livechatinc.com XSS vulnerability

Vulnerable URL: https://www.livechatinc.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 01.06.2016 Latest check for patch:| 01.06.2016 00:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Oracle: Security Advisory (ELSA-2011-0600)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-3780

CVE-2015-3780 affects Apple OS X pre-10.10.5, where the Bluetooth subsystem could disclose kernel memory-layout information via a crafted app. The primary description across sources states that Bluetooth memory-layout disclosure is possible, enabling partial exposure of kernel memory structure in...

CVE-2014-3780

CVE-2014-3780 affects Citrix VDI-In-A-Box 5.3.x prior to 5.3.8 and 5.4.x prior to 5.4.4. The vulnerability allows remote attackers to bypass authentication via unspecified vectors related to a Java servlet. The connected records confirm the product/version range and the authentication bypass vect...

CVE-2013-3780

The CVE-2013-3780 entry concerns an unspecified vulnerability in the PeopleSoft Enterprise Portal component of Oracle PeopleSoft Products 9.1. The issue is described as allowing remote authenticated users to affect confidentiality via unknown vectors related to Saved Search. Connected sources con...

RedHat Update for dovecot RHSA-2011:0600-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-3780

The CVE-2011-3780 entry concerns PHP iCalendar 2.4. It describes an information-disclosure vulnerability where remote attackers can obtain sensitive data by requesting a PHP file directly, causing an error message that reveals the installation path (examples reference rss/rss_common.php and simil...

Slackware 13.1 / current : mozilla-thunderbird (SSA:2010-202-02)

New mozilla-thunderbird packages are available for Slackware 13.1 and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-202-02. The text itself is...

RHEL 6 : dovecot (RHSA-2011:0600)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0600 advisory. Dovecot is an IMAP server for Linux, UNIX, and similar operating systems, primarily written with security in mind. A flaw was found in the w...

Ubuntu: Security Advisory (USN-1059-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Update for dovecot MDVSA-2010:217 (dovecot)

Check for the Version of dovecot OpenVAS Vulnerability Test Mandriva Update for dovecot MDVSA-2010:217 dovecot Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

BSA-006 Security Update for dovecot

Marco Nenciarini uploaded new packages for dovecot which fixed the following security problems: CVE-2010-3706 plugins/acl/acl-backend-vfile.c in Dovecot 1.2.x before 1.2.15 and 2.0.x before 2.0.5 interprets an ACL entry as a directive to add to the permissions granted by another ACL entry, instea...

CVE-2010-3780

CVE-2010-3780 affects Dovecot 1.2.x up to 1.2.14; remote authenticated users can cause a denial-of-service (master process outage) by concurrently disconnecting many IMAP/POP3 sessions. Remediation in sources indicates upgrading to 1.2.15 (or newer) to fix the issue.

CVE-2009-3780

CVE-2009-3780 affects the Abuse module for Drupal, with vulnerable releases: Abuse 5.x prior to 5.x-2.1 and 6.x prior to 6.x-1.1-alpha1. The vulnerability is a Cross-site Scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The descrip...

Ubuntu: Security Advisory (USN-528-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: mysql-server

The remote host is missing an update to the system as announced in the referenced advisory. VID 240ac24c-dff3-11dd-a765-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 240ac24c-dff3-11dd-a765-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Gentoo Security Advisory GLSA 200708-10 (mysql)

The remote host is missing updates announced in advisory GLSA 200708-10. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3780

The CVE-2008-3780 entry describes an SQL injection in the Five Star Review Script, specifically in recommend.php via the item_id parameter, enabling remote arbitrary SQL execution. The vulnerability affects the web application component and has a high severity (CVSS v2 base score 7.5). Public ref...

CVE-2008-3780

creationtimestamp| type| source ---|---|--- 2008-08-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6294...

mysql security and bug fix update

5.0.45-7 - Adjust thread stack requests to allow for platform-specific guard page size; necessary to prevent stack overrun on PPC with RHEL5's 64K page size. Resolves: 435391 - Remove calendar-dependent queries from 'view' test; necessary to get regression tests to pass after 2007. 5.0.45-6 -...