CVE-2014-7085

The CVE-2014-7085 entry concerns the Android app i Newspaper (com.independent.thei, package @7F080184). The vulnerability is that it does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificat...

Fedora Update for devscripts FEDORA-2013-23975

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for devscripts FEDORA-2013-23975

Check for the Version of devscripts OpenVAS Vulnerability Test Fedora Update for devscripts FEDORA-2013-23975 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora 20 : devscripts-2.13.9-1.fc20 (2013-23975)

Update to 2.13.9, see http://ftp-master.metadata.debian.org/changelogs//main/d /devscripts/devscripts2.13.9changelog for details - Fix CVE-2013-7085 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted...

DEBIAN-CVE-2013-7085

Uscan in devscripts 2.13.5, when USCANEXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename...

CVE-2013-7085

CVE-2013-7085 affects devscripts 2.13.5 (Uscan); when USCAN_EXCLUSION is enabled, remote attackers can delete arbitrary files via a whitespace character in a filename. Evidenced in Fedora/SUSE advisories calling for updates to devscripts (e.g., 2.13.9) to fix the issue. Remediation in provided do...

CVE-2008-7085

Affected software: TheHockeyStop HockeySTATS Online 2.0 Basic and Advanced. Vulnerability: Multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands. Entry points / parameters: (1) id parameter in the viewpage action (likely index.php) and (2) divid parameter in t...

CVE-2006-7085

CVE-2006-7085 affects Rigter Portal System (RPS) 1.0, 2.0 and 3.0. A direct request to add_art.php enables remote attackers to add arbitrary content and perform XSS. The entry notes that the issue was originally reported as SQL injection, but that is unlikely. No exploitation details, affected ve...