Adobe Shockwave Player Multiple Vulnerabilities-01 (Sep 2013) - Mac OS X

Adobe Shockwave Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2013-3359

CVE-2013-3359 concerns Adobe Shockwave Player before 12.0.4.144. The connected Red Hat entries and OpenVAS/NVD references describe a memory-corruption/vector-based vulnerability that can allow arbitrary code execution or a denial of service when processing content via unspecified vectors. Affecte...

KLA10255 Multiple ACE vulnerabilities in Adobe Shockwave Player

Multiple unspecified vulnerabilities were found in Shockwave player. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. These vulnerabilities can be exploited remotely at unspecified vectors. Original advisories - Related products...

RHEL 5 : conga (RHSA-2013:0128)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0128 advisory. - conga: insecure handling of luci web interface sessions CVE-2012-3359 Note that Nessus has not tested for this issue but has instead relied only on...

CentOS 5 : conga (CESA-2013:0128)

Updated conga packages that fix one security issue, multiple bugs, and add two enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives ...

Low: Red Hat Security Advisory: conga security, bug fix, and enhancement update

Updated conga packages that fix one security issue, multiple bugs, and add two enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives ...

CVE-2011-3359

CVE-2011-3359 affects the Linux kernel (pre-2.6.39), specifically the b43 wireless driver. The dma_rx path does not allocate receive buffers properly, enabling remote attackers to crash the system via a crafted frame (DoS). Affected code is in drivers/net/wireless/b43/dma.c. Remediation: upgrade ...

Ubuntu: Security Advisory (USN-1325-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for linux-ti-omap4 USN-1325-1

Ubuntu Update for Linux kernel vulnerabilities USN-1325-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13251.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-ti-omap4 USN-1325-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...

CVE-2009-3359

CVE-2009-3359 describes multiple cross-site scripting (XSS) vulnerabilities in Match Agency BiZ 1.0. The issues allow remote attackers to inject arbitrary web script or HTML via the (1) important parameter to edit_profile.php and (2) pid parameter to report.php. The trusted sources indicate an XS...

CVE-2009-3359

creationtimestamp| type| source ---|---|--- 2009-09-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34600 2009-09-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34601...

CVE-2008-3359

SQL injection vulnerability in register.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2008-3359

CVE-2008-3359 describes a SQL injection vulnerability in register.php of the Owl Intranet Knowledgebase (version 0.95 and earlier). The underlying issue allows remote attackers to execute arbitrary SQL commands through the username parameter. The vulnerability is documented across multiple source...

Debian Security Advisory DSA 1103-1 (kernel-source-2.6.8)

The remote host is missing an update to kernel-source-2.6.8 announced via advisory DSA 1103-1. OpenVAS Vulnerability Test $Id: deb11031.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1103-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1103)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 dev1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 SERWEBconfigdir parameter to loadlang.php, 2 SERWEBfunctionsdir parameter to mainprepend.php, and the 3 PHPLIBlibdir parameter to...

CVE-2007-3359

CVE-2007-3359 describes multiple PHP remote file inclusion vulnerabilities in SerWeb 0.9.6 and earlier. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the _SERWEB[serwebdir] parameter to either html/load_apu.php or html/mail_prepend.php. The vulnerability ori...

CVE-2006-3359

CVE-2006-3359 affects NewsPHP 2006 PRO, with multiple SQL injection flaws in index.php (parameters: words, id, topmenuitem, cat_id) and in inc/rss_feed.php (category). Attackers could inject arbitrary scripts via these parameters. Public records (NVD/CVELIST) describe the vulnerability and impact...

CVE-2005-3359

CVE-2005-3359 affects Linux kernel 2.6.x (atm module) where certain socket calls can produce inconsistent references counts on loadable protocol modules, enabling a local user to trigger a denial of service (panic). Publicly documented in Debian/DSA-1103-1 and Red Hat/CESA-RHSA-2006:0493 style ad...