FreeBSD : otrs -- information disclosure (8b97d289-d8cf-11e2-a1f5-60a44c524f57)

The OTRS Project reports : An attacker with a valid agent login could manipulate URLs in the ticket watch mechanism to see contents of tickets they are not permitted to see. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

[SECURITY] [DSA 2712-1] otrs2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2712-1 [email protected] http://www.debian.org/security/ Florian Weimer June 19, 2013 http://www.debian.org/security/faq -...

CentOS Update for abrt CESA-2012:0841 centos6

Check for the Version of abrt OpenVAS Vulnerability Test CentOS Update for abrt CESA-2012:0841 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for abrt, libreport, btparser, and python-meh RHSA-2012:0841-04

Check for the Version of abrt, libreport, btparser, and python-meh OpenVAS Vulnerability Test RedHat Update for abrt, libreport, btparser, and python-meh RHSA-2012:0841-04 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is...

RHEL 6 : abrt, libreport, btparser, and python-meh (RHSA-2012:0841)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0841 advisory. ABRT Automatic Bug Reporting Tool is a tool to help users to detect defects in applications and to create a bug report with all the...

Fedora Update for abrt FEDORA-2011-16990

Check for the Version of abrt OpenVAS Vulnerability Test Fedora Update for abrt FEDORA-2011-16990 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for libreport FEDORA-2011-16990

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for abrt FEDORA-2011-16990

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Memory corruption

dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2581, CVE-2010-4084, CVE-2010-4086, and CVE-2010-4088...

CVE-2010-4088

CVE-2010-4088 affects Adobe Shockwave Player prior to 11.5.9.615, via the DIRAPI.dll path where parsing a .dir media file with duplicated KEY* references can cause memory corruption, enabling code execution or a crash. Affected component: Shockwave Player (DIRAPI.dll); vulnerable condition: malfo...

Shockwave Player < 11.5.9.615

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.9.615. Such versions are potentially affected by the following issues : - A memory corruption issue exists that could lead to code execution. Note that there are reports this issue is being exploited ...

CVE-2009-4088

Telepark.wiki is affected by multiple directory traversal vulnerabilities (Telepark.wiki 2.4.23 and earlier). The issues arise from directory traversal sequences in the css parameter to getjs.php and getcsslocal.php, enabling remote attackers to read arbitrary files, and from the group parameter ...

CVE-2009-4088

creationtimestamp| type| source ---|---|--- 2009-08-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9483 2009-11-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10101...

CVE-2008-4088

CVE-2008-4088 affects myPHPNuke (MPN) up to version 1.8.8_8rc2, where print.php via the sid parameter allows remote SQL injection to execute arbitrary commands. Affected: print.php in MPN; root cause: insufficient input validation. Remediation: upgrade to 1.8.8_8rc2 or later.

CVE-2007-4088

CVE-2007-4088 documents multiple XSS vulnerabilities in Vikingboard 0.1.2. The issues allow remote injection of arbitrary script or HTML via numerous parameters across several scripts: cp.php (id, f, quote, act), user.php (u), post.php (f, s, 6–11), topic.php (s), search.php (toshow via dosearch)...

CVE-2005-4088

SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the 1 parent and 2 day parameters...

CVE-2005-4088

CVE-2005-4088 describes an SQL injection vulnerability in index.php of phpForumPro 2.2 that allows remote attackers to execute arbitrary SQL commands via the (1) parent and (2) day parameters. The issue affects phpForumPro 2.2 and is documented with a CVSSv2 base score of 7.5 (HIGH). Exploitation...