131 matches found
Slackware 10.2 / 11.0 / 12.0 / 12.1 / current : mozilla-thunderbird (SSA:2008-270-01)
New mozilla-thunderbird packages are available for Slackware 10.2, 11.0, 12.0, 12.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-270-01. The te...
CVE-2008-4064
CVE-2008-4064 affects Mozilla Firefox 3.x prior to 3.0.2. The description identifies three concrete vectors contributing to memory safety issues: (1) a memory corruption/possible code execution path via graphics rendering related to a long alert messagebox in cairo_surface_set_device_offset, (2) ...
Critical: Red Hat Security Advisory: firefox security update
An updated firefox package that fixes various security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the...
RHEL 4 / 5 : firefox (RHSA-2008:0879)
An updated firefox package that fixes various security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the...
FreeBSD Ports: drupal4
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2007-4064
CVE-2007-4064 covers XSS vulnerabilities in Drupal 5.x before 5.2 and 4.7.x before 4.7.7. The issue comprises two vectors: (1) remote injection of arbitrary script/HTML via certain server variables, including PHP_SELF; and (2) remote injection via names of custom content types, exploitable by rem...
FTP Server Zipped .divx File Uploaded
Binary data 4064.prm...
CVE-2006-4064
SQL injection vulnerability in default.asp in YenerTurk Haber Script 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: it was later reported reported that 2.0 is also affected...
CVE-2006-4064
The CVE-2006-4064 entry documents an SQL injection vulnerability in YenerTurk Haber Script 1.0 and earlier (default.asp) that allows remote attackers to execute arbitrary SQL commands via the id parameter; note that 2.0 has also been reported affected. The core details are supported by the NVD de...
CVE-2005-4064
CVE-2005-4064 describes multiple SQL injection vulnerabilities in A-FAQ 1.0, allowing remote attackers to execute arbitrary SQL commands through the faqDspItem.asp (faqid parameter) and faqDsp.asp (catcode parameter). Affected product: A-FAQ 1.0. Underlying cause and exact impact are documented a...
