CVE-2013-2749

CVE-2013-2749 (mode C) : Several connected sources describe a PHP Object Injection vulnerability in Vanilla Forums

[KIS-2013-09] Vanilla Forums <= 2.0.18.5 (class.utilitycontroller.php) PHP Object Injection Vulnerability

------------------------------------------------------------------------------------------- Vanilla Forums = 2.0.18.5 class.utilitycontroller.php PHP Object Injection Vulnerability ------------------------------------------------------------------------------------------- - Software Link:...

Vanilla Forums 2.0.18.5 Local File Inclusion

Vanilla Forums versions 2.0.18.5 and below suffer from a PHP object injection vulnerability in class.utilitycontroller.php that in turn allows for local file inclusion. ------------------------------------------------------------------------------------------- Vanilla Forums...

Vanilla Forums 2.0.18.5 Local File Inclusion

------------------------------------------------------------------------------------------- Vanilla Forums ValidateTransientKey$TransientKey 324. // If messages wasn't empty 325. if $Messages != '' 326. // Unserialize them & save them if necessary 327. $Messages = GdnFormat::Unserialize$Messages;...

CVE-2013-3528

Vanilla Forums prior to 2.0.18.6 is vulnerable to a PHP Object Injection in class.utilitycontroller.php (

CVE-2012-3528

TYPO3 Backend XSS vulnerability (CVE-2012-3528) affects TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12, and 4.7.x before 4.7.4. Summary: remote authenticated backend users can inject arbitrary web script/HTML via unspecified vectors. Root cause: cross-site scripting in the backend component. Impa...

[SECURITY] [DSA 2537-1] typo3-src security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2537-1 [email protected] http://www.debian.org/security/ Florian Weimer August 30, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2537-1] typo3-src security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2537-1 [email protected] http://www.debian.org/security/ Florian Weimer August 30, 2012 http://www.debian.org/security/faq -...

CVE-2011-3528

Technical details about CVE-2011-3528 are not provided in the connected documents; monitor for updates on the affected PeopleSoft HRMS 8.9 eProfile vulnerability.

SuSE 11.1 Security Update : IBM Java 1.4.2 (SAT Patch Number 3528)

IBM Java 1.4.2 was updated to SR13 FP6 to fix various bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000...

CVE-2010-3528

Unspecified vulnerability in the PeopleSoft Enterprise CRM - Common Components component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 41, 9.0 Bundle 28, and 9.1 Bundle 4 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2010-3528

CVE-2010-3528 affects PeopleSoft Enterprise CRM – Common Components, with vulnerable versions 8.9 Bundle #41, 9.0 Bundle #28, and 9.1 Bundle #4. The initial description notes an unspecified vulnerability allowing remote authenticated users to affect confidentiality via unknown vectors. Connected ...

SLES10: Security update for Linux kernel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kernel-bigsmp kernel-debug kernel-default kernel-kdump kernel-smp kernel-source kernel-syms kernel-vmi kernel-vmipae kernel-xen kernel-xenpae More details ma...

CVE-2009-3528

MyMsg 1.0.3 is vulnerable in profile.php (SQL injection) via the uid parameter in a show action. The OpenVAS entries confirm a remote-authenticated SQLi flaw that could allow arbitrary SQL execution. Impact is partial confidentiality, integrity, and availability, with a CVSS v2 base score of 6.5 ...

CVE-2009-3528

creationtimestamp| type| source ---|---|--- 2009-07-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9105...

Fedora Core 9 FEDORA-2009-6846 (kernel)

The remote host is missing an update to kernel announced via advisory FEDORA-2009-6846. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 9 FEDORA-2009-5383 (kernel)

The remote host is missing an update to the kernel announced via advisory FEDORA-2009-5383. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

RedHat Security Advisory RHSA-2009:0326

The remote host is missing updates to the kernel announced in advisory RHSA-2009:0326. Security fixes: memory leaks were found on some error paths in the icmpsend function in the Linux kernel. This could, potentially, cause the network connectivity to cease. CVE-2009-0778, Important Chris Evans...

CentOS Security Advisory CESA-2009:0326 (kernel)

The remote host is missing updates to kernel announced in advisory CESA-2009:0326. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

Ubuntu: Security Advisory (USN-662-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...