About the security content of tvOS 10.0.1

About the security content of tvOS 10.0.1 This document describes the security content of tvOS 10.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

CVE-2015-4660

The CVE-2015-4660 entry concerns Enhanced SQL Portal 5.0.7961, a web-based MySQL administration tool. The vulnerability is an XSS in iframe.php, exploitable via the id parameter, allowing remote attackers to inject arbitrary script/HTML. The issue is documented across multiple sources, including ...

Nodejs js-yaml load() Code Exec

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

CVE-2013-4660

creationtimestamp| type| source ---|---|--- 2013-09-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28655 2017-10-24 18:33:37+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-xxvw-45rp-3mj2 2018-05-29 15:50:33+00:00| seen|...

Nodejs js-yaml load() Code Execution

This module can be used to abuse node.js applications that parse user-supplied YAML input using the load function from the 'js-yaml' package 'Nodejs js-yaml load Code Execution', 'Description' = %q This module can be used to abuse node.js applications that parse user-supplied YAML input using the...

CVE-2013-4660

The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to execute arbitrary code via a crafted string that triggers an eval operation...

CVE-2013-4660

CVE-2013-4660 affects the JS-YAML package for Node.js prior to 2.0.5. The vulnerability arises when parsing YAML input with the unsafe !!js/function tag, which can trigger an eval and allow remote code execution. IBM X-Force/other sources confirm a high-severity impact (code execution via crafted...

CVE-2012-4660

The issue CVE-2012-4660 affects Cisco ASA 5500 series (and ASASM in Catalyst 6500) SIP inspection engine. Versions 8.2 before 8.2(5.17), 8.3 before 8.3(2.28), 8.4 before 8.4(2.13), 8.5 before 8.5(1.4), and 8.6 before 8.6(1.5) are vulnerable to remote, unauthenticated denial of service (device rel...

CVE-2009-4660

Stack-based buffer overflow in the AntServer Module AntServer.exe in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a long GET request to TCP port 6660...

CVE-2009-4660

CVE-2009-4660: BigAnt IM Server 2.50 has a stack-based buffer overflow in the AntServer.exe module (AntServer) that lets a remote attacker execute arbitrary code by sending a long GET request to TCP port 6660. Affected: BigAnt IM Server 2.50 (and related references note the BigAnt server family)....

BigAnt IM Server HTTP GET Request Buffer Overflow Vulnerability - Active Check

BigAnt IM Server is prone to a remote buffer overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

CVE-2009-4660

creationtimestamp| type| source ---|---|--- 2009-09-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9673 2009-09-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9690 2018-05-29 15:50:33+00:00| seen|...

Ubuntu Update for php5 regression USN-549-2

Ubuntu Update for Linux kernel vulnerabilities USN-549-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN5492.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for php5 regression USN-549-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net...

Ubuntu: Security Advisory (USN-549-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-4660

SQL injection vulnerability in the M1 Intern m1intern 1.0.0 extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-4660

CVE-2008-4660 describes an SQL injection vulnerability in the TYPO3 M1 Intern (m1_intern) 1.0.0 extension, enabling remote attackers to execute arbitrary SQL via unspecified vectors. The NVD entry lists a high base impact (confidentiality, integrity, availability partial) with a network attack ve...

Gentoo Security Advisory GLSA 200710-02 (php)

The remote host is missing updates announced in advisory GLSA 200710-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: php5

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian: Security Advisory (DSA-1444-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1444-2] New php5 packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1444-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 23, 2008 http://www.debian.org/security/faq -...