CVE-2014-5017

SQL injection vulnerability in CPDB in application/controllers/admin/participantsaction.php in LimeSurvey 2.05+ Build 140618 allows remote attackers to execute arbitrary SQL commands via the sidx parameter in a JSON request to admin/participants/sa/getParticipantsjson, related to a search paramet...

CVE-2014-5017

SQL injection vulnerability in CPDB in application/controllers/admin/participantsaction.php in LimeSurvey 2.05+ Build 140618 allows remote attackers to execute arbitrary SQL commands via the sidx parameter in a JSON request to admin/participants/sa/getParticipantsjson, related to a search paramet...

CVE-2014-5017

The CVE-2014-5017 entry describes an SQL injection in LimeSurvey 2.05+ Build 140618 (CPDB) affecting admin/participants/sa/getParticipants_json via the sidx parameter in a JSON request, related to a search parameter. The root cause is improper sanitization of the sidx value in CPDB’s code path (a...

Symantec Web Gateway < 5.2.1 Multiple Vulnerabilities (SYM14-010)

According to its self-reported version number, the remote web server is hosting a version of Symantec Web Gateway prior to version 5.2.1. It is, therefore, affected by the following vulnerabilities : - A remote command execution flaw exists with the 'SNMPConfig.php' where user input is not proper...

CVE-2013-5017

SNMPConfig.php in the management console in Symantec Web Gateway SWG before 5.2.1 allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2013-5017

Symantec Web Gateway (SWG) prior to 5.2.1 is affected by CVE-2013-5017 due to a command injection vulnerability in SNMPConfig.php that can lead to remote code execution. The issue is described across multiple sources as affecting the management console and enabling arbitrary command execution, po...

Symantec Web Gateway Security Issues

SUMMARY Symantec Web Gateway SWG 5.2 Appliance management console is susceptible to security issues. Successful exploitation could result in unauthorized command execution on or access to the management console. There is also potential for unauthorized backend database manipulation. AFFECTED...

CVE-2012-5017

CVE-2012-5017 affects Cisco IOS before 15.1(1)SY1. The issue arises in the VPN/IKEv2 processing where remote authenticated users can trigger a denial of service (device reload) by establishing a VPN session and sending malformed IKEv2 packets. Connected documents confirm the vulnerable condition,...

Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey. CVE-2008-0017, CVE-2008-5013, CVE-2008-5014, CVE-2008-5016, CVE-2008-5017,...

Scientific Linux Security Update : thunderbird on SL4.x, SL5.x i386/x86_64

Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code as the user running Thunderbird. CVE-2008-5014, CVE-2008-5016, CVE-2008-5017, CVE-2008-5018,...

CVE-2010-5017

The CVE-2010-5017 entry describes an SQL injection vulnerability in stats.php of Elite Gaming Ladders 3.0, exploitable via the account parameter. The underlying flaw enables remote attackers to execute arbitrary SQL commands, with impact described as partial confidentiality, integrity, and availa...

Mozilla Firefox Security Bypass Vulnerability (Windows)

The host is installed with Mozilla Firefox and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxsecuritybypassvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ Mozilla Firefox Security Bypass Vulnerability Windows Authors: Sooraj KS Copyright: Copyright c 2010...

CVE-2009-5017

Mozilla Firefox before 3.6 Beta 3 does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting XSS protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210...

CVE-2009-5017

Technical details about CVE-2009-5017 are not provided in the given documents. Monitor for updates.

CentOS 4 / 5 : firefox (CESA-2008:0978)

An updated firefox package that fixes various security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the...

SLES10: Security update for MozillaFirefox

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: MozillaFirefox MozillaFirefox-translations More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for MozillaFirefox

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: MozillaFirefox MozillaFirefox-translations More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the...

SLES10: Security update for gecko-sdk and mozilla-xulrunner

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla-xulrunner More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

openSUSE Security Update : mozilla-xulrunner181 (mozilla-xulrunner181-329)

This update backports security fixes to the Mozilla XULRunner engine. It fixes following security issues : CVE-2008-0017 / MFSA 2008-54: The http-index-format MIME type parser nsDirIndexParser in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-333)

This update brings the Mozilla Thunderbird E-Mail program to version 2.0.0.18. It fixes following security problems : CVE-2008-5012 / MFSA 2008-48: Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when...