Firefox ESR < 38.3 Multiple Vulnerabilities (Mac OS X)

The version of Firefox ESR installed on the remote Mac OS X host is prior to 38.3. It is, therefore, affected by the following vulnerabilities : - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. A remote attacker can exploit these issues to...

Firefox ESR < 38.3 Multiple Vulnerabilities

The version of Firefox ESR installed on the remote Windows host is prior to 38.3. It is, therefore, affected by the following vulnerabilities : - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. A remote attacker can exploit these issues to...

CVE-2014-4509

The MKDQUOTESAFE function in the Fan-out driver scripts in Fan-Out Platform Services in Novell Identity Manager aka IDM 4.0.2 allows local users to execute arbitrary commands by leveraging eDirectory POSIX attribute changes to insert shell metacharacters...

CVE-2014-4509

The CVE-2014-4509 issue affects Novell Identity Manager (IDM) 4.0.2, specifically the MKDQUOTESAFE function in the Fan-out driver scripts within Fan-Out Platform Services. The vulnerability allows local users to execute arbitrary commands by leveraging eDirectory POSIX attribute changes to insert...

openSUSE Security Update : ibus-pinyin (openSUSE-SU-2013:1825-1)

This update fixes the following issue with ibus-pinyin : - Fix visible password entry in GNOME lock screen CVE-2013-4509, bnc847718 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : otrs (openSUSE-SU-2011:0464-1)

This updated fixes a cross site scripting XSS issue in otrs. CVE-2011-1518 Upstream advisory: http://otrs.org/advisory/OSA-2011-01-en/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update otrs-4509...

openSUSE Security Update : ibus-chewing (openSUSE-SU-2014:0068-1)

Add fix-CVE-2013-4509-support-input-purpose.patch - Fixed password is visible on GNOME lock screen bnc847718, CVE-2013-4509 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-40...

Fedora Update for ibus-chewing FEDORA-2014-1908

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-4509

CVE-2013-4509 concerns the ibus default configuration in GNOME 3 where IBus.InputPurpose.PASSWORD is not set, causing password characters to be visible on the lock screen. Connected advisories confirm a fix in ibus-chewing and related ibus updates across distributions (openSUSE/SUSE patches openS...

Fedora Update for ibus-pinyin FEDORA-2013-20993

Check for the Version of ibus-pinyin OpenVAS Vulnerability Test Fedora Update for ibus-pinyin FEDORA-2013-20993 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Fedora Update for ibus-pinyin FEDORA-2013-20993

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : ibus-pinyin-1.5.0-5.fc19 (2013-20993)

Fixes ibus: visible password entry flaw. rhbz1027029 CVE-2013-4509 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 20 : ibus-pinyin-1.5.0-5.fc20 (2013-20929)

Fixes ibus: visible password entry flaw. rhbz1027029 CVE-2013-4509 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2011-4509

CVE-2011-4509 affects Siemens WinCC/WinCC flexible products (2004–2008, WinCC V11, and related SIMATIC HMI panels). The root cause is an improperly selected default administrator password, which enables remote attackers to gain access by brute-forcing via many HTTP requests. Public citations in c...

Siemens Simatic HMI Authentication Vulnerabilities

Overview ICS-CERT is aware of a public report by independent security researchers Billy Rios and Terry McCorkle concerning authentication bypass vulnerabilities affecting Siemens SIMATIC HMI products which are supervisory control and data acquisition/human-machine interface SCADA/HMI products...

CVE-2010-4509

Movable Type is affected by multiple vulnerabilities in the mt:AssetProperty and mt:EntryFlag tags affecting Movable Type 4.x before 4.35 and 5.x before 5.04. The connected documents corroborate affected versions and tag-level vectors without detailing exact exploit paths or impacts, describing t...

CVE-2009-4509: TANDBERG VCS Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Virtual Security Research, LLC. http://www.vsecurity.com/ Security Advisory - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: TANDBERG Video Communication Server Authentication Bypass Release Date:...

CVE-2009-4509

The TANDBERG Video Communication Server (VCS) web management interface in versions around x4.2.1 (and possibly earlier) uses forged/predictable session cookies in tandberg/web/lib/secure.php and tandberg/web/user/lib/secure.php, enabling an unauthenticated attacker to bypass authentication and po...

CVE-2008-4509

The CVE-2008-4509 entry describes an unrestricted file upload vulnerability in FOSS Gallery Admin and FOSS Gallery Public 1.0 beta, specifically in processFiles.php. An attacker can upload a file with an executable extension and then access it via a direct request to the file in the root director...

CVE-2007-4509

CVE-2007-4509 describes a SQL injection in Joomla!’s EventList component (com_eventlist) versions 0.8 and earlier. The vulnerability arises in the index.php file when processing the details action with theDid parameter, allowing remote attackers to execute arbitrary SQL commands. Impact and remed...