81 matches found
SuSE 11 Security Update : PHP5 (SAT Patch Number 1978)
This update of PHP5 fixes : - CVE-2008-5624: CVSS v2 Base Score: 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P : Permissions, Privileges, and Access Control CWE-264 - CVE-2008-5625: CVSS v2 Base Score: 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P : Permissions, Privileges, and Access Control CWE-264 - Cross-Site...
[slackware-security] php
New php packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-3557 https://vulners.com/cve/CVE-2009-3558...
Slackware 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / current : php (SSA:2010-024-02)
New php packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-024-02. The text itself ...
RHEL 4 / 5 : php (RHSA-2010:0040)
The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0040 advisory. - php: exifreaddata crash on corrupted JPEG files CVE-2009-2687 - php: openssl extension: Incorrect verification of SSL certificate with...
php security update
5.1.6-24.5 - add security fix for CVE-2009-4142 543469 5.1.6-24.4 - build fix pdomysql on biarch systems 543469 5.1.6-24.3 - add security fixes for CVE-2009-2687, CVE-2009-3291, CVE-2009-3292, CVE-2009-3546 CVE-2009-4017 541597 - add build fix for mysqli on some biarch systems 543469...
FreeBSD Ports: php5
The remote host is missing an update to the system as announced in the referenced advisory. VID 39a25a63-eb5c-11de-b650-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID 39a25a63-eb5c-11de-b650-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Mandriva Security Advisory MDVSA-2009:305 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:305. OpenVAS Vulnerability Test $Id: mdksa2009305.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:305 php Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Mandriva Security Advisory MDVSA-2009:324 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:324. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...
Mandriva Security Advisory MDVSA-2009:305 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:305. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...
Mandriva Security Advisory MDVSA-2009:303 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:303. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...
Mandriva Security Advisory MDVSA-2009:303 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:303. OpenVAS Vulnerability Test $Id: mdksa2009303.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:303 php Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Ubuntu: Security Advisory (USN-862-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-4017
The CVE-2009-4017 entry relates to PHP prior to 5.2.12 and 5.3.x prior to 5.3.1, where there is no restriction on the number of temporary files created during a multipart/form-data POST. This can cause a denial-of-service via resource exhaustion and can facilitate exploitation of local file inclu...
CVE-2008-4017
Technical details for CVE-2008-4017 are not provided in the connected documents. The OC4J vulnerability in Oracle Application Server 10.1.2.3 is described as unspecified; monitor for updates from Oracle/NVD and other security advisories.
CVE-2007-4017
Cross-site request forgery CSRF vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allows remote attackers to perform certain configuration changes as administrators...
CVE-2007-4017
CVE-2007-4017 describes a CSRF vulnerability in the web-based administration console of Citrix Access Gateway prior to firmware 4.5.5. The issue allows remote attackers to perform certain configuration changes as administrators due to insufficient CSRF protections in the management interface. The...
CVE-2006-4017
Cross-site scripting XSS vulnerability in the search module in Inter Network Marketing INM CMS G3 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter...
CVE-2006-4017
The CVE-2006-4017 issue affects Inter Network Marketing (INM) CMS G3, specifically the search module where the attacker can supply a search_string to trigger a Cross‑Site Scripting (XSS) vulnerability. The root cause is improper handling of user input in the search functionality, enabling remote ...
CVE-2005-4017
The CVE-2005-4017 issue concerns Widget Property 1.1.19. The vulnerability is triggered by an invalid lang value in property.php that allows remote attackers to obtain the full server path, which is exposed in the resulting error message. The affected component is property.php within Widget Prope...