Apple Safari Multiple Vulnerabilities - Oct 2012 (Mac OS X)

This host is installed with Apple Safari web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafarimultvulnoct12macosx.nasl 6018 2017-04-24 09:02:24Z teissa $ Apple Safari Multiple Vulnerabilities - Oct 2012 Mac OS X Authors: Rachana Shetty Copyright:...

APPLE-SA-2012-09-19-3 Safari 6.0.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-09-19-3 Safari 6.0.1 Safari 6.0.1 is now available and addresses the following: Safari Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8 and v10.8.1 Impact: Opening a maliciously crafted downloaded HTML...

CVE-2012-3715

CVE-2012-3715 affects Apple Safari prior to 6.0.1. A logic error in handling HTTPS URLs in the address bar can cause a request to be sent over HTTP after a user pastes text into the URL field, potentially enabling an information disclosure. The issue is documented in the Apple advisory Apple-SA-2...

CVE-2011-3715

CVE-2011-3715 affects ClanTiger 1.1.3. Affected component: PHP files (e.g., widgets/statistics/statistics.php) that disclose the installation path in an error message when directly requested. This enables remote information disclosure. Root cause: direct access to certain PHP files leaks path inf...

Debian Security Advisory DSA 2121-1 (typo3-src)

The remote host is missing an update to typo3-src announced via advisory DSA 2121-1. OpenVAS Vulnerability Test $Id: deb21211.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2121-1 typo3-src Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian: Security Advisory (DSA-2121-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-3715

Multiple cross-site scripting XSS vulnerabilities in TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 the RemoveXSS function, and allow remote authenticated users to inject arbitrary web...

CVE-2010-3715

CVE-2010-3715 affects TYPO3 4.2.x before 4.2.15, 4.3.x before 4.3.7, and 4.4.x before 4.4.4. The vulnerability allows remote XSS via the RemoveXSS function and via the backend, enabling injection of arbitrary scripts/HTML. Patches are available in the fixed releases (4.2.15, 4.3.7, 4.4.4). No exp...

[SECURITY] [DSA 2121-1] New TYPO3 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2121-1 [email protected] http://www.debian.org/security/ Florian Weimer October 19, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2121-1] New TYPO3 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2121-1 [email protected] http://www.debian.org/security/ Florian Weimer October 19, 2010 http://www.debian.org/security/faq -...

DSA-2121-1 typo3-src - several vulnerabilities

Bulletin has no description...

CVE-2009-3715

MCshoutbox 1.1 is affected by multiple SQL injection vulnerabilities in scr_login.php, exploitable when magic_quotes_gpc is disabled. Attacks can remotely inject SQL via the username and password fields, potentially yielding arbitrary SQL execution. OpenVAS also notes related web vulnerabilities ...

CVE-2009-3715

creationtimestamp| type| source ---|---|--- 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9205...

CVE-2008-3715

Cross-site scripting XSS vulnerability in inc-core-admin-editor-previouscolorsjs.php in the FlexCMS 2.5 and earlier, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the PreviousColorsString parameter...

CVE-2008-3715

CVE-2008-3715 concerns an XSS vulnerability in inc-core-admin-editor-previouscolorsjs.php affecting FlexCMS 2.5 and earlier. When register_globals is enabled, the PreviousColorsString parameter can be used by remote attackers to inject arbitrary web script or HTML. The vulnerability is triggered ...

CVE-2008-3715

creationtimestamp| type| source ---|---|--- 2008-08-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32254...

Sql injection

Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to...

Solaris 8 (sparc) : 125437-22

Oracle iPlanet Web Server 7.0.12 Solaris: Update Release patch. Date this patch was last updated by Sun : Aug/19/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 125437-22

Oracle iPlanet Web Server 7.0.12 Solaris: Update Release patch. Date this patch was last updated by Sun : Aug/19/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (x86) : 125438-22

Oracle iPlanet Web Server 7.0.12 Solarisx86: Update Release patch. Date this patch was last updated by Sun : Aug/26/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...