CVE-2009-3964

The CVE-2009-3964 entry concerns the Joomla! NinjaMonials (com_ninjacentral) component version 1.1.0. Affects the display action to index.php where the testimID parameter is susceptible to SQL injection, enabling remote attackers to execute arbitrary SQL commands. NVD reports a base score of 7.5 ...

CVE-2009-3964

creationtimestamp| type| source ---|---|--- 2009-08-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9502...

Mandriva Linux Security Advisory : libpng (MDVSA-2009:051)

A number of vulnerabilities have been found and corrected in libpng : Fixed 1-byte buffer overflow in pngpread.c CVE-2008-3964. This was allready fixed in Mandriva Linux 2009.0. Fix the function pngcheckkeyword that allowed setting arbitrary bytes in the process memory to 0 CVE-2008-5907. Fix a...

Ubuntu: Security Advisory (USN-730-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-730-1: libpng vulnerabilities

It was discovered that libpng did not properly perform bounds checking in certain operations. An attacker could send a specially crafted PNG image and cause a denial of service in applications linked against libpng. This issue only affected Ubuntu 8.04 LTS. CVE-2007-5268, CVE-2007-5269 Tavis...

Mandrake Security Advisory MDVSA-2009:051 (libpng)

The remote host is missing an update to libpng announced via advisory MDVSA-2009:051. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Gentoo Security Advisory GLSA 200512-16 (openmotif)

The remote host is missing updates announced in advisory GLSA 200512-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200512-16 (openmotif)

The remote host is missing updates announced in advisory GLSA 200512-16. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3964

CVE-2008-3964 affects libpng, where multiple off-by-one errors in png_push_read_zTXt (in pngread.c) can crash or cause other impact when processing crafted PNGs. Affected are libpng before 1.2.32beta01 and 1.4 before 1.4.0beta34. Consequence is a denial of service (crash) and unspecified other im...

Moderate: Red Hat Security Advisory: Red Hat Network Satellite Server security update

Red Hat Network Satellite Server version 5.0.2 is now available. This update includes fixes for a number of security issues in Red Hat Network Satellite Server components. This update has been rated as having moderate security impact by the Red Hat Security Response Team. During an internal...

Solaris 10 (sparc) : 137080-11 (deprecated)

SunOS 5.10: libpng Patch. Date this patch was last updated by Sun : Sep/11/17 This plugin has been deprecated and either replaced with individual 137080 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

Solaris 10 (x86) : 137081-11 (deprecated)

SunOS 5.10x86: libpng Patch. Date this patch was last updated by Sun : Sep/11/17 This plugin has been deprecated and either replaced with individual 137081 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Debian Security Advisory DSA 1157-1 (ruby1.8)

The remote host is missing an update to ruby1.8 announced via advisory DSA 1157-1. Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to the bypass of security restrictions or denial of service. The Common Vulnerabilities and Exposures project...

CVE-2007-3964

CVE-2007-3964 affects Itaka prior to 0.2.1. The vulnerability is an authentication bypass that allows remote attackers to obtain sensitive information by directly requesting /screenshot, via an incomplete access control check. NVD lists a CVSS v2 base score of 5.0 ( MEDIUM ), with network attack ...

Debian DSA-1157-1 : ruby1.8 - several vulnerabilities

Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to the bypass of security restrictions or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-1931 It was discovered that the use of...

DSA-1157 ruby1.8

Bulletin has no description...

CVE-2006-3964

PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the cfgroot parameter...

CVE-2006-3964

The CVE-2006-3964 issue affects Banex PHP MySQL Banner Exchange 2.21, where a PHP remote file inclusion vulnerability in members.php allows an attacker to execute arbitrary PHP code via a URL supplied to the cfg_root parameter. The underlying flaw is improper handling of remote file input, enabli...

CentOS 3 / 4 : openmotif (CESA-2006:0272)

Updated openmotif packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenMotif provides libraries which implement the Motif industry standard graphical user interface. A number of buffer overfl...

Moderate: Red Hat Security Advisory: openmotif security update

Updated openmotif packages that fix a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenMotif provides libraries which implement the Motif industry standard graphical user interface. A number of buffer overfl...