CVE-2012-4349

The CVE-2012-4349 entry concerns a root cause in Symantec Network Access Control (SNAC) 12.1 before RU2, where an unquoted Windows search path could allow a local attacker to execute arbitrary code with elevated privileges. The vulnerability is tied to SNAC’s startup path handling, enabling local...

Gentoo Security Advisory GLSA 201211-01 (MantisBT)

The remote host is missing updates announced in advisory GLSA 201211-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Fedora Update for colord FEDORA-2011-16453

Check for the Version of colord OpenVAS Vulnerability Test Fedora Update for colord FEDORA-2011-16453 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

[USN-1289-1] colord vulnerability

========================================================================== Ubuntu Security Notice USN-1289-1 December 07, 2011 colord vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

CVE-2011-4349

Multiple SQL injection vulnerabilities in 1 cd-mapping-db.c and 2 cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and a device id, b property, or c profile id...

CVE-2011-4349

CVE-2011-4349 concerns the colord color management service, where multiple SQL injection vulnerabilities in the internal databases (cd-mapping-db.c and cd-device-db.c) allow a local user to modify or read databases via vectors involving color devices, including device id, property, or profile id....

Fedora Update for colord FEDORA-2011-16451

Check for the Version of colord OpenVAS Vulnerability Test Fedora Update for colord FEDORA-2011-16451 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora 16 : colord-0.1.15-1.fc16 (2011-16453)

New upstream version - This release fixes an important security bug: CVE-2011-4349. - Do not crash the daemon if adding the device to the db failed - Fix a memory leak when getting properties from a device Note that Tenable Network Security has extracted the preceding description block directly...

Fedora Update for mantis FEDORA-2010-19070

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-4349

CVE-2010-4349 affects MantisBT prior to 1.2.4. The issue lies in admin/upgrade_unattended.php, where an invalid db_type parameter triggers an error message that reveals installation path, due to an unsafe call in the ADOdb Library for PHP. This enables a remote attacker to obtain sensitive inform...

CVE-2009-4349

Cross-site request forgery CSRF vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2009-4349

Cross-site request forgery CSRF vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

[security bulletin] HPSBMA02392 SSRT071481 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01607558 Version: 1 HPSBMA02392 SSRT071481 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as...

[security bulletin] HPSBMA02390 SSRT071481 rev.1 - HP OpenView Performance Agent, HP Performance Agent, Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01621724 Version: 1 HPSBMA02390 SSRT071481 rev.1 - HP OpenView Performance Agent, HP Performance Agent, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be...

[security bulletin] HPSBMA02391 SSRT071481 rev.1 - HP OpenView Reporter and HP Reporter Running on Windows, Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01612418 Version: 1 HPSBMA02391 SSRT071481 rev.1 - HP OpenView Reporter and HP Reporter Running on Windows, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should b...

Secunia Research: HP OpenView Products Shared Trace Service Denial of Service

====================================================================== Secunia Research 22/10/2008 - HP OpenView Products Shared Trace Service Denial of Service - ====================================================================== Table of Contents Affected...

CVE-2007-4349

CVE-2007-4349 affects HP OpenView components (Performance Agent C.04.70; Performance Agent C.04.60/04.61; Reporter 3.7/ Reporter 3.8) and is triggered by an unspecified sequence of Trace Event Message RPC requests that lead to out-of-bounds memory access due to an erroneous object reference, enab...

CVE-2008-4349

The CVE-2008-4349 entry relates to multiple XSS vulnerabilities in the news.php component of s0nic Paranews 3.4, exploitable via the (1) id or (2) page parameter in a details action. Evidence from NVD and related records confirms a cross-site scripting flaw that could allow remote attackers to in...

CVE-2008-4349

creationtimestamp| type| source ---|---|--- 2008-09-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32365...

CVE-2006-4349

PHP remote file inclusion vulnerability in ToendaCMS 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tcmsadministersite parameter to an unspecified script, probably index.php. NOTE: this issue has been disputed by a third party, who states that...