Gentoo Security Advisory GLSA 201401-15

Gentoo Linux Local Security Checks GLSA 201401-15 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2014-5976

The CVE-2014-5976 entry concerns the Android Alibaba (com.alibaba.wireless) app version 4.1.0.0, which does not verify X.509 certificates from SSL servers. This enables MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. CVSS2 base score 5.4 (Medium) with p...

CVE-2013-5976

The CVE-2013-5976 XSS vulnerability affects F5 BIG-IP APM: the access policy logout page (logout.inc) accepts the LastMRH_Session cookie to inject arbitrary script/HTML. Affected versions: BIG-IP APM 10.1.0–10.2.4 and 11.1.0–11.3.0. The security advisory (K14712) notes the vulnerability in the lo...

CVE-2013-2686

main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict Content-Length values, which...

Asterisk Multiple Vulnerabilities (AST-2012-014 / AST-2012-015)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by the following vulnerabilities : - A stack-based buffer overflow error exists related to SIP, HTTP and XMPP handling over TCP. Note that in the case of 'Certified Asterisk', SI...

Fedora Update for asterisk FEDORA-2013-1003

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected",...

Fedora Update for asterisk FEDORA-2013-0994

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Digium Asterisk HTTP Management Interface Stack Overflow (CVE-2012-5976; CVE-2013-2686)

A stack overflow vulnerability has been reported in Digium Asterisk. The vulnerability is due to an unchecked memory allocation on the stack, which can result in a stack overflow or writing of attacker-controlled data to arbitrary memory locations. A remote attacker can use this vulnerability by...

[SECURITY] [DSA 2605-2] asterisk regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2605-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 19, 2013 http://www.debian.org/security/faq -...

AST-2012-014: Crashes due to large stack allocations when using TCP

Asterisk Project Security Advisory - AST-2012-014 Product Asterisk Summary Crashes due to large stack allocations when using TCP Nature of Advisory Stack Overflow Susceptibility Remote Unauthenticated Sessions SIP Remote Authenticated Sessions XMPP, HTTP Severity Critical Exploits Known No Report...

CVE-2012-5976

CVE-2012-5976 describes stack-consumption vulnerabilities in Asterisk Open Source where parsing of TCP-based protocols (SIP, HTTP, XMPP) could be exploited to crash the daemon. Affected: Asterisk 1.8.x before 1.8.19.1, 10.x before 10.11.1, 11.x before 11.1.2; and corresponding Certified Asterisk ...

MetaSploit Server Detection

Binary data 5976.prm...

Fedora Update for phpMyAdmin FEDORA-2007-3639

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for phpMyAdmin FEDORA-2007-3666

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-5976

Multiple cross-site scripting XSS vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attackers to inject arbitrary web script or HTML via 1 the adname parameter in a Submit action or 2 the UserName field...

CVE-2008-5976

CVE-2008-5976 corresponds to multiple cross-site scripting (XSS) vulnerabilities in the PHP JOBWEBSITE PRO package, specifically in the file siteadmin/forgot.php. The vulnerabilities allow remote attackers to inject arbitrary script or HTML via two inputs: (1) the adname parameter in a Submit act...

CVE-2008-5976

creationtimestamp| type| source ---|---|--- 2008-12-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32625...

phpMyAdmin DB_Create.PHP多个输入验证漏洞

BUGTRAQ ID: 26512 CVE ID:CVE-2007-5976 CVE-2007-5977 CNCVE ID:CNCVE-20075977 phpMyAdmin是一款基于WEB的MySQL管理程序。 phpMyAdmin DBCreate.PHP存在多个输入验证问题，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 问题是由于DBCreate.PHP对参数缺少充分过滤，提交恶意脚本代码作为参数数据，并诱使用户解析，可导致恶意脚本代码在目标用户浏览器上执行。 RedHat Fedora 7 0 phpMyAdmin phpMyAdmin 2.11.1 phpMyAdmi...

CVE-2007-5976

CVE-2007-5976 affects phpMyAdmin prior to 2.11.2.1. The vulnerability is an SQL injection in db_create.php that allows remote authenticated users with CREATE DATABASE privileges to execute arbitrary SQL commands via the db parameter. This can enable database modification or creation under the att...

FreeBSD : phpmyadmin -- XSS vulnerability (2d2dcbb4-906c-11dc-a951-0016179b2dd5)

The DigiTrust Group reports : When creating a new database, a malicious user can use a client-side Web proxy to place malicious code in the db parameter of the POST request. Since dbcreate.php does not properly sanitize user-supplied input, an administrator could face a persistent XSS attack when...