Slackware Advisory SSA:2012-228-02 emacs

The remote host is missing an update as announced via advisory SSA:2012-228-02. OpenVAS Vulnerability Test $Id: esoftslkssa201222802.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2012-228-02 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: emacs

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: emacs

The remote host is missing an update to the system as announced in the referenced advisory. VID c1e5f35e-f93d-11e1-b07f-00235a5f2c9a OpenVAS Vulnerability Test $ Description: Auto generated from VID c1e5f35e-f93d-11e1-b07f-00235a5f2c9a Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Fedora Update for emacs FEDORA-2012-11876

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-3479

lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the enable-local-variables option is set to :safe, which allows user-assisted remote attackers to execute arbitrary Emacs Lisp code via a crafted file...

CVE-2012-3479

Removed by vendor...

CVE-2012-3479

CVE-2012-3479 affects GNU Emacs up to version 24.1, where lisp/files.el can trigger eval forms in local-variable sections when enable-local-variables is set to :safe. This permits a remote attacker-curated file to execute arbitrary Emacs Lisp code. Multiple advisories and NASL/Gentoo/OpenVAS entr...

CVE-2012-3479

lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the enable-local-variables option is set to :safe, which allows user-assisted remote attackers to execute arbitrary Emacs Lisp code via a crafted file...

Fedora 17 : emacs-24.1-4.fc17 (2012-11876)

CVE-2012-3479 emacs: Evaluation of 'eval' forms in file-local variable sections, when 'enable-local-variables' set to ':safe' Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...

Fedora 16 : emacs-23.3-10.fc16 (2012-11872)

CVE-2012-3479 emacs: Evaluation of 'eval' forms in file-local variable sections, when 'enable-local-variables' set to ':safe' Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...

[slackware-security] emacs (SSA:2012-228-02)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security emacs SSA:2012-228-02 New emacs packages are available for Slackware 13.1, 13.37, and -current to fix a security issue. Here are the details from the Slackware 13.37 ChangeLog: +--------------------------+...

[slackware-security] emacs

New emacs packages are available for Slackware 13.1, 13.37, and -current to fix a security issue. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/emacs-23.3-i486-2slack13.37.txz: Rebuilt. Patched to fix a security flaw in the file-local variables code. When the Emacs use...

Slackware 13.1 / 13.37 / current : emacs (SSA:2012-228-02)

New emacs packages are available for Slackware 13.1, 13.37, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2012-228-02. The text itself is copyright C...

CVE-2011-3479

CVE-2011-3479 concerns Symantec pcAnywhere 12.5.x–12.5.3 and IT Management Suite pcAnywhere Solution 7.0/7.1, which use world-writable permissions on product-installation files. This enables local users to gain privileges by modifying a file. Connected sources corroborate the affected products an...

CVE-2010-3479

CVE-2010-3479 affects BoutikOne 1.0 via SQL injection in list.php (parameter page). Root cause: improper input handling allows arbitrary SQL execution. CVSS v2 base score 7.5 (HIGH) with network attack vector and no authentication. Impact includes partial confidentiality, integrity, and availabil...

CVE-2010-3479

creationtimestamp| type| source ---|---|--- 2010-09-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15049...

Microsoft Message Queuing (MSMQ) RCE Vulnerability (951071) - Active Check

This host is missing important security update according to Microsoft Bulletin MS08-065. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cross site scripting

Cross-site scripting XSS vulnerability in the Bibliography aka Biblio module 6.x-1.6 for Drupal allows remote authenticated users, with certain content-creation privileges, to inject arbitrary web script or HTML via the Title field, probably a different vulnerability than CVE-2009-3479...

CVE-2009-3479

Cross-site scripting XSS vulnerability in Bibliography Biblio 5.x before 5.x-1.17 and 6.x before 6.x-1.6, a module for Drupal, allows remote attackers, with "create content displayed by the Bibliography module" permissions, to inject arbitrary web script or HTML via a title...

CVE-2009-3479

CVE-2009-3479 documents an XSS vulnerability in the Drupal Bibliography (Biblio) module. Affected: Drupal Bibliography 5.x (before 5.x-1.17) and 6.x (before 6.x-1.6). The flaw allows remote attackers with the permission to create content displayed by the Bibliography module to inject arbitrary we...