CVE-2016-4561

CVE-2016-4561 affects ikiwiki’s CGI.pm cgierror function, where an XSS exists in error messages for ikiwiki before 3.20160506. Exploitation could inject script/HTML in victims’ sessions. Public advisories note mitigation via updates to ikiwiki (e.g., Debian/DSA-3571-1, Mageia MGASA-2019-0113, Deb...

CVE-2016-4561

Cross-site scripting XSS vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message...

SuSE Update for update openSUSE-SU-2012:1620-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201216201.nasl 8456 2018-01-18 06:58:40Z teissa $ SuSE Update for update openSUSE-SU-2012:1620-1 update Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program ...

openSUSE: Security Advisory for update (openSUSE-SU-2012:1620-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for libssh FEDORA-2012-18687

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[ MDVSA-2012:175 ] libssh

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2012:175 http://www.mandriva.com/security/ Package : libssh Date : November 29, 2012 Affected: 2011. Problem Description: Multiple double free, buffer overflow, invalid free and improper overflow checks...

CVE-2012-4561

Libssh: CVE-2012-4561 in libssh prior to 0.5.3 is caused by memory-management issues that free an invalid pointer on an error path, potentially enabling remote denial of service (crash). Several connected advisories also reference related CVEs (4559, 4560, 4562) and note memory-management flaws w...

Mandriva Linux Security Advisory : libssh (MDVSA-2012:175)

Multiple double free, buffer overflow, invalid free and improper overflow checks vulnerabilities was found and corrected in libssh CVE-2012-4559, CVE-2012-4560, CVE-2012-4561, CVE-2012-4562. The updated packages have been upgraded to the 0.5.3 version which is not affected by these issues...

Ubuntu Update for libssh USN-1640-1

Ubuntu Update for Linux kernel vulnerabilities USN-1640-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16401.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for libssh USN-1640-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Fedora 17 : libssh-0.5.3-1.fc17 (2012-18677)

This is an important SECURITY and maintenance release in order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561 and CVE-2012-4562. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 18 : libssh-0.5.3-1.fc18 (2012-18610)

This is an important SECURITY and maintenance release in order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561 and CVE-2012-4562. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : libssh vulnerabilities (USN-1640-1)

Xi Wang and Florian Weimer discovered that libssh incorrectly handled memory. A remote attacker could use this to cause libssh to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2012-4559, CVE-2012-4560, CVE-2012-4561, CVE-2012-4562. Note that Tenable Network...

Security fix for the ALT Linux 8 package libssh version 0.5.3-alt1

Nov. 21, 2012 Sergey V Turchin 0.5.3-alt1 - new version - security fixes: CVE-2012-4559, CVE-2012-4560, CVE-2012-4561...

Security fix for the ALT Linux 9 package libssh version 0.5.3-alt1

Nov. 21, 2012 Sergey V Turchin 0.5.3-alt1 - new version - security fixes: CVE-2012-4559, CVE-2012-4560, CVE-2012-4561...

Security fix for the ALT Linux 7 package libssh version 0.5.3-alt1

Nov. 21, 2012 Sergey V Turchin 0.5.3-alt1 - new version - security fixes: CVE-2012-4559, CVE-2012-4560, CVE-2012-4561...

CVE-2011-4561

Phorum 5.2.18 is vulnerable to a cross-site scripting (XSS) flaw in admin.php, exploitable by remote attackers via PATH_INFO to admin/index.php. The issue affects Phorum’s admin interface and can allow injection of arbitrary web script or HTML. Multiple sources (NVD/OpenVAS) confirm the vulnerabi...

CVE-2009-4561

Multiple SQL injection vulnerabilities in Admin/index.php in WebLeague 2.2.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-4561

CVE-2009-4561 affects WebLeague 2.2.0 (Admin/index.php). The vulnerability consists of multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters when magic_quotes_gpc is disabled. The NVD entry documents a CVSS v2 b...

CVE-2009-4561

creationtimestamp| type| source ---|---|--- 2009-07-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9165...

HP-UX PHSS_38783 : HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Unauthorized Access to Data (HPSBMA02406 SSRT080100 rev.2)

s700800 11.X OV NNM7.53 IA-64 Intermediate Patch 21 : Potential security vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM. The vulnerabilities could be exploited remotely to allow execution of arbitrary code or unauthorized access to data. %NASLMINLEVEL 70300 C...