw in z_admin_login.asp enables remote execution of arbitrary SQL commands via unspecified vectors. The available sources confirm an SQL injection in the login component but do not specify affected versions beyond...

CentOS Update for httpd CESA-2008:0006 centos4 x86_64

Check for the Version of httpd OpenVAS Vulnerability Test CentOS Update for httpd CESA-2008:0006 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Fedora Update for libsilc FEDORA-2008-2616

Check for the Version of libsilc OpenVAS Vulnerability Test Fedora Update for libsilc FEDORA-2008-2616 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2008-2616

CVE-2008-2616 affects Oracle PeopleSoft Enterprise PeopleTools (8.48.17, 8.49.11). The connected PeopleSoft/JD Edwards entry shows this vulnerability as network-facing with a valid-session requirement and a CVSSv2 base score of 4.9 (Medium). The impact is not described beyond remote authenticated...

CVE-2008-2143

Unspecified versions of Microsoft Outlook Web Access OWA use the Cache-Control: no-cache HTTP directive instead of no-store, which might cause web browsers that follow RFC-2616 to cache sensitive information...

Design/Logic Flaw

Unspecified versions of Microsoft Outlook Web Access OWA use the Cache-Control: no-cache HTTP directive instead of no-store, which might cause web browsers that follow RFC-2616 to cache sensitive information...

CVE-2008-2143

CVE-2008-2143 affects unspecified Microsoft Outlook Web Access (OWA) versions. The underlying issue is that OWA uses Cache-Control: no-cache instead of no-store, which may allow browsers following RFC-2616 to cache sensitive information. Impact is potential exposure of cached data; no exploitatio...

CVE-2008-2143

Unspecified versions of Microsoft Outlook Web Access OWA use the Cache-Control: no-cache HTTP directive instead of no-store, which might cause web browsers that follow RFC-2616 to cache sensitive information...

Fedora 7 : libsilc-1.0.2-6.fc7 (2008-2616)

This update fixes a buffer overflow in PKCS1 message decoding Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Moderate: Red Hat Security Advisory: httpd security update

Updated Apache httpd packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. A flaw was found in the modimap...

Apache Httpd < 2.0.63 : mod_proxy_ftp UTF-7 XSS

A workaround was added in the modproxyftp module. On sites where modproxyftp is enabled and a forward proxy is configured, a cross-site scripting attack is possible against Web browsers which do not correctly derive the response character set following the rules in RFC 2616...

Apache Httpd < 2.2.8 : mod_proxy_ftp UTF-7 XSS

A workaround was added in the modproxyftp module. On sites where modproxyftp is enabled and a forward proxy is configured, a cross-site scripting attack is possible against Web browsers which do not correctly derive the response character set following the rules in RFC 2616...

Moderate: Red Hat Security Advisory: httpd security update

Updated httpd packages that fix two security issues are now available for Red Hat Application Stack. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular and freely-available Web server. A flaw was found in the...

Adobe Flash Player fails to properly validate HTTP Referers

Overview The Adobe Flash Player fails to properly validate HTTP Referers. This may allow an attacker to conduct cross-site request forgery attacks. Description Adobe Flash Player is a player for the Flash media format and enables frame-based animations with sound to be viewed within a web browser...

CVE-2007-2616

CVE-2007-2616: A stack-based buffer overflow in the SSL version of the NMDMC.EXE service of Novell NetMail 3.52e FTF2 (likely earlier) allows remote attackers to execute arbitrary code via a crafted request. The affected component is the SSL-enabled NMDMC.EXE service; root cause is a stack overfl...