CVE-2015-6731

CVE-2015-6731 concerns the MediaWiki SemanticForms extension. The vulnerability is an XSS flaw in several parameters exposed by forms: section_, template_ , label_*, new_template (Special:CreateForm) and target, alt_form (Special:FormEdit). The root cause is inadequate input filtering in these pa...

CVE-2014-6731

The CVE-2014-6731 entry concerns the Alfa-Bank Android app (package ru.alfabank.mobile.android) version 5.5.1.1, which does not verify X.509 certificates when establishing SSL connections. This Certificate Validation failure enables man-in-the-middle attackers to spoof servers and obtain sensitiv...

CVE-2013-6731

IBM Netezza Performance Portal 2.x before 2.0.0.3 allows remote authenticated users to change arbitrary passwords via an HTTP POST request...

CVE-2013-6731

CVE-2013-6731 affects IBM Netezza Performance Portal 2.x prior to 2.0.0.3. The issue allows remote authenticated users to change arbitrary passwords via an HTTP POST request, exposing credential integrity risk. Affected product: IBM Netezza Performance Portal; root cause: improper access control ...

Schneider Electric Accutech Manager Detection (SCADA)

Binary data 6731.prm...

RHEL 3 / 4 : java-1.4.2-ibm (RHSA-2007:0062)

Updated java-1.4.2-ibm packages to correct several security issues are now available for Red Hat Enterprise Linux 3 and 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. IBM's 1.4.2 SR7 Java release includes the IBM Java 2 Runtime...

Fedora Core 10 FEDORA-2009-9671 (xmp)

The remote host is missing an update to xmp announced via advisory FEDORA-2009-9671. OpenVAS Vulnerability Test $Id: fcore20099671.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9671 xmp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora Core 10 FEDORA-2009-9671 (xmp)

The remote host is missing an update to xmp announced via advisory FEDORA-2009-9671. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-9675 (xmp)

The remote host is missing an update to xmp announced via advisory FEDORA-2009-9675. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-9675 (xmp)

The remote host is missing an update to xmp announced via advisory FEDORA-2009-9675. OpenVAS Vulnerability Test $Id: fcore20099675.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9675 xmp Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora 11 : xmp-2.7.1-1.fc11 (2009-9675)

Update to latest stable release. Multiple bugfixes and memory leak fixes. Fixes for buffer overflows in DTT and OXM loaders. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean an...

CVE-2007-6731

Extended Module Player XMP 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in 1 testoxm and 2 decrunchoxm functions in misc/oxm.c, leading to a buffer overflow...

CVE-2007-6731

CVE-2007-6731 affects Extended Module Player (XMP) up to version 2.5.1 and earlier. The vulnerability arises in the OXM loader: a negative value in an OXM file bypasses checks in test_oxm and decrunch_oxm in misc/oxm.c, causing a buffer overflow. This leads to remote code execution risks as descr...

CVE-2008-6731

CVE-2008-6731 describes an unrestricted file upload vulnerability in submitlink.php of FlexPHPLink Pro 0.0.7 . An attacker can upload a file with an executable extension and then access the renamed file under the linkphoto/ path to execute arbitrary PHP code remotely. The vulnerability stems from...

SuSE Update for IBMJava2 SUSE-SA:2007:010

Check for the Version of IBMJava2 OpenVAS Vulnerability Test $Id: gbsuse2007010.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for IBMJava2 SUSE-SA:2007:010 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Gentoo Security Advisory GLSA 200705-20 (blackdown-jdk,blackdown-jre)

The remote host is missing updates announced in advisory GLSA 200705-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200701-15 (java)

The remote host is missing updates announced in advisory GLSA 200701-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200701-15 (java)

The remote host is missing updates announced in advisory GLSA 200701-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Mac OS X : Java for Mac OS X 10.4 Release 6

The remote Mac OS X 10.4 host is running a version of Java for Mac OS X that is older than release 6. The remote version of this software contains several security vulnerabilities that may allow a rogue Java applet to escalate its privileges and to add or remove arbitrary items from the user's...

SUSE-SA:2007:003: Sun Java

The remote host is missing the patch for the advisory SUSE-SA:2007:003 Sun Java. The SUN Java packages have been upgraded to fix security problems. SUN Java was upgraded on all affected distributions: - The Java 1.3 version to 1.3.119 for SUSE Linux Enterprise Server 8. - The Java 1.4 version als...