Stable Channel Release

The Chrome team is excited to announce the release of Chrome 21 to the Stable Channel. 21.0.1180.57for Mac and Linux. 21.0.1180.60 for Windowsand Chrome Frame. Chrome 21 contains a number of new features including a new API forhigh-quality video and audio communication.More detailed updates are...

Apple Safari Webkit Multiple Vulnerabilities - March12 (Windows)

The host is installed with Apple Safari web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafariwebkitmultvulnmar12win.nasl 5888 2017-04-07 09:01:53Z teissa $ Apple Safari Webkit Multiple Vulnerabilities - March12 Windows Authors: Rachana Shetty Copyrigh...

Apple Safari Webkit Multiple Vulnerabilities (Mar 2012) - Windows

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

Google Chrome < 14.0.835.163 Multiple Vulnerabilities (Sep 2011) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2854

Technical details about CVE-2011-2854 are not publicly available in the provided connected documents. The references mention the CVE but do not describe affected product/version, root cause, or impact. Monitor for updates.

CVE-2010-2854

Multiple cross-site scripting XSS vulnerabilities in modfile.php in Event Horizon EVH 1.1.10, when magicquotesgpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the 1 YourEmail and 2 VerificationNumber parameters, which are not properly handled in a forced SQL erro...

CVE-2010-2854

Event Horizon EVH 1.1.10 modfile.php is affected by XSS and SQL injection vulnerabilities when magic_quotes_gpc is disabled. The issues allow remote attackers to inject arbitrary web script or HTML via the YourEmail and VerificationNumber parameters, reportedly caused by improper handling within ...

CVE-2010-2854

Multiple cross-site scripting XSS vulnerabilities in modfile.php in Event Horizon EVH 1.1.10, when magicquotesgpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the 1 YourEmail and 2 VerificationNumber parameters, which are not properly handled in a forced SQL erro...

Debian: Security Advisory (DSA-1871-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1871-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-2854

Wordpress before 2.8.3 does not check capabilities for certain actions, which allows remote attackers to make unauthorized edits or additions via a direct request to 1 edit-comments.php, 2 edit-pages.php, 3 edit.php, 4 edit-category-form.php, 5 edit-link-category-form.php, 6 edit-tag-form.php, 7...

CVE-2009-2854

Wordpress before 2.8.3 does not check capabilities for certain actions, which allows remote attackers to make unauthorized edits or additions via a direct request to 1 edit-comments.php, 2 edit-pages.php, 3 edit.php, 4 edit-category-form.php, 5 edit-link-category-form.php, 6 edit-tag-form.php, 7...

CVE-2009-2854

CVE-2009-2854 affects WordPress prior to 2.8.3, where wp-admin actions (edit-comments.php, edit-pages.php, edit.php, and related forms) lack proper authentication checks, enabling remote attackers to perform unauthorized edits or additions via direct requests. The issue is rooted in missing acces...

CVE-2008-2854

CVE-2008-2854 concerns Orlando CMS 0.6. The provided connected documents specify PHP remote file inclusion vulnerabilities allowing remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[preloc] parameter to two files: modules/core/logger/init.php and AJAX/newscat.php. Impact is ...

CVE-2008-2854

creationtimestamp| type| source ---|---|--- 2008-06-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5864...

CVE-2007-2854

CVE-2007-2854 describes multiple SQL injection vulnerabilities in the PHP script account_change.php of BtiTracker 1.4.1 and earlier . The vulnerability is exploitable via the parameters style or langue , allowing remote attackers to execute arbitrary SQL commands. The vulnerability description in...