[SECURITY] [DSA 1470-1] New horde3 packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1470-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 20, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1466-2] New xorg-server packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1466-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 19, 2008 http://www.debian.org/security/faq -...

Cisco Unified Communications Manager CTL提供者堆缓冲区溢出漏洞

Cisco Unified Communications Manager（CUCM，之前被称为CallManager）是Cisco IP电话解决方案中的呼叫处理组件。 Cisco Unified Communications Manager包含的CTL Provider服务CTLProvider.exe存在设计缺陷，远程攻击者可以利用漏洞进行基于堆的缓冲区溢出攻击，可能以应用程序进程权限执行任意指令。 CTLProvider.exe服务绑定在TCP 2444端口，服务通过SSL加密传送进行操作，存在一个逻辑错误，接收到数据后进行堆分配可造成覆盖后续的堆块结构，导致任意代码执行。...

[SECURITY] [DSA 1465-1] New apt-listchanges packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1465-1 [email protected] http://www.debian.org/security/ Steve Kemp January 17, 2008 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-395)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1270-2 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory DSA 1270-2. Several security related problems have been discovered in OpenOffice.org, the free office suite. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-0002 iDefense...

Debian Security Advisory DSA 395-1 (tomcat4)

The remote host is missing an update to tomcat4 announced via advisory DSA 395-1. OpenVAS Vulnerability Test $Id: deb3951.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 395-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

[SECURITY] [DSA 1464-1] New syslog-ng packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1464-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 15, 2008 http://www.debian.org/security/faq -...

PortalApp 4.0 (SQL/XSS/Auth Bypasses) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== PortalApp 4.0 SQL/XSS/Auth Bypasses Multiple Remote Vulnerabilities ===================================================================== Title: PortalApp 4.0 Multiple...

PortalApp 4.0 - SQL Injection / Cross-Site Scripting / Authentication Bypass

Title: PortalApp 4.0 Multiple vulnerabilities Discovered By: r3dm0v3 http://r3dm0v3.persianblog.ir r3dm0v3 4t yahoodotcom Tehran - Iran Vendor: http://www.portalapp.com Vulnerable Version: 4.0, prior versions maybe vulnerable Remote Exploit: Yes Dork: "Copyright @2007 Iatek LLC" Fix: Not Availabl...

[SECURITY] [DSA 1443-1] New tcpreen packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1443-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 03, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1439-1] New typo3-src packages fix SQL injection

------------------------------------------------------------------------ Debian Security Advisory DSA-1439-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 28, 2007 http://www.debian.org/security/faq -...

DSA-1436-1 linux-2.6 fai-kernels user-mode-linux - several vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 1434-1] New mydns packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1434-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 16, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1432-1] New link-grammar packages fix execution of code

------------------------------------------------------------------------ Debian Security Advisory DSA-1432-1 [email protected] http://www.debian.org/security/ Steve Kemp December 16, 2007 http://www.debian.org/security/faq -...

Microsoft Internet Explorer DHTML对象内存破坏漏洞

BUGTRAQ ID: 26427 CVE ID:CVE- 2007-5347 CNCVE ID:CNCVE-20075347 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理部分特殊构建的HTML对象方法存在内存破坏问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 攻击者必须构建恶意WEB页，诱使用户访问来触发，目前没有详细漏洞细节提供。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 -...

[SECURITY] [DSA 1481-1] New Linux 2.6.18 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1428-1 [email protected] http://www.debian.org/security/ dann frazier December 10th, 2007 http://www.debian.org/security/faq -...

Debian DSA-1428-2 : linux-2.6 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : This is an update to DSA 1428-1 which omitted a reference...

Sql injection

SQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote attackers to execute arbitrary SQL commands via the z parameter...

CVE-2007-6291

CVE-2007-6291 affects Xigla Absolute Banner Manager .NET 4.0. The vulnerability is a SQL injection in abm.aspx accessible via the z parameter, enabling remote attackers to execute arbitrary SQL commands. The entry is rated CVSS v2 base score 7.5 (HIGH) with network access and low complexity. Expl...