Meinberg NTP Time Server Vulnerabilities

OVERVIEW Independent researcher Ryan Wincey has identified a stack buffer overflow vulnerability and a privilege escalation vulnerability in Meinberg’s NTP Time Servers Interface. Meinberg has produced a new Version 6.20.004 to mitigate these vulnerabilities. The researcher has validated the...

CVE-2015-3989

CVE-2015-3989 describes multiple cross-site scripting (XSS) vulnerabilities in concrete5 prior to 5.7.4. The issues allow remote attackers to inject arbitrary web script or HTML via vectors including private messages or other unspecified paths. The consolidated sources state affected software is ...

Knusperleicht Shoutbox index.php sb_include_path Parameter PHP Code Execution - Ver2 (CVE-2006-3989)

A code execution vulnerability has been reported in Knusperleicht Shoutbox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Knusperleicht Shoutbox index.php sb_include_path Parameter PHP Code Execution - Ver2 (CVE-2006-3989)

A code execution vulnerability has been reported in Knusperleicht Shoutbox. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2013-3989

CVE-2013-3989 affects IBM Security AppScan Enterprise (8.x prior to 8.8). The vulnerability arises because the product may send a cleartext AppScan Source database password in HTTP responses, enabling remote authenticated users to view sensitive information and potentially perform man-in-the-midd...

Mozilla Thunderbird Multiple Vulnerabilities (Oct 2012) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2012:1345-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MozillaFirefox: update to Firefox 16.0.1 (important)

The Mozilla suite received following security updates bnc783533: Mozilla Firefox was updated to 16.0.1. Mozilla Seamonkey was updated to 2.13.1. Mozilla Thunderbird was updated to 16.0.1. Mozilla XULRunner was updated to 16.0.1. MFSA 2012-88/CVE-2012-4191 bmo798045 Miscellaneous memory safety...

Mozilla Firefox Multiple Vulnerabilities - Oct 12 (Windows)

The host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnoct12win.nasl 5931 2017-04-11 09:02:04Z teissa $ Mozilla Firefox Multiple Vulnerabilities - Oct 12 Windows Authors: Madhuri D Copyright: Copyright c 2012...

CVE-2012-3989

CVE-2012-3989 affects Mozilla Firefox (and related Mozilla products) prior to version 16.0, Thunderbird prior to 16.0, and SeaMonkey prior to 2.13. The vulnerability is a crash caused by an invalid cast when using the instanceof operator on certain JavaScript objects, which could allow remote att...

CVE-2012-3989

Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an unspecified variable during use of the instanceof operator on a JavaScript object, which allows remote attackers to execute arbitrary code or cause a denial of service assertion...

CVE-2011-3989

The CVE-2011-3989 entry corresponds to a SQL injection vulnerability in the Perl module DBD::mysqlPP (versions 0.04 and earlier). The connected sources state that an attacker could view or alter data in the database via unspecified vectors, effectively enabling arbitrary SQL execution against vul...

CVE-2010-3989

Cross-site request forgery CSRF vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-3989

Cross-site request forgery CSRF vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-3989

HP Insight Control Virtual Machine Management for Windows is affected by CVE-2010-3989: a CSRF vulnerability allows remote attackers to hijack user sessions in installations prior to version 6.2. The issue affects HP Insight Control VM management before 6.2, with the payload described in HP secur...

Fedora Update for bugzilla FEDORA-2010-13072

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 11 : bugzilla-3.2.6-2.fc11 (2010-1458)

This version of Bugzilla fixes security issues that were found in previous versions of the software where private bugs could be made public and configuration files were exposed to the world. CVE Numbers: CVE-2009-3989 and CVE-2009-3387 See upstream security advisory for additional details:...

Fedora Update for bugzilla FEDORA-2010-1458

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2009-3989

CVE-2009-3989 affects Bugzilla prior to fixed versions: 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3. The issue allows remote attackers to obtain sensitive information by requesting directories used for custom installations (e.g., CVS/, contrib/, docs/en/xml/, t/, old-pa...

CVE-2008-3989

CVE-2008-3989 describes an unspecified vulnerability in the Oracle Data Mining component of Oracle Database 10.2.0.3, related to DMSYS.ODM_MODEL_UTIL, that allows remote authenticated users to affect confidentiality, integrity, and availability. The connected material names Oracle’s October 2008 ...