Mandriva Update for kernel MDVSA-2008:043 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2008:043 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandrake Security Advisory MDVSA-2009:077 (pam)

The remote host is missing an update to pam announced via advisory MDVSA-2009:077. OpenVAS Vulnerability Test $Id: mdksa2009077.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:077 pam Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mandrake Security Advisory MDVSA-2009:060-1 (nfs-utils)

The remote host is missing an update to nfs-utils announced via advisory MDVSA-2009:060-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

[SECURITY] [DSA 1748-1] New libsoup packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1748-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 20, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1745-1] New lcms packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1745-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 20, 2009 http://www.debian.org/security/faq -...

CVE-2009-0965

CVE-2009-0965 concerns a SQL injection in Ganesha Digital Library (GDL) versions 4.0 and 4.2. The vulnerability affects functions/browse.php and can be triggered via the node parameter in a browse action to gdl.php, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists ...

[SECURITY] [DSA 1740-1] New yaws packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1740-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 14, 2009 http://www.debian.org/security/faq -...

Debian DSA-1742-1 : libsndfile - integer overflow

Alan Rad Pop discovered that libsndfile, a library to read and write sampled audio data, is prone to an integer overflow. This causes a heap-based buffer overflow when processing crafted CAF description chunks possibly leading to arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] [DSA 1740-1] New yaws packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1740-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 14, 2009 http://www.debian.org/security/faq -...

Microsoft IIS XSS Vulnerability (MS00-060) - Active Check

Microsoft IIS do not properly protect against cross-site scripting XSS attacks. SPDX-FileCopyrightText: 2009 Christian Eric Edjenguele Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-late...

FileMaker Pro User Password Disclosure Vulnerability

The remote Filemaker database server is prone to User Password Disclosure Vulnerability, because it does not properly secure credentials during authentication. OpenVAS Vulnerability Test $Id: remote-detect-filemaker-pwd-disclosure.nasl 8022 2017-12-07 08:23:28Z teissa $ Description: FileMaker Pro...

Mandrake Security Advisory MDVSA-2009:068 (poppler)

The remote host is missing an update to poppler announced via advisory MDVSA-2009:068. OpenVAS Vulnerability Test $Id: mdksa2009068.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:068 poppler Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Sun管理中心性能报表模块跨站脚本漏洞

BUGTRAQ ID: 33999 Sun Management Center软件是开放的、可扩展的系统监视和管理方案。 Sun管理中心的性能报表模块中存在跨站脚本漏洞，可能允许远程非特权用户在用户浏览器中执行任意JavaScript代码，或窃取可能用于访问Sun管理中心Web控制台的会话cookie。 Sun SunMC 4.0 Sun SunMC 3.6.1 厂商补丁： Sun --- Sun已经为此发布了一个安全公告（Sun-Alert-247046）以及相应补丁: Sun-Alert-247046：Cross Site Scripting XSS Vulnerability in...

Cross site request forgery (csrf)

The jumpUrl mechanism in class.tslibfe.php in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 leaks a hash secret juHash in an error message, which allows remote attackers to read arbitrary files by including the hash in a request...

Sql injection

SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, possibly related to the uname and pass parameters to logonprocess.jsp. NOTE: some of these details are obtained...

CVE-2008-6366

SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, possibly related to the uname and pass parameters to logonprocess.jsp. NOTE: some of these details are obtained...

CVE-2008-6366

SQL injection vulnerability CVE-2008-6366 affects Ad Server Solutions Affiliate Software Java 4.0: the logon.jsp page (and related logon_process.jsp) processes user inputs for username and password in a way that allows arbitrary SQL execution. This is exploitable remotely and could lead to data d...

CVE-2008-6366

SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, possibly related to the uname and pass parameters to logonprocess.jsp. NOTE: some of these details are obtained...

Mandrake Security Advisory MDVSA-2009:026-1 (phpMyAdmin)

The remote host is missing an update to phpMyAdmin announced via advisory MDVSA-2009:026-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

[SECURITY] [DSA 1719-2] New GNUTLS packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1719-2 [email protected] http://www.debian.org/security/ Florian Weimer February 28, 2009 http://www.debian.org/security/faq -...