Debian: Security Advisory (DSA-3333-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-4480

Directory traversal vulnerability in afc in AppleFileConduit in Apple iOS before 8.1.3 and Apple TV before 7.0.3 allows attackers to access unintended filesystem locations by creating a symlink...

CVE-2014-4480

CVE-2014-4480 affects Apple iOS < 8.1.3 and Apple TV

CVE-2014-4480

Directory traversal vulnerability in afc in AppleFileConduit in Apple iOS before 8.1.3 and Apple TV before 7.0.3 allows attackers to access unintended filesystem locations by creating a symlink...

CVE-2013-4480

CVE-2013-4480 affects Red Hat Satellite 5.6 and earlier. The root cause is that the web interface used to create the initial administrator user was not disabled after setup, enabling a remote attacker to create an admin account. Documented impact is the potential for unauthorized administrative a...

RHEL 5 : rhn-java-sat in Satellite Server (RHSA-2013:1513)

An updated rhn-java-sat package that fixes a security issue is now available for Red Hat Network Satellite 5.2. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

RHEL 5 / 6 : spacewalk-java in Satellite Server (RHSA-2013:1514)

Updated spacewalk-java packages that fix one security issue are now available for Red Hat Satellite 5.3, 5.4, 5.5 and 5.6. The Red Hat Security Response Team has rated this update as having a critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Critical: Red Hat Security Advisory: spacewalk-java security update

Updated spacewalk-java packages that fix one security issue are now available for Red Hat Satellite 5.3, 5.4, 5.5 and 5.6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Fedora 17 : mom-0.3.0-1.fc17 (2012-15496)

Update to mom-0.3.0 which fixes a momd security issue and includes many features for ovirt integration. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much a...

Fedora 18 : mom-0.3.0-1.fc18 (2012-15521)

Update to mom-0.3.0 which fixes a momd security issue and includes many features for ovirt integration. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much a...

Unfixed Redirect vulnerability at www.olleh.com

Security researcher d3vbit3, has submitted on 28/07/2011 a Redirect vulnerability affecting www.olleh.com, which at the time of submission ranked 4480 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently unfixed. If you...

Fedora Update for phpMyAdmin FEDORA-2011-3737

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian Security Advisory DSA 2139-1 (phpmyadmin)

The remote host is missing an update to phpmyadmin announced via advisory DSA 2139-1. OpenVAS Vulnerability Test $Id: deb21391.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2139-1 phpmyadmin Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian DSA-2139-1 : phpmyadmin - several vulnerabilities

Several vulnerabilities have been discovered in phpMyAdmin, a tool to administer MySQL over the web. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-4329 Cross site scripting was possible in search, that allowed a remote attacker to inject arbitrary...

[SECURITY] [DSA 2139-1] New phpmyadmin packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2139-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 31, 2010 http://www.debian.org/security/faq -...

CVE-2010-4480

CVE-2010-4480 affects PhpMyAdmin up to versions before 3.4.0-beta1, where error.php can be abused with a crafted BBCode tag containing “@” (e.g., “[a@url@page]”) to perform cross-site scripting (XSS). The issue is remote with no authentication required and could impact pages that render user-supp...

Unvalidated input on error page.

PMASA-2010-9 Announcement-ID: PMASA-2010-9 Date: 2010-12-07 Updated: 2010-02-16 Summary Unvalidated input on error page. Description It was possible to display arbitrary text and link to external site using parameters passed to particular script. Severity This issue is considered minor, because t...

CVE-2009-4480

CVE-2009-4480 affects AzeoTech DAQFactory 5.77. The issue is a buffer overflow in the web service that could let remote attackers execute arbitrary code via unspecified vectors, with exploitation demonstrated by a module in VulnDisco Pack Professional 7.16 through 8.11. The records from Red Hat a...

CVE-2009-4480

Buffer overflow in the web service in AzeoTech DAQFactory 5.77 might allow remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.16 through 8.11. NOTE: as of 20091229, this disclosure has no actionable information...

CVE-2008-4480

Novell eDirectory’s dhost.exe contains a heap-based overflow in Netware Core Protocol opcode 0x24 handling. An under-allocated heap buffer due to a calculation error enables remote code execution. Affected versions are eDirectory 8.x before 8.8.3 and 8.7.3 before 8.7.3.10 ftf1. The vulnerability ...