Oracle: Security Advisory (ELSA-2007-0905)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3820

Cross-site scripting XSS vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service SSL VPN devices with IVE OS 7.1 before 7.1r16, 7.4 before 7.4r3, and 8.0 before 8.0r1 and the Juniper Junos Pulse Access Control Service devices with UAC OS 4.1 before 4.1r8, 4.4...

CVE-2014-3820

The CVE-2014-3820 anomaly is a documented XSS in Juniper Pulse Secure/Policy products. Affected are the SSL VPN/UAC web server on Junos Pulse Access Service (IVE OS: 7.1 before 7.1r16, 7.4 before 7.4r3, 8.0 before 8.0r1) and the Pulse Access Control Service (UAC OS: 4.1 before 4.1r8, 4.4 before 4...

CVE-2012-3820

CVE-2012-3820 affects Arial Software Campaign Enterprise prior to 11.0.551. The vulnerability is multiple SQL injections in Campaign11.exe allowing an attacker to inject SQL via (1) SerialNumber to activate.asp or (2) UID to User-Edit.asp. Connections across sources confirm remote exploitation an...

CVE-2013-3820

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect availability via unknown vectors related to Business Interlink...

CVE-2013-3820

CVE-2013-3820 affects Oracle PeopleSoft Enterprise PeopleTools (versions 8.51, 8.52, 8.53) with an unspecified vulnerability that can impact availability via unknown vectors related to Business Interlink. The connected records confirm the affected product family and that the vulnerability is curr...

Oracle Linux 5 : Moderate: / kdebase (ELSA-2007-0905)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0905 advisory. 3.3.1-6.el4.0.1 - turn off ' 3.3.1-6.l4 - Resolves: 290851, CVE-2007-4569, kdm password-less login vulnerability CVE-2007-3820, CVE-2007-4224...

Scientific Linux Security Update : kdelibs on SL5.x, SL4.x i386/x86_64

Two cross-site-scripting flaws were found in the way Konqueror processes certain HTML content. This could result in a malicious attacker presenting misleading content to an unsuspecting user. CVE-2007-0242, CVE-2007-0537 A flaw was found in KDE JavaScript implementation. A web page containing...

CVE-2011-3820

Affected software: WSN Software 6.0.6. Vulnerability: information disclosure via direct request to a .php file, exposing the installation path in an error message (e.g., includes/prestart.php). Root cause: misreported error information leaking internal paths. Impact: potential exposure of sensiti...

CVE-2010-3820

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses uninitialized memory during processing of editable elements, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a...

CVE-2010-3820

CVE-2010-3820 affects WebKit/Apple Safari targets: Safari prior to 5.0.3 on Mac OS X 10.5–10.6 and Windows, and Safari before 4.1.3 on Mac OS X 10.4. The issue is an uninitialized memory access during processing of editable elements, enabling remote attackers to execute arbitrary code or cause a ...

CVE-2009-3820

CVE-2009-3820 describes a SQL injection vulnerability in the Flagbit Filebase (fb_filebase) TYPO3 extension version 0.1.0. The vulnerability allows remote attackers to execute arbitrary SQL commands via unspecified vectors, with the NVD metrics indicating partial impact on confidentiality, integr...

CVE-2009-3820

SQL injection vulnerability in the Flagbit Filebase fbfilebase extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Fedora Core 10 FEDORA-2009-3820 (xpdf)

The remote host is missing an update to xpdf announced via advisory FEDORA-2009-3820. OpenVAS Vulnerability Test $Id: fcore20093820.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3820 xpdf Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora 10 : xpdf-3.02-13.fc10 (2009-3820)

Fix several security updates in xpdf 3.02pl3 patch applied. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Mandriva Update for konqueror MDKSA-2007:176 (konqueror)

Check for the Version of konqueror OpenVAS Vulnerability Test Mandriva Update for konqueror MDKSA-2007:176 konqueror Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Fedora Update for kdelibs FEDORA-2007-2985

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for kdebase FEDORA-2007-2985

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-3820

Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer IEV is used, exposes TCP ports used by the MySQL daemon and IEV server, which allows remote attackers to obtain "root access" to IEV via unspecified use of TCP sessions to these ports...

CVE-2008-3820

Cisco Security Manager 3.1 and 3.2 (prior to 3.2.2) is affected. When Cisco IPS Event Viewer (IEV) is launched, the server and client open remotely accessible TCP ports for the MySQL/IEV services, allowing unauthenticated remote access to the IEV database and server and potentially root-level ope...