154 matches found
Ubuntu Update for webkit vulnerabilities USN-1006-1
Ubuntu Update for Linux kernel vulnerabilities USN-1006-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10061.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for webkit vulnerabilities USN-1006-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
CVE-2010-2797
Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the defaultcmslang parameter to an admin script, as demonstrated by admin/addbookmark.php, a different...
DSquare Exploit Pack: D2SEC_CMSMS
Name| d2seccmsms ---|--- CVE| CVE-2010-2797 Exploit Pack| D2ExploitPack Description| CMS Made Simple 1.8 Local File Include Vulnerability Notes|...
CMS Made Simple < 1.8.1 Parameter LFI Vulnerability - Active Check
CMS Made Simple is prone to a local file inclusion LFI vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
SLES9: Security update for openssh,openssh-askpass
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openssh-askpass openssh For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 502140...
SLES9: Security update for openssh, openssh-askpass
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openssh-askpass openssh For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 502140...
CVE-2009-2797
The WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not remove usernames and passwords from URLs sent in Referer headers, which allows remote attackers to obtain sensitive information by reading Referer logs on a web server...
CVE-2009-2797
CVE-2009-2797 affects the WebKit component used by Safari on Apple iPhone OS prior to 3.1 (and iPhone OS prior to 3.1.1 on iPod touch). The issue is that usernames and passwords sent in URLs are not removed from Referer headers, allowing remote attackers to obtain sensitive information by reading...
CVE-2008-2797
The CVE-2008-2797 entry describes a Cross-site Scripting (XSS) vulnerability in ManageEngine OpUtils 5.0, specifically in MainLayout.do where the hostName parameter is used when viewing an SNMP graph. The underlying issue is unsanitized input in the hostName parameter that allows an attacker to i...
RHEL 4 : xterm (RHSA-2007:0701)
An updated xterm package that corrects a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and...
CVE-2007-2797
The CVE-2007-2797 issue affects xterm: Red Hat Enterprise Linux 4 (and derivatives such as CentOS 4) packages built with a bug that caused pseudo-terminal device files to be owned by the wrong group, enabling local users to write data to other users’ terminals. Public advisories (RHSA-2007:0701, ...
DEBIAN-CVE-2005-2797
OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding "-D" option when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality...
CVE-2005-2797
Vulnerability summary ( OpenSSH 4.0 and earlier than 4.2 ) OpenSSH 4.0 and older than 4.2 is affected by improper handling of dynamic port forwarding when no listen address is provided for the -D option, which may enable GatewayPorts. The connected OpenVAS entry aligns with this class of issue bu...