Fedora Update for file FEDORA-2014-4340

Check for the Version of file OpenVAS Vulnerability Test Fedora Update for file FEDORA-2014-4340 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for wordpress FEDORA-2013-16895

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : wordpress-3.6.1-1.fc19 (2013-16925)

Fixes security issues for CVE-2013-4338 CVE-2013-4339 CVE-2013-4340 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Mandriva Linux Security Advisory : wordpress (MDVSA-2013:239)

Updated wordpress and php-phpmailer packages fix security vulnerabilities : wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackers to execute arbitrary code by triggering erroneous PHP unserialize operations...

Updated wordpress and php-phpmailer packages fix security vulnerabilities

wp-includes/functions.php in WordPress before 3.6.1 does not properly determine whether data has been serialized, which allows remote attackers to execute arbitrary code by triggering erroneous PHP unserialize operations CVE-2013-4338. WordPress before 3.6.1 does not properly validate URLs before...

Debian DSA-2757-1 : wordpress - several vulnerabilities

Several vulnerabilities were identified in Wordpress, a web blogging tool. As the CVEs were allocated from releases announcements and specific fixes are usually not identified, it has been decided to upgrade the Wordpress package to the latest upstream version instead of backporting the patches...

[SECURITY] [DSA 2757-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2757-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez September 14, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2757-1 (wordpress - several vulnerabilities)

Several vulnerabilities were identified in Wordpress, a web blogging tool. As the CVEs were allocated from releases announcements and specific fixes are usually not identified, it has been decided to upgrade the Wordpress package to the latest upstream version instead of backporting the patches...

DSA-2757-1 wordpress - several

Bulletin has no description...

CVE-2013-4340

wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the Author role and providing a modified userID parameter...

CVE-2013-4340

WordPress vulnerability CVE-2013-4340 affects WordPress prior to 3.6.1. Remote authenticated users with the Author role can spoof post authorship by tampering with the user_ID parameter in wp-admin/includes/post.php. The issue arises in the post handling logic and allows manipulation of authorshi...

CVE-2013-4340

wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the Author role and providing a modified userID parameter...

CVE-2013-4340

wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the Author role and providing a modified userID parameter...

Oracle Linux 4 : firefox (ELSA-2006-0733 / ELSA-2006-0675 / ELSA-2006-0610)

Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Users of Firefox are advised to upgrade to...

CVE-2012-4340

CVE-2012-4340 is an XSS vulnerability in Sybase EAServer before version 6.1. The issue allows remote attackers to execute arbitrary web script or HTML via unspecified vectors. Connected sources confirm the affected product (Sybase EAServer) and the vulnerability class (XSS), with typical impact b...

CVE-2011-4340

Symphony CMS CVE-2011-4340 affects Symphony CMS 2.2.3 and potentially earlier versions up to just before 2.2.4. The vulnerability is due to cross-site scripting (XSS) in two areas: (1) profile parameter handling in extensions/profiledevkit/content/content.profile.php (triggered via default URI, a...

CVE-2011-4340

creationtimestamp| type| source ---|---|--- 2011-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36280...

CVE-2010-4340

libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access restrictions via a man-in-the-middle MITM attack...

CVE-2010-4340

Affected software: Libcloud prior to version 0.4.1. Vulnerability: TLS/SSL certificate validation is not performed for HTTPS connections, enabling a remote attacker to perform a man‑in‑the‑middle (MITM) attack and potentially bypass access restrictions. Impact (as stated): spoofed certificates co...

CVE-2010-4340

libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access restrictions via a man-in-the-middle MITM attack...