Fedora Update for php-pear-Auth-OpenID FEDORA-2013-15258

Check for the Version of php-pear-Auth-OpenID OpenVAS Vulnerability Test Fedora Update for php-pear-Auth-OpenID FEDORA-2013-15258 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora 18 : php-pear-Auth-OpenID-2.2.2-7.fc18 (2013-15253)

Fix for CVE-2013-4701 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora Update for php-pear-Auth-OpenID FEDORA-2013-15253

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for php-pear-Auth-OpenID FEDORA-2013-15258

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-4701

Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via XRDS data containing an external entity declaration in conjunction with an entity...

CVE-2013-4701

The CVE-2013-4701 issue affects the PHP OpenID Library up to version 2.2.2 and earlier, where Auth/Yadis/XML.php processes XRDS data containing an external entity declaration. This XXE flaw enables a remote attacker to read arbitrary files, make HTTP requests to internal/intranet hosts, or trigge...

CVE-2012-4701

Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently execute arbitrary code, by leveraging 1 valid credentials or 2 the guest feature...

CVE-2012-4701

CVE-2012-4701 describes a directory traversal in Tridium Niagara AX (versions 3.5–3.7) that lets a remote attacker read sensitive files and potentially execute arbitrary code. The vulnerability can be triggered when valid credentials are present or when the guest feature is enabled, enabling unau...

CVE-2011-4701

The CVE-2011-4701 entry concerns the CallConfirm (jp.gr.java_conf.ofnhwx.callconfirm) Android app (version 2.0.0). The vulnerability is a data-protection flaw that enables remote attackers to read or modify allow/block lists via a crafted application. CVSS metrics (NVD) indicate network access wi...

Microsoft Windows Fax Cover Page Editor Double Free Memory Corruption Vulnerability

Added: 02/14/2011 CVE: CVE-2010-4701 BID: 45942 Background The Microsoft Windows Fax Service allows a Windows system to act as a fax server. One of the tools within the Windows Fax Service suite is the Fax Cover Page Editor fxscover.exe, which allows users to create their own customized cover...

Microsoft Windows Fax Cover Page Editor BOF Vulnerabilities

Fax Cover Page Editor is prone to multiple buffer overflow vulnerabilities. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.902408. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrig...

CVE-2010-4701

The CVE-2010-4701 entry describes a heap-based buffer overflow in the CDrawPoly::Serialize function of fxscover.exe, part of Windows Fax Services Cover Page Editor, affecting Windows XP SP3, Windows Server 2003 R2, and Windows 7. An attacker could trigger arbitrary code execution by processing a ...

Microsoft Windows Fax Services Cover Page Editor Heap Buffer Overflow (CVE-2010-3974; CVE-2010-4701)

A heap buffer overflow vulnerability has been discovered in Microsoft Windows Fax Services. The Windows Fax Service is a component that allows a Windows system to act as a Fax server. One of the tools within this fax suite is the Fax Console, which allows a user to monitor the sending and receivi...

CVE-2010-4701

creationtimestamp| type| source ---|---|--- 2010-12-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15839...

CVE-2009-4701

The CVE-2009-4701 entry concerns the Myth download (myth_download) extension for TYPO3, version 0.1.0. The issue is a SQL injection vulnerability that could allow remote attackers to execute arbitrary SQL commands via unspecified vectors. The connected Red Hat, NVD, CVE lists, and other sources c...

CVE-2009-0368

OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a 1 low level APDU command or 2 debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program...

CVE-2008-4701

CVE-2008-4701 describes a SQL injection in Libera CMS 1.12 under the condition that magic_quotes_gpc is disabled. The vulnerable element is the libera_staff_user cookie parameter, representing a different attack vector than CVE-2008-4700. The connected documents provide the same product/version c...

CVE-2008-4701

SQL injection vulnerability in admin.php in Libera CMS 1.12, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffuser cookie parameter, a different vector than CVE-2008-4700. NOTE: the provenance of this information is unknown; the details...

CVE-2008-4701

creationtimestamp| type| source ---|---|--- 2008-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6416...

CVE-2007-4701

CVE-2007-4701 affects WebKit/Safari on Apple Mac OS X 10.4–10.4.10. When previewing a PDF, temporary files are not created securely, allowing local users to read the contents of the PDF. Mitigation via Mac OS X 10.4.11 Security Update (MacOSXUpdCombo10.4.11 for Intel/PPC) is available from Apple....