987 matches found
Increase the web session timeout from 60 minutes to 300 minutes
Usability and security testing have shown that XSRF time out is annoying people in the wild. The security guy Vitaly has ok'ed the limit to be increased. This has been done on trunk along with other changes and should be done on 4.3 branch as well...
Increase the web session timeout from 60 minutes to 300 minutes
Usability and security testing have shown that XSRF time out is annoying people in the wild. The security guy Vitaly has ok'ed the limit to be increased. This has been done on trunk along with other changes and should be done on 4.3 branch as well...
Perl MIME Boundary 'multipart_init' Unspecified Security Vulnerability
Perl is prone to an unspecified security vulnerability because the MIME part of the 'multipartinit' is not random. OpenVAS Vulnerability Test $Id: gbperlcgi44892.nasl 5323 2017-02-17 08:49:23Z teissa $ Perl MIME Boundary 'multipartinit' Unspecified Security Vulnerability Authors: Michael Meyer...
NuSOAP 'nusoap.php' Cross Site Scripting Vulnerability
This host is running NuSOAP and is prone to Cross-site scripting Vulnerability. OpenVAS Vulnerability Test $Id: secpodmantisbtnusoapxssvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ NuSOAP 'nusoap.php' Cross Site Scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...
Bugzilla Multiple Vulnerabilities
Bugzilla is prone to the following vulnerabilities: 1. A security bypass issue. 2. Multiple information disclosure vulnerabilities. 3. A denial-of-service vulnerability. Successfully exploiting these issues may allow an attacker to bypass certain security restrictions, obtain sensitive informatio...
WordPress Simple:Press 4.3插件value参数SQL注入漏洞
BUGTRAQ ID: 41348 WordPress是一款免费的论坛Blog系统。 WordPress所使用的Simple:Press插件没有正确地过滤用户在搜索字段所输入的搜索变量便注入到了SQL查询中使用： sf-header-forum.php ---snip--- 385 Add Search Vars 386 ifisset$GET'search' 387 388 if$GET'search' != '' $sfvars'searchpage' = sfescint$GET'search'; 389 ifisset$GET'value' ?...
Phreebooks 2.0 - Multiple Persistent Cross-Site Scripting Vulnerabilities
Advisory Name: Multiple Permanent Cross-site Scripting in Phreebooks v2.0 Internal Cybsec Advisory Id: Vulnerability Class: Permanent Cross-site Scripting Release Date: 2010-05-26 Affected Applications: Phreebooks v2.0 Affected Platforms: Any running Phreebooks v2.0 Local / Remote: Remote Severit...
mysql security update
5.0.77-4.3 - Add fixes for CVE-2010-1626, CVE-2010-1848, CVE-2010-1850...
PT-2010-1182
Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform versions 4.2 through 4.2.0.CP08 and versions 4.3 through 4.3.0.CP07 Description The issue is related to insufficient access control in the JMX-Console web application. This allows remote attackers ...
CVE-2010-1153
CVE-2010-1153 affects TYPO3 4.3.x prior to 4.3.3. The autoloader component is vulnerable to PHP remote file inclusion, allowing an attacker to execute arbitrary PHP code by supplying a URL in the className input field. This results in remote code execution with the attacker exploiting a network-b...
Vulnerability in TYPO3 Core
It has been discovered that TYPO3 Core is vulnerable to Remote Command Execution. Component Type: TYPO3 Core Affected Versions: 4.3.0, 4.3.1 and 4.3.2 + development releases of 4.4 branch Vulnerability Types: Remote Command Execution Overall Severity: Critical Release Date: April 9, 2010 Vulnerab...
Mandriva Update for webmin MDVSA-2010:036 (webmin)
Check for the Version of webmin OpenVAS Vulnerability Test Mandriva Update for webmin MDVSA-2010:036 webmin Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Mandriva Update for kdebase4 MDVA-2010:012 (kdebase4)
Check for the Version of kdebase4 OpenVAS Vulnerability Test Mandriva Update for kdebase4 MDVA-2010:012 kdebase4 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Fedora Core 11 FEDORA-2009-13364 (drupal)
The remote host is missing an update to drupal announced via advisory FEDORA-2009-13364. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...
JBoss EAP Twiddle logs the JMX password
Twiddle in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 writes the JMX password, and other command-line arguments, to the twiddle.log file, which allows local users to obtain sensitive information by reading this file...
Ubuntu USN-856-1 (cupsys)
The remote host is missing an update to cupsys announced via advisory USN-856-1. OpenVAS Vulnerability Test $Id: ubuntu8561.nasl 8616 2018-02-01 08:24:13Z cfischer $ $Id: ubuntu8561.nasl 8616 2018-02-01 08:24:13Z cfischer $ Description: Auto-generated from advisory USN-856-1 cupsys Authors: Thoma...
SLES11: Security update for libpng
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libpng12-0 More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references. SPDX-FileCopyrightText: 200...
SLES9: Security update for perl-Net-DNS
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: perl-Net-DNS For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5016730 within th...
Changetrack Local Privilege Escalation Vulnerability
This host has Changetrack installed and is prone to Local Privilege Escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodchangetrackprivescalationvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Changetrack Local Privilege Escalation Vulnerability Authors: Sharath S Copyright: Copyright c...
