[SECURITY] [DSA 1919-1] New smarty packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1919-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 25, 2009 http://www.debian.org/security/faq -...

Solaris Update for rpc.nisd 140918-02

Check for the Version of rpc.nisd OpenVAS Vulnerability Test Solaris Update for rpc.nisd 140918-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

SLES10: Security update for strongswan

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: strongswan strongswan-doc More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

Mandrake Security Advisory MDVSA-2009:260 (imagemagick)

The remote host is missing an update to imagemagick announced via advisory MDVSA-2009:260. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:257 (qemu)

The remote host is missing an update to qemu announced via advisory MDVSA-2009:257. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:256 (dbus)

The remote host is missing an update to dbus announced via advisory MDVSA-2009:256. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:262 (netpbm)

The remote host is missing an update to netpbm announced via advisory MDVSA-2009:262. OpenVAS Vulnerability Test $Id: mdksa2009262.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:262 netpbm Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Microsoft Security Bulletin MS09-053 - Important Vulnerabilities in FTP Service for Internet Information Services Could Allow Remote Code Execution (975254)

Microsoft Security Bulletin MS09-053 - Important Vulnerabilities in FTP Service for Internet Information Services Could Allow Remote Code Execution 975254 Published: October 13, 2009 Version: 1.0 General Information Executive Summary This security update resolves two publicly disclosed...

SLES10: Security update for Tomcat 5

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: tomcat5 tomcat5-admin-webapps tomcat5-webapps More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the...

[SECURITY] [DSA 1905-1] New python-django packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA-1905-1 [email protected] http://www.debian.org/security/ Nico Golde October 10th, 2009 http://www.debian.org/security/faq -...

SLES9: Security update for squid

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: squid For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015636 within the SuSE...

SLES9: Security update for net-snmp

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: net-snmp For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5014590 within the Su...

HP LaserJet Printers - Multiple Persistent Cross-Site Scripting Vulnerabilities

Digital Security Research Group DSecRG Advisory DSECRG-09-048 http://dsecrg.ru/pages/vul/show.php?id=148 Application: HP LaserJet printer web interface Vulnerable: HP LaserJet 2200, 4350, 4600, 5500, and many others Vendor URL: http://www.hp.com/ Bug: Multiple Stored XSS Vulnerabilities Exploits:...

Mandrake Security Advisory MDVSA-2009:249 (newt)

The remote host is missing an update to newt announced via advisory MDVSA-2009:249. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:242-1 (dovecot)

The remote host is missing an update to dovecot announced via advisory MDVSA-2009:242-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandrake Security Advisory MDVSA-2009:242-1 (dovecot)

The remote host is missing an update to dovecot announced via advisory MDVSA-2009:242-1. OpenVAS Vulnerability Test $Id: mdksa20092421.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:242-1 dovecot Authors: Thomas Reinke Copyright: Copyright c 2009...

CVE-2009-3349

SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a cat action to the home component...

Cross site scripting

Cross-site scripting XSS vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a cat action to the home component...

Sql injection

SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a cat action to the home component...

CVE-2009-3348

CVE-2009-3348 is an XSS vulnerability affecting Datavore Gyro 5.0. The issue arises from the cid parameter in a cat action to the home component , allowing remote attackers to inject arbitrary web script or HTML. The connected documents confirm the vulnerability description but do not provide exp...