96 matches found
SuSE 11.1 Security Update : PHP5 (SAT Patch Number 4133)
PHP5 was updated to fix several security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000 exit0;...
SuSE 10 Security Update : PHP5 (ZYPP Patch Number 7375)
php5 was updated to fix several security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid53285; scriptversion"1.7";...
CVE-2010-4698
Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4 allows context-dependent attackers to cause a denial of service application crash via a large number of anti-aliasing steps in an argument to the imagepstext function...
CVE-2010-4698
The CVE-2010-4698 entry affects PHP’s GD extension. It describes a stack-based buffer overflow in the GD code path when processing images via imagepstext, triggered by a large number of anti-aliasing steps in an argument. Affected versions are PHP before 5.2.15 and 5.3.x before 5.3.4. Impact per ...
CVE-2010-4698
Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4 allows context-dependent attackers to cause a denial of service application crash via a large number of anti-aliasing steps in an argument to the imagepstext function...
PHP 5.2 < 5.2.15 Multiple Vulnerabilities
According to its banner, the version of PHP 5.2 installed on the remote host is older than 5.2.15. Such versions may be affected by several security issues : - A crash in the zip extract method. - A possible double free exists in the imap extension. CVE-2010-4150 - An unspecified flaw exists in...
CVE-2009-4698
CVE-2009-4698 affects the Xoops Celepar Qas/Quas module for XOOPS Celepar. The NVD/OpenVAS entries describe multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the parameters: codigo in aviso.php and imprimir.php, and cod_categoria in categoria...
Gentoo Security Advisory GLSA 200811-01 (opera)
The remote host is missing updates announced in advisory GLSA 200811-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200811-01 (opera)
The remote host is missing updates announced in advisory GLSA 200811-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-4698
CVE-2008-4698 affects Opera before 9.61, where the browser does not properly block scripts during preview of a news feed, enabling a remote attacker to create arbitrary new feed subscriptions and read contents of feeds. Public sources in the connected docs describe Opera as vulnerable to inline s...
openSUSE 10 Security Update : tomboy (tomboy-4698)
The tomboy mediaplayer used LDLIBRARYPATH unsafely by allowing empty LDLIBRARYPATH components. This would enable the player to load its shared libraries of the current directory which might contain user-supplied shared libraries, potentially supplied from the network by an attacker. CVE-2005-4790...
CVE-2007-4698
CVE-2007-4698 : Apple Safari 3 before Beta Update 3.0.4 (Windows) and Mac OS X 10.4–10.4.10 is vulnerable to cross-site scripting by causing JavaScript events to be associated with the wrong frame, enabling script execution in another site context. The issue affects Safari/WebKit components as de...
Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)
The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.11 or a version of Mac OS X 10.3 which does not have Security Update 2007-008 applied. This update contains several security fixes for the following programs : - Flash Player Plugin - AppleRAID - BIND - bzip2 -...
CVE-2005-4698
The provided records describe a Cross-site scripting (XSS) vulnerability in TellMe 1.2 and earlier, exploitable via the q_IP (IP) or q_Host (HOST) parameters. The root cause is insufficient input sanitization in these parameters, enabling injection of arbitrary web script/HTML. Impact is limited ...
