[SECURITY] [DSA 1829-1] New sork-passwd-h3 packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1829-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 11, 2009 http://www.debian.org/security/faq -...

Design/Logic Flaw

Use-after-free vulnerability in the servePendingRequests function in WebCore in WebKit in Apple Safari 4.0 and 4.0.1 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted HTML document that references a zero-length .js file and the...

CVE-2009-2419

CVE-2009-2419 is a use-after-free vulnerability in WebKit’s servePendingRequests within Apple Safari 4.0 and 4.0.1. The issue can let remote attackers crash the browser or possibly execute arbitrary code via a crafted HTML document that references a zero-length .js file and the JavaScript reload ...

Microsoft PowerPoint Legacy Format Scheme record buffer overflow

Added: 06/26/2009 CVE: CVE-2009-0226 BID: 34881 OSVDB: 54385 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A buffer overflow vulnerability in Microsoft PowerPoint allows command execution when a user opens a PowerPoint 4.0 stream...

CVE-2009-2142

CVE-2009-2142 affects Zip Store Chat (versions 4.0 and 5.0) via admin/index.asp. Multiple SQL injection vulnerabilities enable remote attackers to modify or query backend databases by supplying crafted values in the (1) login and (2) senha parameters. The CVE entry cites arbitrary SQL execution a...

Apple Safari Multiple Vulnerabilities - 01 - (Jun 2009) - Windows

Apple Safari Web Browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

Fedora 10 : icu-4.0-3.1.fc10 (2009-6273)

CVE-2009-0153 Handle illegal sequences consistently Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Apple Safari Multiple Vulnerabilities - 02 - (Jun 2009) - Windows

Apple Safari Web Browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

Zip Store Chat 4.0/5.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Zip Store Chat 4.0/5.0 Auth Bypass SQL Injection Vulnerability ================================================================ \|/// \ - - // @ @...

CVE-2009-1708

Apple Safari before 4.0 does not prevent calls to the open-help-anchor URL handler by web sites, which allows remote attackers to open arbitrary local help files, and execute arbitrary code or obtain sensitive information, via a crafted call...

CVE-2009-0239

CVE-2009-0239 is a Windows Search 4.0 information-disclosure vulnerability affecting Windows XP SP2/SP3 and Windows Server 2003 SP2. The flaw arises from an unfiltered HTML/embedded content rendering when Previewing or loading a crafted file in Windows Search results, allowing a remote attacker t...

Mandrake Security Advisory MDVSA-2009:132 (libsndfile)

The remote host is missing an update to libsndfile announced via advisory MDVSA-2009:132. OpenVAS Vulnerability Test $Id: mdksa2009132.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:132 libsndfile Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandrake Security Advisory MDVSA-2009:125 (wireshark)

The remote host is missing an update to wireshark announced via advisory MDVSA-2009:125. OpenVAS Vulnerability Test $Id: mdksa2009125.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:125 wireshark Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandrake Security Advisory MDVSA-2009:106 (libwmf)

The remote host is missing an update to libwmf announced via advisory MDVSA-2009:106. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:117 (ntp)

The remote host is missing an update to ntp announced via advisory MDVSA-2009:117. OpenVAS Vulnerability Test $Id: mdksa2009117.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:117 ntp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:112 (ipsec-tools)

The remote host is missing an update to ipsec-tools announced via advisory MDVSA-2009:112. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Apple Safari 4 - reload() Denial of Service

Apple Safari 4 - reload Denial of Service source: https://www.securityfocus.com/bid/35555/info Apple Safari is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to crash the affected application, denying servic...

Design/Logic Flaw

Mole Group Lastminute Script 4.0 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6817

CVE-2008-6817 affects Mole Group Lastminute Script 4.0 and earlier, where passwords are stored in cleartext. This indicates improper credential storage (cleartext) and can allow context-dependent attackers to obtain sensitive information. The description notes provenance is uncertain and informat...

[SECURITY] Fedora 10 Update: squirrelmail-1.4.19-1.fc10

SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...