77 matches found
VMSA-2010-0018 VMware hosted products and ESX patches resolve multiple security issues
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2010-0018 Synopsis: VMware hosted products and ESX patches resolve multiple security issues Issue date: 2010-12-02 Updated on:...
openSUSE Security Update : moodle (moodle-1933)
This patch updates Moodle to the latest stable upstream version 1.9.7 fixing multiple security issues: CVE-2009-4297, CVE-2009-4298, CVE-2009-4299, CVE-2009-4300, CVE-2009-4301, CVE-2009-4302, CVE-2009-4303, CVE-2009-4304, CVE-2009-4305, MSA-09-0030 New detection of insecure Flash player plugins...
openSUSE Security Update : moodle (moodle-1933)
This patch updates Moodle to the latest stable upstream version 1.9.7 fixing multiple security issues: CVE-2009-4297, CVE-2009-4298, CVE-2009-4299, CVE-2009-4300, CVE-2009-4301, CVE-2009-4302, CVE-2009-4303, CVE-2009-4304, CVE-2009-4305, MSA-09-0030 New detection of insecure Flash player plugins...
Debian: Security Advisory (DSA-1986-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Core 11 FEDORA-2009-13080 (moodle)
The remote host is missing an update to moodle announced via advisory FEDORA-2009-13080. OpenVAS Vulnerability Test $Id: fcore200913080.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-13080 moodle Authors: Thomas Reinke Copyright: Copyright c 2009...
Fedora Core 12 FEDORA-2009-13065 (moodle)
The remote host is missing an update to moodle announced via advisory FEDORA-2009-13065. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...
Fedora Core 11 FEDORA-2009-13080 (moodle)
The remote host is missing an update to moodle announced via advisory FEDORA-2009-13080. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...
openSUSE Security Update : mercurial (mercurial-230)
The hgweb script didn't enforce the 'allowpull' permission setting which allowed anyone to retrieve files from the repository CVE-2008-4297 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
CVE-2008-4297
Mercurial before 1.0.2 does not enforce the allowpull permission setting for a pull operation from hgweb, which allows remote attackers to read arbitrary files from a repository via an "hg pull" request...
DEBIAN-CVE-2008-4297
Mercurial before 1.0.2 does not enforce the allowpull permission setting for a pull operation from hgweb, which allows remote attackers to read arbitrary files from a repository via an "hg pull" request...
CVE-2008-4297
Mercurial before 1.0.2 does not enforce the allowpull permission for hgweb pulls, allowing remote attackers to read arbitrary files from a repository via an hg pull request. Affected product: Mercurial (hgweb) prior to 1.0.2. Root cause: missing enforcement of allowpull in hgweb. Impact: potentia...
Sentinel Protection Server < 7.4.1 Directory Traversal File Access
Binary data 4297.prm...
CVE-2007-4297
CVE-2007-4297 describes multiple cross-site scripting (XSS) vulnerabilities in the Turkish module component point: yorumkaydet.asp within Dersimiz Haber Ekleme Modulu. The issue allows remote attackers to inject arbitrary web script or HTML via the parameters (1) yazan, (2) mail, and (3) yorum. T...
CVE-2006-4297
SQL injection vulnerability in shoppingcart.php in osCommerce before 2.2 Milestone 2 060817 allows remote attackers to execute arbitrary SQL commands via id array parameters...
CVE-2006-4297
CVE-2006-4297 is anSQL injection in osCommerce's shopping_cart.php (before 2.2 Milestone 2 060817). The vulnerability allows remote attackers to execute arbitrary SQL via id array parameters. AV:N/AC:L/Au:N/C:P/I:P/A:P (CVSSv2 base 7.5) per NVD; impact is partial on confidentiality, integrity, an...
CVE-2005-4297
CVE-2005-4297 affects bbBoard 2.56 and earlier with a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly via the "keys" parameter. The connected documents confirm the flaw and its basic vector bu...
