PHP < 5.4.40, 5.5.x < 5.5.24, 5.6.x < 5.6.8 Multiple Vulnerabilities - Linux

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

PHP < 5.4.40, 5.5.x < 5.5.24, 5.6.x < 5.6.8 Multiple Vulnerabilities - Windows

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

CVE-2014-4605

This CVE affects the ZdStatistics (zdstats) WordPress plugin, specifically versions 2.0.1 and earlier. The vulnerability is an XSS in cal/test.php caused by the lang parameter, allowing remote attackers to inject arbitrary web script or HTML. Impact is partial integrity risk of the affected pages...

Linux Kernel < 2.6.14.6 procfs Kernel Memory Disclosure Exploit

/ cve-2005-4605.c Linux Kernel 2.6.14.6 procfs Kernel Memory Disclosure Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4605 The procfs code procmisc.c in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers ...

Websense Email Security 信息泄露漏洞(CVE-2012-4605)

BUGTRAQ ID: 59313 CVECAN ID: CVE-2012-4605 Websense Email Security是综合的邮件安全软件，对邮件和Web 2.0的混合威胁提供防护。 Websense Email Security 6.1-7.3版本内的SMTP组件的默认配置，在"SurfControl plc\SuperScout Email Filter\SMTP"注册表项中启用了弱SSL密码，远程攻击者通过嗅探网络并对加密会话数据进行暴力攻击，可获取敏感信息。 0 Websense Web Security 7.2 Websense Web Security 7.1...

RHEL 5 : jbossas (RHSA-2012:1025)

Updated jbossas packages that fix one security issue are now available for JBoss Enterprise Application Platform 4.3.0 CP10 for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVS...

CVE-2011-4605

Summary: CVE-2011-4605 affects JBoss/JBossAS JNDI-related services. The vulnerability stems from insufficient access restrictions in the JNDI service, HA-JNDI service, and the HAJNDIFactory invoker servlet, allowing remote attackers to write to the JNDI tree. This could enable adding, deleting, o...

CVE-2012-4605

The Websense Email Security SMTP component (versions 6.1–7.3) defaults to enabling weak SSL ciphers in the SurfControl plc\SuperScout Email Filter\SMTP registry key, enabling potential information disclosure via network sniffing and brute-force of encrypted sessions. Websense provides a patch/hot...

JBoss Enterprise Application Platform安全限制绕过漏洞

BUGTRAQ ID: 54644 CVE ID: CVE-2011-4605 JBoss企业应用平台（JBoss Enterprise Application Platform，EAP）是J2EE应用的中间件平台。 JBoss Enterprise Portal Platform 4.3 CP07及其他版本在实现上存在安全限制绕过漏洞，攻击者可利用此漏洞绕过某些安全限制并执行非法操作。 0 RedHat JBoss Enterprise Portal Platform 4.3 CP07 厂商补丁： RedHat ------...

Important: Red Hat Security Advisory: jbossas-web and jboss-naming security update

Updated jbossas-web and jboss-naming packages that fix two security issues are now available for JBoss Enterprise Web Platform 5.1.2 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...

Important: Red Hat Security Advisory: jbossas and jboss-naming security update

Updated jbossas and jboss-naming packages that fix two security issues are now available for JBoss Enterprise Application Platform 5.1.2 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability...

Important: Red Hat Security Advisory: jbossas security update

An update for JBoss Enterprise Application Platform 4.3.0 CP10 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, whic...

Important: Red Hat Security Advisory: jbossas security update

An update for JBoss Enterprise Application Platform 5.1.2 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which giv...

CVE-2010-4605

The affected product is IBM Tivoli Storage Manager (TSM) backup-archive client. Versions affected: 5.3.x prior to 5.3.6.10, 5.4.x prior to 5.4.3.4, 5.5.x prior to 5.5.3, 6.1.x prior to 6.1.4, and 6.2.x prior to 6.2.2 on Unix/Linux. Root cause and vectors are not detailed in the provided documents...

Debian: Security Advisory (DSA-2034-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2034-1 : phpmyadmin - several vulnerabilities

Several vulnerabilities have been discovered in phpMyAdmin, a tool to administer MySQL over the web. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-7251 phpMyAdmin may create a temporary directory, if the configured directory does not exist yet, wi...

[SECURITY] [DSA 2034-1] New phpmyadmin packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2034-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 17, 2010 http://www.debian.org/security/faq -...

phpMyAdmin setup.php unserialize() Arbitrary PHP Code Execution (PMASA-2010-3)

The setup script included with the version of phpMyAdmin installed on the remote host does not properly sanitize user-supplied input before using it to generate a config file for the application. Submitting a specially crafted POST request can result in arbitrary PHP code injection. A remote...

phpMyAdmin unserialize()调用跨站请求伪造漏洞

BUGTRAQ ID: 37861 CVECAN ID: CVE-2009-4605 phpMyAdmin是用PHP编写的工具，用于通过WEB管理MySQL。 phpMyAdmin使用了传送给scripts/setup.php脚本的configuration和v0输入参数来调用unserialize函数，远程攻击者可以通过提交恶意请求执行跨站请求伪造攻击，以其他用户的权限执行任意指令。 phpMyAdmin 2.11.x 厂商补丁： phpMyAdmin ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2009-4605

CVE-2009-4605 concerns phpMyAdmin 2.11.x up to 2.11.9/2.11.10 setup.php where untrusted data is fed into unserialize, enabling CSRF and, in some reports, remote code execution in the web-server context. The vulnerability affects the setup script that processes (1) configuration and (2) v[0] param...