Fedora Update for kernel FEDORA-2013-17012

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2013-17012 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for kernel FEDORA-2013-17010

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : kernel-3.11.1-300.fc20 (2013-16794)

Update to latest upstream stable release, Linux v3.11.1. Includes fixes for CVE-2013-4343 and CVE-2013-4350 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as mu...

Fedora 18 : kernel-3.10.12-100.fc18 (2013-17010)

The 3.10.12 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Linux Kernel 'sctp_v6_xmit()'函数信息泄露漏洞(CVE-2013-4350)

BUGTRAQ ID: 62405 CVECAN ID: CVE-2013-4350 Linux Kernel是Linux操作系统的内核。 Linux kernel在sctpv6xmit中存在ipv6加密bug，攻击者可利用此漏洞泄露敏感信息。 0 Linux kernel 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

Symantec Enterprise Security Manager Unquoted Search Path (SYM12-020)

The version of Symantec Enterprise Security Manager installed on the remote host has a service that uses an unquoted search path that contains at least one whitespace. A local attacker could gain elevated privileges by inserting an executable file in the path of the affected service. C Tenable...

CVE-2012-4350

Symantec Enterprise Security Manager (ESM) for Windows is affected by CVE-2012-4350 due to an unquoted search path in both the Manager and Agent components, enabling local privilege escalation. Public sources (OpenVAS/Nessus entries) confirm the issue affects Windows and provide remediation: upgr...

Gentoo Security Advisory GLSA 201211-01 (MantisBT)

The remote host is missing updates announced in advisory GLSA 201211-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Fedora Update for mantis FEDORA-2010-19070

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-4350

Directory traversal vulnerability in admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dbtype parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...

CVE-2010-4350

Directory traversal vulnerability in admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dbtype parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...

CVE-2010-4350

CVE-2010-4350 affects MantisBT prior to 1.2.4 and is a directory traversal flaw in admin/upgrade_unattended.php that allows remote inclusion of local files via db_type, due to unsafe ADOdb usage. Impact per CVSS: partial disclosure/integrity/availability (base 5.1, MEDIUM). Gentoo/OpenVAS advisor...

CVE-2009-4350

SQL injection vulnerability in index.php in Arctic Issue Tracker 2.1.1 allows remote attackers to execute arbitrary SQL commands via the 1 matchingsid or 2 matchingstitle parameters in a Login action to an unspecified program, or 3 the matchingsid parameter in a search action to index.php, a...

CVE-2009-4350

CVE-2009-4350 is a SQL injection vulnerability in Arctic Issue Tracker 2.1.1 (index.php). The issue allows remote attackers to inject arbitrary SQL via (1) matchings[id] or (2) matchings[title] in a Login action to an unspecified program, or (3) matchings[id] in a search action to index.php. This...

CVE-2009-4350

SQL injection vulnerability in index.php in Arctic Issue Tracker 2.1.1 allows remote attackers to execute arbitrary SQL commands via the 1 matchingsid or 2 matchingstitle parameters in a Login action to an unspecified program, or 3 the matchingsid parameter in a search action to index.php, a...

[DSECRG-09-048] HP LaserJet printers - Multiple Stored XSS vulnerabilities

Digital Security Research Group DSecRG Advisory DSECRG-09-048 http://dsecrg.ru/pages/vul/show.php?id=148 Application: HP LaserJet printer web interface Vulnerable: HP LaserJet 2200, 4350, 4600, 5500, and many others Vendor URL: http://www.hp.com/ Bug: Multiple Stored XSS Vulnerabilities Exploits:...

Directory traversal

Directory traversal vulnerability in the HP JetDirect web administration interface in the HP-ChaiSOE 1.0 embedded web server on the LaserJet 9040mfp, LaserJet 9050mfp, and Color LaserJet 9500mfp before firmware 08.110.9; LaserJet 4345mfp and 9200C Digital Sender before firmware 09.120.9; Color...

HP SiteScope SNMP Trap消息HTML代码注入漏洞

BUGTRAQ ID: 31816 CVECAN ID: CVE-2007-4350 HP SiteScope提供无代理监控，补充现有基于代理的解决方案，帮助保持分布式IT基础架构的可用性和性能。 HP SiteScope在处理SNMP信息的显示时存在漏洞，可以将SiteScope服务器配置为接收设备的SNMP Trap，并可以通过Web界面查看SNMP监控的状态和所接收到SNMP trap消息的内容。由于未经过滤便在管理界面中呈现了SNMP消息，因此在查看信息时可能在用户浏览器会话中执行任意HTML和脚本代码。 HP SiteScope 9.0 build 911 HP --...

CVE-2007-4350

HP SiteScope 9.0 build 911 contains a cross-site scripting (XSS) vulnerability in the management interface. The issue arises from rendering SNMP trap messages in the web UI without filtering, allowing an attacker to inject arbitrary HTML/script that could execute in a user’s browser. This affects...

CVE-2008-4350

The CVE-2008-4350 entry concerns vbLOGIX Tutorial Script 1.0 (and earlier) with a SQL injection in main.php. The vulnerable component is the list action that uses the cat_id parameter, enabling remote attackers to execute arbitrary SQL commands. This is caused by unsanitized input in the paramete...