100 matches found
Fedora Update for ruby FEDORA-2012-16086
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 17 : ruby-1.9.3.286-18.fc17 (2012-16086)
New version 1.9.3 patchlevel 286 is released. A potential security flaw was found on the previous ruby that using crafted string might lead to unintentional file creation. This new rpm will fix this issue. Note that Tenable Network Security has extracted the preceding description block directly...
Fedora 18 : ruby-1.9.3.286-19.fc18 (2012-16071)
New version 1.9.3 patchlevel 286 is released. A potential security flaw was found on the previous ruby that using crafted string might lead to unintentional file creation. This new rpm will fix this issue. Note that Tenable Network Security has extracted the preceding description block directly...
CVE-2012-4522
The rbgetpathcheck function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path...
ruby -- Unintentional file creation caused by inserting an illegal NUL character
The official ruby site reports: A vulnerability was found that file creation routines can create unintended files by strategically inserting NULs in file paths. This vulnerability has been reported as CVE-2012-4522. Ruby can handle arbitrary binary patterns as Strings, including NUL chars. On the...
CVE-2011-4522
CVE-2011-4522 is a Cross-site Scripting (XSS) vulnerability in Advantech/BroadWin WebAccess prior to version 7.0, affecting the file bwerrdn.asp. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Multiple connected sources document this XSS vulne...
openSUSE Security Update : vino (openSUSE-SU-2011:0481-1)
Two out of bounds memory access vulnerabilities in vinos' libvncserver have been fixed. CVE-2011-0904 and CVE-2011-0905 have been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
CVE-2010-4522
MyBB versions 1.4.14 and 1.6.x before 1.6.1 contain multiple XSS vulnerabilities that allow remote attackers to inject arbitrary script/HTML via editpost.php, member.php, and newreply.php. Root cause is improper input handling in those endpoints leading to stored/reflected input being executed in...
CVE-2009-4522
Cross-site scripting XSS vulnerability in search.5.html in BloofoxCMS 0.3.5 allows remote attackers to inject arbitrary web script or HTML via the search parameter to index.php. NOTE: some of these details are obtained from third party information...
CVE-2009-4522
CVE-2009-4522 is a confirmed cross-site scripting vulnerability in bloofoxCMS 0.3.5, triggered via the search parameter passed to index.php through the search.5.html page. The vulnerability arises from insufficient input sanitization in the application, allowing remote attackers to inject arbitra...
CVE-2009-4522
creationtimestamp| type| source ---|---|--- 2009-10-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33287...
CVE-2008-4522
Multiple directory traversal vulnerabilities in JMweb MP3 Music Audio Search and Download Script allow remote attackers to include and execute arbitrary local files via a .. dot dot in the src parameter to 1 listen.php and 2 download.php...
CVE-2008-4522
creationtimestamp| type| source ---|---|--- 2008-10-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6669...
Samba < 3.0.30 'receive_smb_raw' Buffer Overflow Vulnerability
Binary data 4522.prm...
Debian Security Advisory DSA 944-1 (mantis)
The remote host is missing an update to mantis announced via advisory DSA 944-1. Several security related problems have been discovered in Mantis, a web-based bug tracking system. For details on the issues resolved, please visit the referenced advisories. The old stable distribution woody does no...
CVE-2007-4522
CVE-2007-4522 affects Ripe Website Manager
CVE-2006-4522
The CVE-2006-4522 entry concerns IBM AIX 5.2 and 5.3, where the dtterm component is affected. The vulnerability allows a local user to execute arbitrary code with root privileges via unspecified vectors/vulnerabilities in dtterm. No concrete exploit details, affected versions beyond the stated AI...
[SECURITY] [DSA 944-1] New mantis packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 944-1 [email protected] http://www.debian.org/security/ Martin Schulze January 17th, 2006 http://www.debian.org/security/faq -...
CVE-2005-4522
CVE-2005-4522 describes cross-site scripting (XSS) in Mantis before or at 1.0.0rc3, in the view_filters_page.php filters script. The vulnerabilities allow remote attackers to inject arbitrary script or HTML via the (1) view_type and (2) target_field parameters. The CVSSv2 base score is 4.3 (Mediu...