OracleVM 2.2 : acpid (OVMSA-2009-0037)

The remote OracleVM system is missing necessary patches to address critical security updates : - Resolves: 515062 CVE-2009-4033 acpid: log file created with random permissions - start acpid before hal - Resolves: 503177 - Updated the License entry - Fixed CVE-2009-0798 too many open files DoS -...

CVE-2014-4033

CVE-2014-4033 is an XSS vulnerability in Epignosis eFront 3.6.14.4, identified in libraries/includes/personal/profile.php. It can be triggered via the surname parameter to student.php to inject arbitrary web script/HTML. Red Hat and NVD entries reproduce the same description. Exploitation details...

CVE-2014-4033

Cross-site scripting XSS vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to inject arbitrary web script or HTML via the surname parameter to student.php...

IBM DB2 10.1 < Fix Pack 3 Multiple Vulnerabilities (credentialed check)

According to its version, the installation of IBM DB2 10.1 on the remote host is affected by the following vulnerabilities : - When a multi-node configuration is used, an error exists in the Fast Communications Manager FCM that could allow denial of service attacks. CVE-2013-4032 / IC94434 - An...

IBM DB2 10.5 < Fix Pack 1 Security Bypass

According to its version, the installation of IBM DB2 10.5 running on the remote host is affected by a security bypass vulnerability. An unspecified error exists that can allow an attacker to gain SELECT, INSERT, UPDATE, or DELETE permissions to database tables. Note that successful exploitation...

IBM Db2 DML Statement Execution Remote Privilege Escalation Vulnerability

IBM Db2 is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2"; ifdescription...

CVE-2013-4033

CVE-2013-4033 affects IBM DB2 and DB2 Connect (versions 9.7 FP8, 9.8 FP5, 10.1 FP2, 10.5 FP1). An authenticated user with EXPLAIN authority can temporarily gain SELECT/INSERT/UPDATE/DELETE on a table without DATAACCESS authority, by exploiting EXPLAIN-related privileges. IBM security notices list...

Oracle Linux 5 : acpid (ELSA-2009-1642)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2009-1642 advisory. 1.0.4-9.el54.1 - Resolves: 515062 CVE-2009-4033 acpid: log file created with random permissions Tenable has extracted the preceding description block directly...

Oracle Linux 3 : xpdf (ELSA-2007-1030)

From Red Hat Security Advisory 2007:1030 : Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based viewer for...

Scientific Linux Security Update : acpid on SL5.x i386/x86_64

CVE-2009-4033 acpid: log file created with random permissions It was discovered that acpid could create its log file '/var/log/acpid' with random permissions on some systems. A local attacker could use this flaw to escalate their privileges if the log file was created as world-writable and with t...

CVE-2012-4033

Multiple unspecified vulnerabilities in the Zingiri Web Shop plugin before 2.4.0 for WordPress have unknown impact and attack vectors...

CVE-2012-4033

CVE-2012-4033 affects the Zingiri Web Shop WordPress plugin prior to version 2.4.0. The connected sources collectively indicate multiple unspecified vulnerabilities with unknown impact and attack vectors in this plugin, but version 2.4.0 or later is suggested as the remediation. No concrete root-...

CVE-2011-4033

The vulnerability CVE-2011-4033 affects the third‑party Steema TeeChart ActiveX control used by Schneider Electric Vijeo Historian (V4.30 and earlier), CitectHistorian (V4.30 and earlier), and CitectSCADA Reports (V4.10 and earlier). Root cause: a buffer overflow in the TeeChart ActiveX control t...

CentOS Update for acpid CESA-2009:1642 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Google Chrome multiple vulnerabilities - October 10(Windows)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnoct10win.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - October 10Windows Authors: Madhuri D Copyright: Copyright c 2010 Greenbone...

CVE-2010-4033

CVE-2010-4033 affects Google Chrome versions before 7.0.517.41, where the browser’s autofill/autocomplete implementation allows remote attackers to perform “profile spamming” via unspecified vectors. The NVD entry describes the vulnerability as an issue with autofill/autocomplete, with a CVSS v2 ...

CentOS 5 : acpid (CESA-2009:1642)

An updated acpid package that fixes one security issue is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. acpid is a daemon that dispatches ACPI Advanced Configuration and Power Interface events to...

CentOS Security Advisory CESA-2009:1642 (acpid)

The remote host is missing updates to acpid announced in advisory CESA-2009:1642. CESA-2009:1642 66619 2 $Id: ovcesa20091642.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1642 acpid Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CentOS Security Advisory CESA-2009:1642 (acpid)

The remote host is missing updates to acpid announced in advisory CESA-2009:1642. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-onl...

Important: Red Hat Security Advisory: rhev-hypervisor security and bug fix update

An updated rhev-hypervisor package that fixes security issues and several bugs is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The rhev-hypervisor package provides a Red Hat Enterprise Virtualization RHEV Hypervisor ISO disk...