PGP Universal Server Unauthorized Key Exposure

SUMMARY Symantecs PGP Universal Server, under specific circumstances, may inadvertently expose a PGP clients private key. AFFECTED PRODUCTS Product | Version | Solution ---|---|--- PGP Universal Server | 3.2.x | PGP Universal Server 3.2.1 MP2 ISSUES CVSS2 Base Score | Impact | Exploitability |...

Oracle Virtual Server Agent Command Injection

Added: 11/26/2010 CVE: CVE-2010-3582 BID: 44031 Background Oracle VM software provides virtualization technology that allows running multiple instances of x86 virtual computers simultaneously within the host operating system. It supports many Oracle and non-Oracle based systems such as Windows,...

CVE-2010-3582

CVE-2010-3582 concerns Oracle VM 2.2.1, where an input validation flaw in the Oracle VM Server Agent’s XML-RPC processing (utl_test_url) enables a remote authenticated attacker to inject commands with root privileges, compromising confidentiality, integrity, and availability. The issue is specifi...

FWD: LedgerSMB Security Advisory: Multiple Vulnerabilities

Hi all; It has been brought to our attention that a number of security vulnerabilities have been noted in SQL-Ledger. Several of these affect earlier versions of LedgerSMB, and three hotfixes have been released for problems that continue to affect the LedgerSMB codebase. As always, we highly...

CVE-2009-3582

SQL-Ledger 2.8.24 contains multiple SQL injection vulnerabilities in the delete subroutine. Remote authenticated users can execute arbitrary SQL commands via the id and possibly db parameters in a Delete action to the Vendors>Reports>Search output. Affected component: SQL-Ledger code path h...

Gentoo Security Advisory GLSA 200511-02 (QDBM ImageMagick GDAL)

The remote host is missing updates announced in advisory GLSA 200511-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200609-06 (adplug)

The remote host is missing updates announced in advisory GLSA 200609-06. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200511-02 (QDBM ImageMagick GDAL)

The remote host is missing updates announced in advisory GLSA 200511-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200609-06 (adplug)

The remote host is missing updates announced in advisory GLSA 200609-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200607-13 (audacious)

The remote host is missing updates announced in advisory GLSA 200607-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-3582

SQL injection vulnerability in login.php in Keld PHP-MySQL News Script 0.7.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-3582

CVE-2008-3582 describes an SQL injection in login.php of Keld PHP-MySQL News Script 0.7.1, allowing remote attackers to execute arbitrary SQL via the username parameter. Affected component: login.php (Keld PHP-MySQL News Script 0.7.1). Root cause: unsafely constructed SQL in login form. Impact: p...

CVE-2008-3582

creationtimestamp| type| source ---|---|--- 2008-08-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32143...

CVE-2007-3582

CVE-2007-3582 refers to a SQL injection vulnerability in SuperCali PHP Event Calendar 0.4.0, exploitable through the o parameter in index.php, enabling remote attackers to execute arbitrary SQL commands. The core vulnerability is an input handling/validation issue in that parameter, allowing craf...

GLSA-200609-06 : AdPlug: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200609-06 AdPlug: Multiple vulnerabilities AdPlug is vulnerable to buffer and heap overflows when processing the following types of files: CFF, MTK, DMO, U6M, DTM, and S3M. Impact : By enticing a user to load a specially crafted...

CVE-2006-3582

CVE-2006-3582 refers to multiple heap-based/buffer overflows in the Audacious AdPlug library (versions up to 2.0 and earlier). The flaw is triggered when processing file formats CFF, MTK, DMO, and U6M, where the size from the package header can lead to remote code execution by a user-supplied cra...

CVE-2005-3582

CVE-2005-3582 affects ImageMagick before 6.2.4.2-r1. Local users in the portage group can escalate privileges by placing a malicious shared object in the Portage temporary build directory, which is added to the runtime search path and loaded by executables. The issue stems from RUNPATH handling i...