CVE-2009-1874

Multiple cross-site scripting XSS vulnerabilities in the Management Console in Adobe JRun 4.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-1874

CVE-2009-1874 : Adobe JRun 4.0 Management Console is affected by multiple XSS vulnerabilities. The references indicate that remote attackers can inject arbitrary web script or HTML via unspecified vectors in the Management Console. The NVD entry lists a base score of 4.3 (Medium) with Network att...

Mandrake Security Advisory MDVSA-2009:195 (apr)

The remote host is missing an update to apr announced via advisory MDVSA-2009:195. OpenVAS Vulnerability Test $Id: mdksa2009195.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:195 apr Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:201 (fetchmail)

The remote host is missing an update to fetchmail announced via advisory MDVSA-2009:201. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

DSA-1865-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 1863-1] New zope2.10/zope2.9 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA-1863-1 [email protected] http://www.debian.org/security/ Nico Golde August 15th, 2009 http://www.debian.org/security/faq -...

Sun Java System Web Proxy Server Denial Of Service Vulnerability - Windows

Java Web Proxy Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Spiceworks 3.6 Overflow

!/usr/bin/python Spiceworks 3.6 Accept Parameter Overflow Remote Crash P.O.C. Written by: SecureState R&D Author: David Kennedy ReL1K Tested on Windows 2003 SP2 R2 Vendor Notified on: 05/11/2009 Vendor Fix: Fixed in version 4.0 esi 000334E0 ASCII "AAAAAAAAAAAAAAAAAA" edi 000334E0 ASCII...

[SECURITY] [DSA 1854-1] New APR packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1854-1 [email protected] http://www.debian.org/security/ Florian Weimer August 08, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1851-1] New gst-plugins-bad0.10 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1851-1 [email protected] http://www.debian.org/security/ Steffen Joeris August 06, 2009 http://www.debian.org/security/faq -...

TYPO3 CMS 4.0 (showUid) Remote SQL Injection Vulnerability

No description provided by source. ----- TYPO3 CMS 4.0 SQL-Injection Vulnerability ----- + Author : CyberNaj, JxE-13 + Vulnerability : SQL injection + Group : Ro0T-MaFia ----- Info CMS: Name : TYPO3 Web : http://typo3.org dowloand : http://typo3.org/download/packages/ Country : Venezuela -----...

PHP Address Book Multiple SQL Injection Vulnerabilities

PHP Address Book is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP Address Book Multiple SQL Injection Vulnerabilities

This host is running PHP Address Book and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: secpodphpaddressbooksqlinjvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ PHP Address Book Multiple SQL Injection Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod...

[SECURITY] [DSA 1849-1] New xml-security-c packages fix signature forgery

------------------------------------------------------------------------ Debian Security Advisory DSA-1849-1 [email protected] http://www.debian.org/security/ Florian Weimer August 02, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1834-2] New apache/apache2-mpm-itk fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1834-2 [email protected] http://www.debian.org/security/ Stefan Fritsch July 31, 2009 http://www.debian.org/security/faq -...

NetBSD SHA2实现存在缓冲区溢出漏洞

Bugraq ID: 35853 NetBSD是一款基于BSD的操作系统。 NetBSD SHA2实现存在边界错误，本地攻击者可以利用漏洞触发缓冲区溢出，可能以应用程序权限执行任意指令。 程序使用sys/sha2.h中的SHA2实现，链接libcrypto库可被4或者8个字节的固定内容溢出。溢出发生于HASH INIT函数调用过程中如SHA256Init，init函数传递错误的上下文大小作为memset参数，可在之后的拷贝过程中覆盖缓冲区之后的4 字节内容。 NetBSD NetBSD 4.0.2 NetBSD NetBSD 4.0.1 NetBSD NetBSD 5.0 NetBSD...

Mandrake Security Advisory MDVSA-2009:160 (ruby)

The remote host is missing an update to ruby announced via advisory MDVSA-2009:160. OpenVAS Vulnerability Test $Id: mdksa2009160.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:160 ruby Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:153 (dhcp)

The remote host is missing an update to dhcp announced via advisory MDVSA-2009:153. OpenVAS Vulnerability Test $Id: mdksa2009153.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:153 dhcp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

ISC DHCP dhclient < 3.1.2p1 - Remote Buffer Overflow (PoC)

/ cve-2009-0692.c ISC DHCP dhclient http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0692 Stack-based buffer overflow in the scriptwriteparams method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1,...

CVE-2008-6873

SQL injection vulnerability in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the TabOpenQuickTab1 parameter to 1 popaccounts.aspx, 2 addressbook.aspx, and 3 emails.aspx...