75 matches found
[SECURITY] [DSA 2963-1] lucene-solr security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2963-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 17, 2014 http://www.debian.org/security/faq -...
Debian: Security Advisory (DSA-2963-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Solr: XML eXternal Entity (XXE) flaw in DocumentAnalysisRequestHandler
The DocumentAnalysisRequestHandler in Apache Solr before 4.3.1 does not properly use the EmptyEntityResolver, which allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Enti...
Important: Red Hat Security Advisory: Red Hat JBoss Data Grid 6.2.0 update
Red Hat JBoss Data Grid 6.2.0, which fixes multiple security issues, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base...
Apache Solr < 4.1.0 Multiple XML External Entity Injections
The version of Apache Solr running on the remote web server is affected by multiple XML external entity injection vulnerabilities because the XML parser accepts XML data containing external entity declarations from untrusted sources. A remote, unauthenticated attacker can exploit this flaw to gai...
Xxe
The 1 UpdateRequestHandler for XSLT or 2 XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, different...
CVE-2013-6407
The UpdateRequestHandler for XML in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
CVE-2013-6407
CVE-2013-6407 (Apache Solr; Lucene-Solr) : The UpdateRequestHandler for XML in Solr before 4.1 is vulnerable to XML External Entity (XXE). A crafted XML with an external entity declaration and an entity reference can cause information disclosure. Affected: Solr/Lucene-Solr prior to 4.1. Root caus...
SuSE 11.1 Security Update : socat (SAT Patch Number 6407)
This update fixes two small security issues in socat : - Fixed a stack overflow in commandline parsing bnc627475 / CVE-2010-2799 Only exploitable if an attacker can control the commandline parameters. - Fixed heap overflow in READLINE output mode bnc759859 / CVE-2012-0219 %NASLMINLEVEL 70300 C...
PuTTy.exe <= v0.53 Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3 'PuTTy.exe %q This module exploi...
SuSE 10 Security Update : libtiff (ZYPP Patch Number 6407)
This update of the tiff package fixes various integer overflows in the tools. CVE-2009-2347 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41553;...
CVE-2008-6407
CVE-2008-6407: A directory traversal vulnerability in the frame.php component of ol’bookmarks manager 0.7.5 allows remote attackers to include and execute arbitrary local files by supplying a dot-dot (..) in the framefile parameter. Affected software is ol’bookmarks manager 0.7.5; the underlying ...
CVE-2007-6407
CVE-2007-6407 covers multiple XSS flaws in IBM Tivoli Provisioning Manager Express. Remote attackers can inject arbitrary script/HTML via the /tpmx URI by manipulating fields such as the (1) “assess modification” and (2) user-id, plus other unspecified vectors related to “error processing.” The N...
CVE-2006-6407
CVE-2006-6407 concerns F-Prot Antivirus for Linux x86 Mail Servers 4.6.6. The vulnerability allows remote attackers to bypass virus detection by injecting invalid characters into base64-encoded content within a multipart/mixed MIME file, demonstrated using the EICAR test file. This indicates a fl...