Oracle Linux 6 : mysql (ELSA-2011-0164)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0164 advisory. 5.1.52-1.1 - Update to MySQL 5.1.52, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html including numerous small...

Scientific Linux Security Update : mysql on SL6.x i386/x86_64

The MySQL PolyFromWKB function did not sanity check Well-Known Binary WKB data, which could allow a remote, authenticated attacker to crash mysqld. CVE-2010-3840 A flaw in the way MySQL processed certain JOIN queries could allow a remote, authenticated attacker to cause excessive CPU use up to...

CVE-2012-3679

CVE-2012-3679 refers to a WebKit vulnerability used by Apple Safari prior to 6.0. The issue is a memory corruption weakness in WebKit that could be triggered by visiting a crafted site, permitting remote attackers to execute arbitrary code or cause a denial of service (memory corruption and app c...

CVE-2012-3679

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1...

Gentoo Security Advisory GLSA 201201-02 (MySQL)

The remote host is missing updates announced in advisory GLSA 201201-02. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2010-3679

CVE-2010-3679 affects Oracle MySQL 5.1 prior to 5.1.49. The vulnerability allows remote authenticated users to cause a denial of service (mysqld crash) by passing certain arguments to the BINLOG command, which triggers memory access of uninitialized data (demonstrated by valgrind). Connected advi...

Ubuntu: Security Advisory (USN-1017-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[USN-1017-1] MySQL vulnerabilities

=========================================================== Ubuntu Security Notice USN-1017-1 November 11, 2010 mysql-5.1, mysql-dfsg-5.0, mysql-dfsg-5.1 vulnerabilities CVE-2010-2008, CVE-2010-3677, CVE-2010-3678, CVE-2010-3679, CVE-2010-3680, CVE-2010-3681, CVE-2010-3682, CVE-2010-3683,...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : mysql-5.1, mysql-dfsg-5.0, mysql-dfsg-5.1 vulnerabilities (USN-1017-1)

It was discovered that MySQL incorrectly handled certain requests with the UPGRADE DATA DIRECTORY NAME command. An authenticated user could exploit this to make MySQL crash, causing a denial of service. This issue only affected Ubuntu 9.10 and 10.04 LTS. CVE-2010-2008 It was discovered that MySQL...

Fedora Update for mysql FEDORA-2010-15166

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

openSUSE Security Update : libmysqlclient-devel (openSUSE-SU-2010:0730-1)

local users could delete data files for tables of other users CVE-2010-1626. - authenticated users could gather information for tables they should not have access to CVE-2010-1849 - authenticated users could crash mysqld CVE-2010-1848 - authenticated users could potentially execute arbitrary code...

CVE-2010-3679

creationtimestamp| type| source ---|---|--- 2010-08-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34521...

CVE-2008-3679

The CVE-2008-3679 entry concerns multiple XSS vulnerabilities in index.php of IDevSpot PhpLinkExchange 1.01. According to the data, remote attackers can inject arbitrary web script or HTML via the catid parameter in actions (user_add, recip, tellafriend, contact) or in a request without an action...

Buffer overflow

Multiple unspecified vulnerabilities in 1 Net6Helper.DLL aka Net6Launcher Class 4.5.2 and earlier, 2 npCtxCAO.dll aka Citrix Endpoint Analysis Client in a Firefox plugin directory, and 3 a second npCtxCAO.dll aka CCAOControl Object before 4.5.0.0 in Citrix Access Gateway Standard Edition before...

CVE-2007-3679

CVE-2007-3679 affects the Citrix EPA ActiveX control (CCAOControl Object) in npCtxCAO.dll, used by Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1. The ActiveX control is vulnerable to remote code execution via arbitrary program download/execution on a clie...

SYMSA-2007-006: Citrix EPA ActiveX Control Design Flaw

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-006 Advisory Title: Citrix EPA ActiveX Control Design Flaw Author: Michael White / [email protected] Release Date: 19-07-2007 Applicatio...

CVE-2006-3679

CVE-2006-3679 affects FatWire Content Server 5.5.0. The vulnerability allows remote attackers to bypass access restrictions and obtain administrative privileges via unspecified attack vectors in the authentication process. According to the NVD entry, exploitation requires no authentication (netwo...

CVE-2006-3679

FatWire Content Server 5.5.0 allows remote attackers to bypass access restrictions and obtain administrative privileges via unspecified attack vectors in the authentication process...

CVE-2005-3679

CVE-2005-3679 describes an SQL injection in ActiveCampaign 1-2-All Broadcast Email, specifically in admin/index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username field in the admin control panel. Affected component: ActiveC...