CentOS 6 : vino (CESA-2013:0169)

An updated vino package that fixes several security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

vino security update

2.28.1-8 - Remove spurious 'e' from glib2-devel requirement 2.28.1-7 - Bump version number 2.28.1-6 - Bump version number 2.28.1-5 - Add reachability.patch Remove UI about whether the is only reachable locally or not. Fix for CVE-2011-1164 - Bug 553477 2.28.1-5 - Add upnp.patch Fix for...

CVE-2012-4429

Vino 2.28, 2.32, 3.4.2, and earlier allows remote attackers to read clipboard activity by listening on TCP port 5900...

CVE-2012-4429

CVE-2012-4429 affects Vino (GNOME VNC server) versions 2.28, 2.32, 3.4.2 and earlier, allowing remote attackers to read clipboard activity by listening on TCP port 5900. The connected Nessus/OpenVAS entries corroborate affected packages across multiple OS families (MiracleLinux, Ubuntu, Oracle Li...

Code injection

Unspecified vulnerability in the Agile Core component in Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders, Files & Attachments, a different vulnerability than CVE-2010-4429...

CVE-2009-4429

Cross-site scripting XSS vulnerability in the Sections module 5.x before 5.x-1.3 and 6.x before 6.x-1.3 for Drupal allows remote authenticated users with "administer sections" privileges to inject arbitrary web script or HTML via a section name aka the Name field...

CVE-2009-4429

CVE-2009-4429 is an XSS vulnerability in Drupal's Sections module. Affected: Sections module for Drupal 5.x (before 5.x-1.3) and 6.x (before 6.x-1.3). Condition: remote authenticated users with "administer sections" privileges can inject arbitrary script/HTML via the Name field. No exploitation o...

CVE-2008-4429

CVE-2008-4429 affects SOURCENEXT Virus Security ZERO 9.5.0173 and earlier and Virus Security 9.5.0173 and earlier. It allows remote attackers to cause a denial of service via malformed compressed files, potentially consuming memory or crashing the application. Affected products and impact are des...

CVE-2007-4429

Skype exposure CVE-2007-4429 describes an unspecified vulnerability that could allow remote attackers to cause a denial of service (server hang) by sending long URIs. The description notes active exploitation around 2007-08-17 via a call to a specific number and clarifies the issue is separate fr...

CVE-2006-4429

PHP remote file inclusion vulnerability in handlers/email/mod.output.php in PHlyMail Lite 3.4.4 and earlier Build 3.04.04 allows remote attackers to execute arbitrary PHP code via a URL in the PMpathhandler parameter, a different vector than CVE-2006-4291. NOTE: This issue has been disputed by a...

CVE-2006-4429

PHlyMail Lite 3.4.4 and earlier (Build 3.04.04) are vulnerable to PHP remote file inclusion via a URL parameter in PM [path][handler], affecting handlers/email/mod.listmail.php (CVE-2006-4291) and handlers/email/mod.output.php (CVE-2006-4429). The issue enables arbitrary PHP code execution. The v...