Gentoo Security Advisory GLSA 201201-01 (phpMyAdmin)

The remote host is missing updates announced in advisory GLSA 201201-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Mandriva Update for phpmyadmin MDVSA-2011:124 (phpmyadmin)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for phpMyAdmin FEDORA-2011-9734

Check for the Version of phpMyAdmin OpenVAS Vulnerability Test Fedora Update for phpMyAdmin FEDORA-2011-9734 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CVE-2011-2719

libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attackers to modify the SESSION superglobal array, other superglobal arrays, and certain...

CVE-2011-2719

libraries/auth/swekey/swekey.auth.lib.php in phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2 does not properly manage sessions associated with Swekey authentication, which allows remote attackers to modify the SESSION superglobal array, other superglobal arrays, and certain...

CVE-2011-2719

CVE-2011-2719 affects phpMyAdmin 3.x before 3.3.10.3 and 3.4.x before 3.4.3.2. The vulnerability arises from improper handling of sessions associated with Swekey authentication in libraries/auth/swekey/swekey.auth.lib.php, enabling remote attackers to modify the SESSION superglobal (and other rel...

Possible superglobal and local variables manipulation in swekey authentication.

PMASA-2011-12 Announcement-ID: PMASA-2011-12 Date: 2011-07-23 Updated: 2011-07-25 Summary Possible superglobal and local variables manipulation in swekey authentication. Description It was possible to manipulate the PHP superglobals including SESSION using some of the Swekey authentication code...

CVE-2010-2719

In the provided documents, phpaaCMS shows a SQL injection in show.php via the id parameter (version 0.3.1 UTF-8; potentially other versions). The root cause is improper input handling that allows remote attackers to execute arbitrary SQL commands. The OpenVAS entry explicitly notes multiple SQL i...

VMSA-2010-0002 : VMware vCenter update release addresses multiple security issues in Java JRE

a. Java JRE Security Update JRE update to version 1.5.022, which addresses multiple security issues that existed in earlier releases of JRE. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the following names to the security issues fixed in JRE 1.5.018: CVE-2009-1093,...

Buffer overflow

Buffer overflow in the listing module in Netwide Assembler NASM before 2.03.01 has unknown impact and attack vectors, a different vulnerability than CVE-2008-2719...

Mandriva Linux Security Advisory : nasm (MDVSA-2008:120)

An off-by-one error was found in nasm 2.02 that allowed context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted file that triggers a stack-based buffer overflow CVE-2008-2719. The updated packages have been patched to prevent this issue...

Mandriva Update for nasm MDVSA-2008:120 (nasm)

Check for the Version of nasm OpenVAS Vulnerability Test Mandriva Update for nasm MDVSA-2008:120 nasm Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

BELL-CVE-2008-2719 CVE-2008-2719 does not affect BellSoft software

Bulletin has no description...

CVE-2008-2719

CVE-2008-2719 affects Netwide Assembler (NASM) 2.02. The off-by-one error in the ppscan function (preproc.c) can cause a stack-based buffer overflow, leading to a denial of service and potentially arbitrary code execution via a crafted input file. Public references in Mandriva and related advisor...

CVE-2004-2719

The CVE-2004-2719 entry concerns Foxmail 5.0.300, where a buffer overflow in the UrlToLocal function of PunyLib.dll can be triggered by a mail message with a long From field. This vulnerability allows remote attackers to potentially execute arbitrary code due to the overflow in UrlToLocal. The de...

CVE-2007-2719

CVE-2007-2719 affects HP Systems Insight Manager (SIM) versions 4.2 and 5.0 SP4/SP5. The vulnerability is a session fixation flaw that allows remote attackers to hijack web sessions by setting the JSESSIONID cookie. Documented impact is complete confidentiality, integrity, and availability compro...

CVE-2006-2719

JIWA Financials 6.4.14 stores usernames and passwords for all accounts in cleartext in the HRStaff table in Microsoft SQL Server, and sends the usernames and passwords in cleartext to the application's SQL Server ODBC driver, which might allow context-dependent attackers to obtain the passwords...

CVE-2006-2719

JIWA Financials 6.4.14 stores usernames and passwords for all accounts in cleartext in the HR_Staff table of Microsoft SQL Server and transmits them in cleartext to the application's SQL Server ODBC driver, enabling potential credential exposure to context-dependent attackers. The available docum...

CVE-2005-2719

Vulnerability CVE-2005-2719 affects Ventrilo server versions 2.1.2 through 2.3.0. A remote attacker can crash the server by sending a malformed status packet to UDP port 3784, due to handling of status queries with data shorter than the header specifies. CVSS base score reported as 5.0 (MEDIUM) w...