38 matches found
[ASA-201702-11] kdenetwork-kopete: content spoofing
Arch Linux Security Advisory ASA-201702-11 ========================================== Severity: Medium Date : 2017-02-12 CVE-ID : CVE-2017-5593 Package : kdenetwork-kopete Type : content spoofing Remote : Yes Link : https://security.archlinux.org/AVG-173 Summary ======= The package...
SUSE SLED11 / SLES11 Security Update : wireshark (SUSE-SU-2013:0238-1)
This update to 1.8.4 fixes the following issues : - Wireshark could leak potentially sensitive host name resolution information when working with multiple pcap-ng files. wnpa-sec-2012-30, CVE-2012-5592 - The USB dissector could go into an infinite loop. wnpa-sec-2012-31, CVE-2012-5593 - The sFlow...
CVE-2014-5593
The affected software is the Christian Dating Cafe Android app (package com.christiancafe.mobile.android), version 1.0.3. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and access sensitive information via a crafted ...
openSUSE Security Update : seamonkey (openSUSE-SU-2013:1644-1)
update to SeaMonkey 2.22 bnc847708 - rebased patches - requires NSS 3.15.2 or higher - MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592 Miscellaneous memory safety hazards - MFSA 2013-94/CVE-2013-5593 bmo868327 Spoofing addressbar through SELECT element - MFSA 2013-95/CVE-2013-5604...
openSUSE Security Update : seamonkey (openSUSE-SU-2013:1788-1)
update to SeaMonkey 2.22 bnc847708 - rebased patches - requires NSS 3.15.2 or higher - MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592 Miscellaneous memory safety hazards - MFSA 2013-94/CVE-2013-5593 bmo868327 Spoofing addressbar through SELECT element - MFSA 2013-95/CVE-2013-5604...
openSUSE: Security Advisory for Mozilla (openSUSE-SU-2013:1634-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE Update for Mozilla Suite openSUSE-SU-2013:1633-1 (Mozilla Suite)
Check for the Version of Mozilla Suite OpenVAS Vulnerability Test $Id: gbsuse201316331.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for Mozilla Suite openSUSE-SU-2013:1633-1 Mozilla Suite Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH,...
Mozilla Suite: Update to October 2013 release (important)
MozillaFirefox was updated to Firefox 25.0. MozillaThunderbird was updated to Thunderbird 24.1.0. Mozilla XULRunner was updated to 17.0.10esr. Mozilla NSPR was updated to 4.10.1. Changes in MozillaFirefox: requires NSS 3.15.2 or above MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592...
CVE-2013-5593
The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly restrict the nature or placement of HTML within a dropdown menu, which allows remote attackers to spoof the address bar or conduct...
CVE-2013-5593
The CVE-2013-5593 issue affects Mozilla Firefox (and related Mozilla products) where the SELECT element’s handling of HTML in dropdowns did not properly restrict content, allowing remote attackers to spoof the address bar or perform clickjacking via navigation-redirect vectors. Affected products/...
CVE-2013-5593
The SELECT element implementation in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 does not properly restrict the nature or placement of HTML within a dropdown menu, which allows remote attackers to spoof the address bar or conduct...
CVE-2012-5593
Wireshark 1.8.x before 1.8.4 is affected by CVE-2012-5593 (USB dissector DoS). The USB dissector in epan/dissectors/packet-usb.c can loop indefinitely when processing crafted data, leading to denial of service. Vendors openSUSE SUSE-SU-2013:0238-1 and openSUSE/SUSE advisories list CVE-2012-5593 a...
XLight FTP Server SFTP Directory Traversal
Binary data 5593.prm...
CVE-2008-5593
CVE-2008-5593 affects Mini CMS 1.0.1 where index.php is vulnerable to directory traversal. An attacker can use a .. sequence in the page or admin parameter to include and execute arbitrary local files. No remediation details are provided in the connected documents.
CVE-2007-5593
install.php in Drupal 5.x before 5.3, when the configured database server is not reachable, allows remote attackers to execute arbitrary code via vectors that cause settings.php to be modified...
CVE-2007-5593
Drupal 5.x before 5.3 is vulnerable: if the configured database server is unreachable, an attacker can trigger arbitrary code execution by exploiting install.php vectors that cause settings.php to be modified. The issue is addressed by upgrading Drupal to 5.3 (e.g., Drupal 5.3-1 for the affected ...
CVE-2006-5593
Desknet’s (niokeru) web-based groupware suffers a buffer overflow in versions before 5.0J R1.0. The vulnerability could allow a remote authenticated user to execute arbitrary code, or cause DoS, via unspecified vectors. The JVN entry confirms the impact to remote code execution and DoS, but the m...