Kanboard 1.0.5 Cross Site Request Forgery

Advisory ID: HTB23217 Product: Kanboard Vendor: http://kanboard.net/ Vulnerable Versions: 1.0.5 and probably prior Tested Version: 1.0.5 Advisory Publication: May 28, 2014 without technical details Vendor Notification: May 28, 2014 Vendor Patch: June 30, 2014 Public Disclosure: July 2, 2014...

CVE-2013-3920

CVE-2013-3920: Jahia xCM before 6.6.2 contains an XSS vulnerability allowing remote authenticated users to inject arbitrary script or HTML via the about me field. CVE-2013-4617: Jahia xCM before 6.6.2 does not set the HTTPOnly flag on the JSESSIONID cookie, enabling potential script access to the...

jabberd -- domain spoofing in server dialback protocol

XMPP Standards Foundation reports: Some implementations of the XMPP Server Dialback protocol RFC 3920/XEP-0220 have not been checking dialback responses to ensure that validated results are correlated with requests. An attacking server could spoof one or more domains in communicating with a...

CVE-2010-3920

The CVE-2010-3920 issue affects Epson printer driver installers LP-S9000 (pre-4.1.11) and LP-S7100 (pre-4.1.7). During installation some builds set weak permissions on the C:\Program Files folder, potentially allowing local users to bypass access controls and create or modify arbitrary files/dire...

CVE-2009-3920

The CVE-2009-3920 affects the Drupal NGP COO/CWP Integration (crmngp) module for 6.x, specifically versions prior to 6.x-1.12. The root cause is insufficient access control on an administration page, which allows remote attackers to read log information through unspecified vectors. Exploitation d...

Fedora Update for xorg-x11-server FEDORA-2008-0956

Check for the Version of xorg-x11-server OpenVAS Vulnerability Test Fedora Update for xorg-x11-server FEDORA-2008-0956 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

SuSE Update for xorg-x11,XFree86 SUSE-SA:2008:027

Check for the Version of xorg-x11,XFree86 OpenVAS Vulnerability Test $Id: gbsuse2008027.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for xorg-x11,XFree86 SUSE-SA:2008:027 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This progr...

FreeBSD Ports: bitlbee

The remote host is missing an update to the system as announced in the referenced advisory. VID 24ec781b-8c11-11dd-9923-0016d325a0ed OpenVAS Vulnerability Test $ Description: Auto generated from VID 24ec781b-8c11-11dd-9923-0016d325a0ed Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: bitlbee

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Gentoo Security Advisory GLSA 200809-14 (bitlbee)

The remote host is missing updates announced in advisory GLSA 200809-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200809-14 (bitlbee)

The remote host is missing updates announced in advisory GLSA 200809-14. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Multiple unspecified vulnerabilities in BitlBee before 1.2.3 allow remote attackers to "overwrite" and "hijack" existing accounts via unknown vectors related to "inconsistent handling of the USTATUSIDENTIFIED state." NOTE: this issue exists because of an incomplete fix for CVE-2008-3920...

CVE-2008-3920

CVE-2008-3920 affects BitlBee prior to 1.2.2, where an unspecified vulnerability could allow remote attackers to recreate and hijack existing accounts. The OpenVAS/Fedora advisories reference this CVE in updates for bitlbee (Fedora 2008-7274, 2008-7712, 2008-7830, etc.), indicating remediation vi...

openSUSE 10 Security Update : xorg-x11-Xvnc (xorg-x11-Xvnc-5317)

This update fixes multiple vulnerabilities reported by iDefense : - CVE-2008-2360 - RENDER Extension heap buffer overflow - CVE-2008-2361 - RENDER Extension crash - CVE-2008-2362 - RENDER Extension memory corruption - CVE-2008-1379 - MIT-SHM arbitrary memory read - CVE-2008-1377 - RECORD and...

Low: Red Hat Security Advisory: compiz security update

Updated compiz packages that prevent Compiz from breaking screen saver grabs are now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. Compiz is an OpenGL-based window and compositing manager. Most screen save...

CVE-2007-3920

CVE-2007-3920 concerns GNOME Screensaver 2.20 on Ubuntu 7.10 when used with Compiz, where input focus is not properly reserved. The result is that an attacker with physical access can gain session control after an Alt-Tab sequence, as described in the related CVE-2007-3069 context. Connected advi...

CVE-2006-3920

The CVE affects Sun Solaris TCP implementation (Solaris 8/9/10) prior to 20060726, where a TCP packet with an incorrect sequence number can trigger an ACK storm and cause remote DoS (resource exhaustion). Root cause: improper TCP sequence handling leading to ACK storm. Affected components: Solari...

CVE-2005-3920

CVE-2005-3920 describes an SQL injection vulnerability in Babe Logger 2. The vulnerability allows remote attackers to execute arbitrary SQL commands via the gal parameter to index.php or the id parameter to comments.php. The public details identify the affected software (Babe Logger 2) and the sp...

Solaris 9 (x86) : 117470-09

SunOS 5.9x86: tcp Patch. Date this patch was last updated by Sun : Jul/09/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...