Fedora Update for mxml FEDORA-2016-44821f9576

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2007-0542)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-4570

CVE-2014-4570 affects the VideoWhisper Video Presentation WordPress plugin (pre-3.31). Vulnerability: cross-site scripting (XSS) allowing remote attackers to inject arbitrary script/HTML via the room_name parameter to c_login.php or the room parameter to index.php in vp/. Impact: XSS with network...

CVE-2013-4570

The CVE-2013-4570 issue affects the Scribuntu extension for MediaWiki via the php-luasandbox component: a vulnerability in zend_inline_hash_func can trigger a NULL pointer dereference and crash (DoS) when converting Lua data structures to PHP, demonstrated by input like { [{}] = 1 }. Affected ver...

Scientific Linux Security Update : mcstrans on SL5.x i386/x86_64

An algorithmic complexity weakness was found in the way the mcstrans daemon handled ranges of compartments in sensitivity labels. A local user could trigger this flaw causing mctransd to temporarily stop responding to other requests; a partial denial of service. CVE-2007-4570 This update also fix...

Gentoo Security Advisory GLSA 201110-03 (bugzilla)

The remote host is missing updates announced in advisory GLSA 201110-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2011-4570

SQL injection vulnerability in the Time Returns comtimereturns component 2.0 and possibly earlier versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a timereturns action to index.php...

CVE-2011-4570

CVE-2011-4570 affects Joomla! Time Returns (com_timereturns) component 2.0 and potentially earlier versions. The vulnerability is an SQL injection in the timereturns action (index.php) via the id parameter, enabling remote attackers to execute arbitrary SQL commands. Exploitation/ID references ex...

CVE-2011-4570

creationtimestamp| type| source ---|---|--- 2011-10-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17944...

Cross site scripting

Cross-site scripting XSS vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbitrary web script or HTML via a field that is added to a menu, related to documentation that specifies this field as a text field rather than an HTML field, a...

CVE-2010-4570

CVE-2010-4570 is an XSS vulnerability in Bugzilla’s duplicate-detection feature (Bugzilla 3.7.1/3.7.2/3.7.3/4.0rc1) where the summary field can be exploited via the DataTable widget in YUI to inject arbitrary script/HTML. Connected documents confirm the CVE is referenced among Bugzilla-related ad...

Rocket Software UniData/UniVerse unirpc32.dll Uni RPC Service Packet Header Remote Overflow

According to its reported version, the Rocket Software UniVerse or UniData install on the remote Windows host is affected by a buffer overflow vulnerability. The application fails to properly validate a size value in a RPC packet header before using it to determine the number of bytes to receive...

CVE-2009-4570

PhpShop 0.8.1 is affected by CVE-2009-4570, a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script via the order_id parameter in the order_print action to the default URI. Severity: CVSS v2 base score 4.3 (Medium). Related sources (NVD/OpenVAS) describe...

CVE-2009-4570

Cross-site scripting XSS vulnerability in PhpShop 0.8.1 allows remote attackers to inject arbitrary web script or HTML via the orderid parameter in an order/orderprint action to the default URI...

CVE-2008-4570

SQL injection vulnerability in index.php in Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-4570

creationtimestamp| type| source ---|---|--- 2008-10-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6736...

Gentoo Security Advisory GLSA 200610-04 (seamonkey)

The remote host is missing updates announced in advisory GLSA 200610-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1192-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-4570

CVE-2007-4570 concerns an algorithmic complexity vulnerability in the MCS translation daemon (mcstrans) version 0.2.3 that allows a local attacker to cause a denial of service by targeting a large range of compartments in sensitivity labels. Public documents from various advisories (ELSA-2007-054...

RHEL 5 : mcstrans (RHSA-2007:0542)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2007:0542 advisory. mcstrans is the translation daemon used on SELinux machines to translate program context into human readable form. An algorithmic complexity weakness...