[RT-SA-2015-002] SQL Injection in TYPO3 Extension Akronymmanager

Advisory: SQL Injection in TYPO3 Extension Akronymmanager An SQL injection vulnerability in the TYPO3 extension "Akronymmanager" allows authenticated attackers to inject SQL statements and thereby read data from the TYPO3 database. Details ======= Product: sbakronymmanager Affected Versions: =0.5...

CVE-2015-2803

CVE-2015-2803 is a SQL injection affecting the TYPO3 extension sb_akronymmanager (Akronymmanager) for versions

TYPO3 Akronymmanager Extension 0.5.0 - SQL Injection Vulnerability

TYPO3 Extension Akronymmanager versions 0.5.0 and below suffer from a remote SQL injection vulnerability. Advisory: SQL Injection in TYPO3 Extension Akronymmanager An SQL injection vulnerability in the TYPO3 extension "Akronymmanager" allows authenticated attackers to inject SQL statements and...

TYPO3 Extension Akronymmanager 0.5.0 - SQL Injection

Advisory: SQL Injection in TYPO3 Extension Akronymmanager An SQL injection vulnerability in the TYPO3 extension "Akronymmanager" allows authenticated attackers to inject SQL statements and thereby read data from the TYPO3 database. Details ======= Product: sbakronymmanager Affected Versions:...

TYPO3 Extension Akronymmanager 0.5.0 SQL Injection

Advisory: SQL Injection in TYPO3 Extension Akronymmanager An SQL injection vulnerability in the TYPO3 extension "Akronymmanager" allows authenticated attackers to inject SQL statements and thereby read data from the TYPO3 database. Details ======= Product: sbakronymmanager Affected Versions: =0.5...

CVE-2014-2803

CVE-2014-2803 affects Microsoft Internet Explorer (IE) versions 8–10, where memory corruption can be triggered by visiting a crafted page, enabling remote code execution or memory corruption-based denial of service. Connected sources confirm IE memory corruption vulnerabilities with remote exploi...

Debian DSA-2803-1 : quagga - several vulnerabilities

Multiple vulnerabilities were discovered in Quagga, a BGP/OSPF/RIP routing daemon : - CVE-2013-2236 A buffer overflow was found in the OSPF API-server exporting the LSDB and allowing announcement of Opaque-LSAs. - CVE-2013-6051 bgpd could be crashed through BGP updates. This only affects...

CVE-2013-2803

CVE-2013-2803 affects ProSoft RadioLinx ControlScape before version 6.00.040. The issue is a cryptographically weak PRNG seed/seed strategy (CRuntime srand/rand) used to generate passphrases, enabling an attacker to forecast generated passwords and perform expedited brute-force access. Descriptio...

Oracle Linux 3 / 4 : seamonkey (ELSA-2008-0547)

From Red Hat Security Advisory 2008:0547 : Updated SeaMonkey packages that fix a security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security...

Debian DSA-2624-1 : ffmpeg - several vulnerabilities

Several vulnerabilities have been discovered in FFmpeg, a multimedia player, server and encoder. Multiple input validations in the decoders/demuxers for Shorten, Chinese AVS video, VP5, VP6, AVI, AVS and MPEG-1/2 files could lead to the execution of arbitrary code. Most of these issues were...

[SECURITY] [DSA 2624-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2624-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 16, 2013 http://www.debian.org/security/faq -...

[USN-1705-1] Libav vulnerabilities

========================================================================== Ubuntu Security Notice USN-1705-1 January 28, 2013 libav vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu Update for libav USN-1705-1

Check for the Version of libav OpenVAS Vulnerability Test $Id: gbubuntuUSN17051.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for libav USN-1705-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

CVE-2012-2803

CVE-2012-2803 describes a double-free vulnerability in the FFmpeg/Libav code path, specifically in the mpeg_decode_frame function (libavcodec/mpeg12.c). Affected products include FFmpeg prior to 0.11 and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5. The description notes the impact as unknown,...

Scientific Linux Security Update : thunderbird on SL4.x, SL5.x i386/x86_64

Multiple flaws were found in the processing of malformed JavaScript content. An HTML mail containing such malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code as the user running Thunderbird. CVE-2008-2801, CVE-2008-2802, CVE-2008-2803 Several flaws were foun...

Google Chrome Multiple Vulnerabilities - August11 (MacOSX)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnaug11macosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Google Chrome Multiple Vulnerabilities - August11 MacOSX Authors: Rachana Shetty Copyright: Copyright c 2011...

CVE-2011-2803

CVE-2011-2803 affects Google Chrome prior to 13.0.782.107. The issue arises in handling Skia paths, enabling a remote attacker to induce a denial of service via an out-of-bounds read. Vectors are not specified in the provided documents. Public references corroborate the CVE and list it under Chro...

openSUSE Security Update : kernel (openSUSE-SU-2010:0895-2)

This security update of the SUSE Linux Enterprise 11 GA kernel updates the kernel to 2.6.27.54 and fixes various security issues and other bugs. Following security issues were fixed: CVE-2010-3310: Multiple integer signedness errors in net/rose/afrose.c in the Linux kernel allowed local users to...

SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 3358 / 3361 / 3362)

This security update of the SUSE Linux Enterprise 11 GA kernel updates the kernel to 2.6.27.54 and fixes various security issues and other bugs. The following security issues were fixed : - Multiple integer signedness errors in net/rose/afrose.c in the Linux kernel allowed local users to cause a...

Debian Security Advisory DSA 2094-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 2094-1. OpenVAS Vulnerability Test $Id: deb20941.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2094-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...