93 matches found
Ubuntu: Security Advisory (USN-1059-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mandriva Update for dovecot MDVSA-2010:217 (dovecot)
Check for the Version of dovecot OpenVAS Vulnerability Test Mandriva Update for dovecot MDVSA-2010:217 dovecot Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
BSA-006 Security Update for dovecot
Marco Nenciarini uploaded new packages for dovecot which fixed the following security problems: CVE-2010-3706 plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instea...
CVE-2010-3779
CVE-2010-3779 affects Dovecot 1.2.x (pre-1.2.15) and 2.0.x (pre-2.0.beta2). The issue is an ACL misconfiguration that can let a remote authenticated user bypass mailbox access restrictions by altering the ACL of a mailbox, demonstrated via a symlinked shared mailbox; the admin permission can be g...
CVE-2009-3779
Cross-site scripting XSS vulnerability in vCard 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the addition of the themevcard function to a theme and the use of default content...
CVE-2009-3779
CVE-2009-3779 is a Cross-site scripting (XSS) vulnerability in the Drupal vCard module. The affected lineages are vCard 5.x prior to 5.x-1.4 and 6.x prior to 6.x-1.3, linked to the addition of the theme_vcard function to a theme and the use of default content. The vulnerability allows remote atta...
CVE-2008-3779
CVE-2008-3779 describes a cross-site scripting (XSS) vulnerability in Five Star Review Script, exposed via search/index.php. The flaw allows remote attackers to inject arbitrary web script or HTML through the words parameter in a search action. Affected component is the search functionality (inde...
CVE-2008-3779
Cross-site scripting XSS vulnerability in search/index.php in Five Star Review Script allows remote attackers to inject arbitrary web script or HTML via the words parameter in a search action...
CVE-2008-3779
creationtimestamp| type| source ---|---|--- 2008-08-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6294...
CVE-2006-2125
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3779. Reason: This candidate is a duplicate of CVE-2005-3779. Notes: All CVE users should reference CVE-2005-3779 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2006-2125
CVE-2006-2125 is a duplicate of CVE-2005-3779; connected sources describe an unspecified local privilege escalation in HP-UX xterm across HP-UX 11.00, 11.11, and 11.23. The vulnerability could allow a local user to gain unauthorized access. Affected patch lineage from HP (PHSS_34102/PHSS_34159/PH...
CVE-2005-3779
CVE-2005-3779 affects HP-UX xterm on HP-UX 11.00, 11.11, and 11.23, enabling local users to gain privileges. The issue is described as an unspecified vulnerability with local execution vectors, and multiple Nessus plugins link the risk to local unauthorized access. Remediation in the connected do...