APPLE-SA-2014-04-22-1 Security Update 2014-002

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-04-22-1 Security Update 2014-002 Security Update 2014-002 is now available and addresses the following: CFNetwork HTTPProtocol Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.2...

couponPHP CMS 1.0 - Multiple Persistent Cross-Site Scripting SQL Injections

couponPHP CMS 1.0 - Multiple Persistent Cross-Site Scripting SQL Injections couponPHP CMS 1.0 Multiple Stored XSS and SQL Injection Vulnerabilities Vendor: couponPHP Product web page: http://www.couponphp.com Affected version: 1.0 Summary: couponPHP is a revolutionary content management system fo...

couponPHP CMS 1.0 Cross Site Scripting / SQL Injection

couponPHP CMS version 1.0 suffers from cross site scripting and remote SQL injection vulnerabilities. couponPHP CMS 1.0 Multiple Stored XSS and SQL Injection Vulnerabilities Vendor: couponPHP Product web page: http://www.couponphp.com Affected version: 1.0 Summary: couponPHP is a revolutionary...

CVE-2013-5170

CVE-2013-5170 affects Apple Mac OS X prior to 10.9, due to a buffer underflow in CoreGraphics when processing PDFs. This can allow remote attackers to execute arbitrary code or cause an application crash by delivering a crafted PDF. No remediation details are provided in the supplied documents. T...

Oracle Linux 4 : nss_ldap (ELSA-2006-0719)

From Red Hat Security Advisory 2006:0719 : Updated nssldap packages that fix a security flaw are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. nssldap is a set of C library extensions that allow...

CVE-2012-5170

Pebble (open-source weblog system) is vulnerable to an open redirect in versions prior to 2.6.4. The flaw allows remote attackers to redirect users to arbitrary external websites, enabling phishing attacks via unspecified vectors. Affected product: Pebble; affected versions: before 2.6.4. Root ca...

CVE-2011-5170

CVE-2011-5170 is a stack-based buffer overflow in Castillo Bueno Systems’ CCMPlayer 1.5 triggered by a long track name in an M3U playlist, enabling remote code execution. The connected documents confirm the vulnerability details and show public exploit activity, including a Metasploit module for ...

CVE-2010-5170

CVE-2010-5170 affects Online Solutions Security Suite 1.5.14905.0 on Windows XP. A race condition during hook-handler execution allows local users to bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler but not by signature-based detection (KHOBE/argument-swi...

CCMPlayer 1.5 m3u Playlist Stack Based Buffer Overflow

This module exploits a stack based buffer overflow in CCMPlayer 1.5. Opening a m3u playlist with a long track name, a SEH exception record can be overwritten with parts of the controllable buffer. SEH execution is triggered after an invalid read of an injectable address, thus allowing arbitrary...

CVE-2011-5170

creationtimestamp| type| source ---|---|--- 2011-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18178 2011-12-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18195 2018-05-29 15:50:33+00:00| seen|...

SLES9: Security update for pam_ldap

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: pamldap For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5017445 within the SuS...

SLES9: Security update for pam_ldap

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: pamldap For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5017445 within the SuS...

SuSE9 Security Update : pam_ldap (YOU Patch Number 11259)

pamldap in nssldap does not return an error condition when an LDAP directory server responds with a PasswordPolicyResponse control response, which causes the pamauthenticate function to return a success code even if authentication has failed, as originally reported for xscreensaver. CVE-2006-5170...

Unfixed XSS vulnerability at vectors.usc.edu

Security researcher nopic01, has submitted on 22/07/2009 a cross-site-scripting XSS vulnerability affecting vectors.usc.edu, which at the time of submission ranked 5170 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2009. It is currently...

CVE-2008-5170

The CVE-2008-5170 entry concerns Cheats Complete Website 1.1.1 and identifies a vulnerability in the item.php component. The issue is a SQL injection via the itemid parameter , which allows remote attackers to execute arbitrary SQL commands. The description explicitly states this as a remote comm...

Gentoo Security Advisory GLSA 200612-19 (pam_ldap)

The remote host is missing updates announced in advisory GLSA 200612-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-5170

creationtimestamp| type| source ---|---|--- 2008-06-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5950...

Debian: Security Advisory (DSA-1203-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : pam_ldap (ZYPP Patch Number 2196)

pamldap in nssldap does not return an error condition when an LDAP directory server responds with a PasswordPolicyResponse control response, which causes the pamauthenticate function to return a success code even if authentication has failed, as originally reported for xscreensaver. CVE-2006-5170...

openSUSE 10 Security Update : pam_ldap (pam_ldap-2194)

pamldap did not return an error conditions correctly when an LDAP directory server responded with a PasswordPolicyResponse control response, which caused the pamauthenticate function to return a success code even if authentication has failed. CVE-2006-5170 %NASLMINLEVEL 70300 C Tenable Network...