Fedora Update for glpi-mass-ocs-import FEDORA-2011-9690

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 14 : glpi-0.78.5-2.svn14966.fc14 / glpi-data-injection-2.0.2-1.fc14 / etc (2011-9690)

New major version of GLPI and plugins. For more information, see announcement on http://www.glpi-project.org/spip.php?lang=en This update also include a security fix. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenab...

Fedora Update for glpi FEDORA-2011-9639

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-2720

The CVE-2011-2720 entry concerns GLPI pre-0.80.2 where the autocompletion feature does not blacklist certain username/password fields, allowing a remote attacker to extract sensitive information via a crafted POST request. Affected software: GLPI (prior to 0.80.2). Root cause: input fields used f...

Fedora 15 : glpi-0.78.5-2.svn14966.fc15 (2011-9639)

This update fixes a database information disclosure vulnerability in GLPI Advisory not yet published. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

CVE-2010-2720

SQL injection vulnerability in list.php in phpaaCms 0.3.1 UTF-8, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

VMSA-2010-0002 : VMware vCenter update release addresses multiple security issues in Java JRE

a. Java JRE Security Update JRE update to version 1.5.022, which addresses multiple security issues that existed in earlier releases of JRE. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the following names to the security issues fixed in JRE 1.5.018: CVE-2009-1093,...

CVE-2009-2720

CVE-2009-2720 affects Sun Java SE 6 Swing (javax.swing.plaf.synth.SynthContext.isSubregion). The vulnerability can cause a denial of service via a NullPointerException in the Jemmy library and is triggered by unspecified vectors. A patch exists in Sun Java SE 6, Update 15 or newer; upgrading to U...

Fedora Update for gallery2 FEDORA-2008-5576

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-2720

Cross-site scripting XSS vulnerability in Menalto Gallery before 2.2.5 allows remote attackers to inject arbitrary web script or HTML via the 1 host and 2 path components of a URL...

CVE-2008-2720

Summary: CVE-2008-2720 affects Menalto Gallery up to version 2.2.5 and is a cross-site scripting (XSS) vulnerability exploitable via the (1) host and (2) path components of a URL. The bug allows remote attackers to inject arbitrary web script or HTML. Affected software: Menalto Gallery prior to 2...

CVE-2004-2720

Cross-site scripting XSS vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via javascript events in the Email parameter...

CVE-2004-2720

The vulnerability CVE-2004-2720 affects Snitz Forums 2000 (versions 3.4.04 and earlier) where a cross-site scripting (XSS) flaw exists in register.asp. The root cause is unvalidated input in the Email parameter, allowing an attacker to inject arbitrary web script or HTML via javascript events. Th...

CVE-2007-2720

CVE-2007-2720 affects Group-Office prior to 2.16-13. The issue is improper validation of user IDs, allowing remote attackers to obtain sensitive information via requests to (1) message.php and (2) messages.php in the modules/email directory. The available documents do not provide a patch or remed...

CVE-2006-2720

SQL injection in VARIOMAT's news.php (parameter subcat) allows remote attackers to execute arbitrary SQL commands. CVE-2006-2720; impacted: VARIOMAT news.php. Risk: CVSS v2 base score 7.5 (HIGH). No remediation details provided in the supplied documents.

CVE-2004-2720

Cross-site scripting XSS vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via javascript events in the Email parameter...