77 matches found
Fedora 15 : wireshark-1.4.9-1.fc15 (2011-12403)
This update fixes several security bugs, see http://www.wireshark.org/docs/relnotes/wireshark-1.4.9.html for full details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
CVE-2011-3266
Wireshark vulnerability CVE-2011-3266 affects the IKEv1 dissector: the proto_tree_add_item handling can be exploited by a malformed IKE packet with many items to trigger a denial of service (infinite loop). Affected versions per connected sources: Wireshark 1.6.0–1.6.1 and 1.4.0–1.4.8. Root cause...
CVE-2010-3266
Summary (CVE-2010-3266): BugTracker.NET
BugTracker.NET 3.4.4 - Multiple Vulnerabilities
Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Multiple vulnerabilities in BugTracker.Net 1. Advisory Information Title: Multiple vulnerabilities in BugTracker.Net Advisory Id: CORE-2010-1109 Advisory URL:...
BugTracker.NET 3.4.4 - Multiple Vulnerabilities
BugTracker.NET 3.4.4 - Multiple Vulnerabilities Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Multiple vulnerabilities in BugTracker.Net 1. Advisory Information Title: Multiple vulnerabilities in BugTracker.Net Advisory Id: CORE-2010-1109 Advisory URL:...
Core Security Technologies Advisory 2010.1109
Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Multiple vulnerabilities in BugTracker.Net 1. Advisory Information Title: Multiple vulnerabilities in BugTracker.Net Advisory Id: CORE-2010-1109 Advisory URL:...
CORE-2010-1109 - Multiple vulnerabilities in BugTracker.Net
Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Multiple vulnerabilities in BugTracker.Net 1. Advisory Information Title: Multiple vulnerabilities in BugTracker.Net Advisory Id: CORE-2010-1109 Advisory URL:...
CVE-2010-3266
creationtimestamp| type| source ---|---|--- 2010-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35031 2010-12-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15653...
openSUSE Security Update : opera (opera-1532)
Version upgrade of Opera to 10.1 to fix : - CVE-2009-3265: CVSS v2 Base Score: 4.3 CVE-2009-3266: CVSS v2 Base Score: 4.3 two XSS attacks via RSS/Atom - CVE-2009-3831: CVSS v2 Base Score: 9.3 possible remote arbitrary code execution via crafted domain names %NASLMINLEVEL 70300 C Tenable Network...
openSUSE Security Update : opera (opera-1532)
Version upgrade of Opera to 10.1 to fix : - CVE-2009-3265: CVSS v2 Base Score: 4.3 CVE-2009-3266: CVSS v2 Base Score: 4.3 two XSS attacks via RSS/Atom - CVE-2009-3831: CVSS v2 Base Score: 9.3 possible remote arbitrary code execution via crafted domain names %NASLMINLEVEL 70300 C Tenable Network...
openSUSE Security Update : opera (opera-1532)
Version upgrade of Opera to 10.1 to fix : - CVE-2009-3265: CVSS v2 Base Score: 4.3 CVE-2009-3266: CVSS v2 Base Score: 4.3 two XSS attacks via RSS/Atom - CVE-2009-3831: CVSS v2 Base Score: 9.3 possible remote arbitrary code execution via crafted domain names %NASLMINLEVEL 70300 C Tenable Network...
Opera Multiple Cross-Site Scripting Vulnerabilities - Sep09 (Linux)
This host is installed with Opera and is prone to multiple Cross-Site Scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperamultxssvulnsep09lin.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Multiple Cross-Site Scripting Vulnerabilities - Sep09 Linux Authors: Sharath S Copyright:...
CVE-2009-3266
Opera before 10.01 is vulnerable to cross-site scripting via crafted RSS/Atom feeds due to improper HTML restriction when processing application/rss+xml as scripted content. This can enable remote XSS and cross-zone scripting on the Feed Subscription Page to read feeds or create subscriptions. Af...
CVE-2008-3266
The CVE-2008-3266 entry describes a SQL injection vulnerability in the SoftAcid Hotel Reservation System (HRS) Multi, specifically in picture_pic_bv.asp via the key parameter. The root cause is improper input handling that allows an attacker to terminate the existing query and inject arbitrary SQ...
CVE-2008-3266
creationtimestamp| type| source ---|---|--- 2008-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6105...
CVE-2006-3266
Bee-hive Lite 1.2 and earlier is affected by multiple PHP remote file inclusion vulnerabilities when register_globals is enabled. The weaknesses allow an attacker to execute arbitrary PHP code by supplying URLs in various parameters across several scripts, including header, mysqlCall, mysqlcall, ...