Fedora Update for bugzilla FEDORA-2012-0301

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for bugzilla FEDORA-2012-0328

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 16 : bugzilla-4.0.3-1.fc16 (2012-0301)

These new versions fix the following securtiy flaws : - CVE-2011-3657 - CVE-2011-3667 - CVE-2011-3668 - CVE-2011-3669 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...

Fedora 15 : bugzilla-3.6.7-1.fc15 (2012-0328)

These new versions fix the following securtiy flaws : - CVE-2011-3657 - CVE-2011-3667 - CVE-2011-3668 - CVE-2011-3669 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...

CVE-2011-3667

The User.offeraccountbyemail WebService method in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x before 4.0.3, and 4.1.x through 4.1.3, when createemailregexp is not empty, does not properly handle usercancreateaccount settings, which allows remote attackers to...

CVE-2009-3667

CVE-2009-3667 affects AdsDX 3.05. A SQL injection in admin/index.php via the Username parameter allows remote attackers to execute arbitrary SQL commands. Root cause: insufficient input validation/escaping enabling injection. Impact per sources: attacker could potentially access/modify data (part...

CVE-2008-3667

The CVE-2008-3667 issue affects Maxthon Browser 2.0 and earlier, where a stack-based overflow occurs in processing a long HTTP Content-Type header, enabling remote arbitrary code execution. Root cause: improper handling of the Content-Type header leading to a stack overflow. Affected products: Ma...

KLA10258 ACE vulnerability in Maxthon Browser

A buffer overflow was found in Maxthon Browser. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed HTTP request. Original advisories - Related products Maxthon-Browser CVE list CVE-2008-3667 high...

CVE-2007-3667

CVE-2007-3667 affects the ActiveReportsExcelReport component, specifically the EXCLEXPT.DLL. The vulnerability is triggered via the DDRow Height variable and can cause a remote denial of service. The NVD entry lists a medium severity (CVSS v2 base score 5.0) with network attack vector and no auth...

CVE-2006-3667

Unspecified vulnerability in Sybase/Financial Fusion Consumer Banking Suite versions before 20060706 has unknown impact and remote attack vectors...

CVE-2006-1268

The CVE-2006-1268 entry concerns the Internet Key Exchange (IKE) implementation in Funkwerk X2300 7.2.1, where remote attackers can cause a denial of service and possibly execute arbitrary code using crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite. The advisory notes ambiguit...

CVE-2005-3670

CVE-2005-3670 covers multiple unspecified IKEv1 vulnerabilities in HP-UX IPSec, HP Jetdirect 635n, and HP Tru64 UNIX implementations that allow remote DoS via certain IKE packets (PROTOS IKEv1 test). The HP advisory does not specify which sub-CVE (CVE-2005-3666/3667/3668) applies. Related connect...