115 matches found
Fedora 14 : pam-1.1.1-6.fc14 (2010-17155)
This update fixes moderate vulnerabilities in pamenv, pamnamespace, pammail, and pamxauth modules. Default configurations or configurations generated by authconfig are not affected by the pammail and pamnamespace vulnerabilities. Note that Tenable Network Security has extracted the preceding...
RHEL 5 : pam (RHSA-2010:0819)
Updated pam packages that fix three security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
pam security update
CentOS Errata and Security Advisory CESA-2010:0819 Updated pam packages that fix three security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base score...
pam security update
0.99.6.2-6.2 - fix insecure dropping of priviledges in pamxauth and pammail - CVE-2010-3316 637898, CVE-2010-3435 641335 - fix insecure executing of scripts with user supplied environment variables in pamnamespace - CVE-2010-3853 643043...
CVE-2009-3316
SQL injection vulnerability in the JReservation comjreservation component 1.0 and 1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a propertycpanel action to index.php...
CVE-2009-3316
The CVE-2009-3316 issue affects Joomla! installations using the JReservation (com_jreservation) component (versions 1.0 and 1.5). A flaw in the pid parameter of the propertycpanel action to index.php allows an attacker to perform SQL injection and execute arbitrary SQL commands. This vulnerabilit...
CVE-2009-3316
creationtimestamp| type| source ---|---|--- 2009-09-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9713...
Gentoo Security Advisory GLSA 200707-12 (vlc)
The remote host is missing updates announced in advisory GLSA 200707-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-3316
CVE-2008-3316 concerns a cross-site scripting (XSS) vulnerability in the search feature of the Geeklog Forum Plugin (pre-2.7.1). The issue allows remote attackers to inject arbitrary script/HTML via unspecified vectors; likely related to files such as public_html/index.php, config.php, and functi...
Debian Security Advisory DSA 1332-1 (vlc)
The remote host is missing an update to vlc announced via advisory DSA 1332-1. OpenVAS Vulnerability Test $Id: deb13321.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1332-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
FreeBSD : vlc -- format string vulnerability and integer overflow (7128fb45-2633-11dc-94da-0016179b2dd5)
isecpartners reports : VLC is vulnerable to a format string attack in the parsing of Vorbis comments in Ogg Vorbis and Ogg Theora files, CDDA data or SAP/SDP service discovery messages. Additionally, there are two errors in the handling of wav files, one a denial of service due to an uninitialize...
CVE-2007-3316
Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in 1 an Ogg/Vorbis file, 2 an Ogg/Theora file, 3 a CDDB entry for a CD Digital Audio CDDA...
CVE-2007-3316
Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of service crash or execute arbitrary code via format string specifiers in 1 an Ogg/Vorbis file, 2 an Ogg/Theora file, 3 a CDDB entry for a CD Digital Audio CDDA...
CVE-2006-3316
The connected documents confirm multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.4–3.0.6 triggered by unsafely using the phpraid_dir URL parameter to include files. Specifically: CVE-2006-3116 (3.0.4/3.0.5) allows code execution via include paths in configuration.php, guilds.php,...