Kallithea 0.2.9 - 'came_from' HTTP Response Splitting

Kallithea 0.2.9 camefrom HTTP Response Splitting Vulnerability Vendor: Kallithea Product web page: https://www.kallithea-scm.org Version affected: 0.2.9 and 0.2.2 Summary: Kallithea, a member project of Software Freedom Conservancy, is a GPLv3'd, Free Software source code management system that...

FreeBSD : moodle -- multiple vulnerabilities (c2fcbec2-5daa-11e5-9909-002590263bf5)

Moodle Release Notes report : MSA-15-0030: Students can re-attempt answering questions in the lesson CVE-2015-5264 MSA-15-0031: Teacher in forum can still post to 'all participants' and groups they are not members of CVE-2015-5272 - 2.7.10 only MSA-15-0032: Users can delete files uploaded by othe...

CVE-2014-5267

modules/openid/xrds.inc in Drupal 6.x before 6.33 and 7.x before 7.31 allows remote attackers to have unspecified impact via a crafted DOCTYPE declaration in an XRDS document...

CVE-2014-5267

CVE-2014-5267 affects Drupal 6.x (before 6.33) and Drupal 7.x (before 7.31). The vulnerability is in modules/openid/xrds.inc where a crafted DOCTYPE declaration in an XRDS document can enable a remote attacker to cause unspecified impact. The root cause is an XRDS DOCTYPE handling weakness in the...

Fedora 20 : drupal7-7.31-1.fc20 (2014-9278)

Update to upstream 7.31 release for SA-CORE-2014-004 This is a bugfix release. For complete details, refer to: https://www.drupal.org/drupal-7.30-release-notes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora Update for drupal7 FEDORA-2014-9278

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2999-1 : drupal7 - security update

A denial of service vulnerability was discovered in Drupal, a fully-featured content management framework. A remote attacker could exploit this flaw to cause CPU and memory exhaustion and the site's database to reach the maximum number of open connections, leading to the site becoming unavailable...

SA-CORE-2014-004 - Drupal core - Denial of service

Drupal 6 and Drupal 7 include an XML-RPC endpoint which is publicly available xmlrpc.php. The PHP XML parser used by this XML-RPC endpoint is vulnerable to an XML entity expansion attack and other related XML payload attacks which can cause CPU and memory exhaustion and the site's database to rea...

openSUSE Security Update : flash-player (openSUSE-SU-2013:0370-1)

Flash Player was updated to 11.2.202.243 - CVE-2012-5248, CVE-2012-5249, CVE-2012-5250, CVE-2012-5251, CVE-2012-5252, CVE-2012-5253, CVE-2012-5254, CVE-2012-5255, CVE-2012-5256, CVE-2012-5257, CVE-2012-5258, CVE-2012-5259, CVE-2012-5260, CVE-2012-5261, CVE-2012-5262, CVE-2012-5263, CVE-2012-5264,...

CVE-2011-5267

Multiple cross-site scripting XSS vulnerabilities in spell-check-savedicts.php in the SpellChecker module in Xinha, as used in WikiWig 5.01 and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the 1 topdict or 2 torlist parameter. NOTE: this issue might b...

CVE-2011-5267

CVE-2011-5267: Multiple XSS vulnerabilities in the SpellChecker module (spell-check-savedicts.php) of Xinha, used in WikiWig 5.01 and possibly other products. Attacks could inject script/HTML via (1) to_p_dict or (2) to_r_list parameters. The issue may be related to the htmlarea plugin and is lin...

Adobe Air Multiple Vulnerabilities - October 12 (Windows)

This host is installed with Adobe Air and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeairmultvulnoct12win.nasl 8176 2017-12-19 12:50:00Z cfischer $ Adobe Air Multiple Vulnerabilities - October 12 Windows Authors: Thanga Prakash S Copyright: Copyright c 2013...

SuSE 11.2 Security Update : flash-player (SAT Patch Number 6937)

flash player was updated to version 11.2.202.243, fixing a lot of security issues : CVE-2012-5248 / CVE-2012-5249 / CVE-2012-5250 / CVE-2012-5251 / CVE-2012-5252 / CVE-2012-5253 / CVE-2012-5254 / CVE-2012-5255 / CVE-2012-5256 / CVE-2012-5257 / CVE-2012-5258 / CVE-2012-5259 / CVE-2012-5260 /...

Adobe Flash Player JPEG Parsing Buffer Overflow (APSB22-12; CVE-2012-5267)

A remote code execution vulnerability has been reported in Adobe Flash Player...

SuSE Update for flash-player openSUSE-SU-2012:1324-1 (flash-player)

Check for the Version of flash-player OpenVAS Vulnerability Test $Id: gbsuse201213241.nasl 8336 2018-01-09 07:01:48Z teissa $ SuSE Update for flash-player openSUSE-SU-2012:1324-1 flash-player Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

openSUSE: Security Advisory for flash-player (openSUSE-SU-2012:1324-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Flash Player for Mac <= 10.3.183.23 / 11.4.402.265 Multiple Vulnerabilities (APSB12-22)

According to its version, the instance of Flash Player installed on the remote Mac OS X host is 11.x equal to or earlier than 11.4.402.264, or 10.x equal to or earlier than 10.3.183.23. It is, therefore, potentially affected by multiple vulnerabilities : - Several unspecified issues exist that ca...

Adobe AIR for Mac 3.x <= 3.4.0.2540 Multiple Vulnerabilities (APSB12-22)

According to its version, the instance of Adobe AIR on the remote Mac OS X host is 3.4.0.2540 or earlier. It is, therefore, reportedly affected by multiple vulnerabilities : - Several unspecified issues exist that can lead to buffer overflows and arbitrary code execution. CVE-2012-5248,...

Flash Player <= 10.3.183.23 / 11.4.402.278 Multiple Vulnerabilities (APSB12-22)

According to its version, the instance of Flash Player installed on the remote Windows host is 11.x equal to or earlier than 11.4.402.278, or 10.x equal to or earlier than 10.3.183.23. It is, therefore, potentially affected by multiple vulnerabilities : - Several unspecified issues exist that can...

CVE-2012-5267

Adobe Flash Player (and AIR) is affected by CVE-2012-5267 as part of a broader set of memory corruption vulnerabilities disclosed in 2012. Public sources (including OpenVAS/Gentoo/SUSE advisories) reference Flash memory-corruption issues exploitable via unspecified vectors and note that updates t...