kernel: security and bugfix update. (important)

The openSUSE 11.4 kernel was updated to fix bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read on a specific socket, it's possible to corrupt kernel memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used. CVE-2011-269...

Ubuntu: Security Advisory (USN-1304-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1294-1: Linux kernel (Oneiric backport) vulnerabilities

Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. CVE-2011-1162 Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit...

Ubuntu: Security Advisory (USN-1193-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4087

Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file mma...

CVE-2010-4087

IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a .dir file with a crafted mmap record containing an invalid length of a VSWV entry, a different vulnerability than CVE-2010-4089...

CVE-2010-4087

Adobe Shockwave Player (IML32.dll) is affected by CVE-2010-4087: memory corruption via a crafted .dir mmap record with an invalid VSWV entry length, leading to possible arbitrary code execution or denial of service. This vulnerability is described as existing in Shockwave Player before version 11...

Shockwave Player < 11.5.9.615

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.9.615. Such versions are potentially affected by the following issues : - A memory corruption issue exists that could lead to code execution. Note that there are reports this issue is being exploited ...

CVE-2009-4087

Cross-site scripting XSS vulnerability in index.php in telepark.wiki 2.4.23 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2009-4087

The CVE-2009-4087 issue affects Telepark.wiki, specifically the index.php entry point for version 2.4.23 and earlier. The vulnerability is a Cross-site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via PATH_INFO. The OpenVAS and NVD records corroborate a...

CVE-2009-4087

Cross-site scripting XSS vulnerability in index.php in telepark.wiki 2.4.23 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2008-4087

Stack-based buffer overflow in Acoustica Beatcraft 1.02 Build 19 allows user-assisted attackers to cause a denial of service or execute arbitrary code via a Beatcraft Project aka bcproj file with a long string in a certain instruments title field...

CVE-2008-4087

Affected product: Acoustica Beatcraft 1.02 Build 19. The CVE describes a stack-based buffer overflow in a Beatcraft Project file (bcproj) where a long string in an instrument title field can be processed by Beatcraft, enabling user-assisted attackers to trigger a denial of service or arbitrary co...

CVE-2008-4087

creationtimestamp| type| source ---|---|--- 2008-08-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6333...

CVE-2007-4087

CVE-2007-4087 affects AlstraSoft Video Share Enterprise. Affected component: the web application handling category and UID inputs. The root cause is improper input handling leading to information disclosure: sending a single quote (') in the category parameter to view_video.php can reveal the ful...

CVE-2006-4087

CVE-2006-4087 describes a cross-site scripting (XSS) vulnerability in the admin.cgi component of mojoGallery (mojoscripts.com). The issue allows remote attackers to inject arbitrary web script or HTML through the username parameter. The NVD records a CVSSv2 base score of 4.3 (medium severity), wi...

SugarCRM <= 4.0 beta Remote File Inclusion Vulnerability

The version of SugarCRM installed on the remote host does not properly sanitize user input in the SPDX-FileCopyrightText: 2005 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

SugarCRM <= 4.0 beta acceptDecline.php Remote File Inclusion

SugarCRM is a Customer Relationship Manager written in PHP. The version of SugarCRM installed on the remote host does not properly sanitize user input in the 'beanFiles' parameter in the 'acceptDecline.php' file. A attacker can use this flaw to display sensitive information and to include malicio...