Amazon Linux AMI : mod_dav_svn (ALAS-2016-710)

The canonicalizeusername function in svnserve/cyrusauth.c in Apache Subversion before 1.8.16 and 1.9.x before 1.9.4, when Cyrus SASL authentication is used, allows remote attackers to authenticate and bypass intended access restrictions via a realm string that is a prefix of an expected repositor...

Paperlink Balance 710 Cross Site Request Forgery

​​ Affected software: paperlink balance 710 Type of vulnerability:csrf URL:peplink.com Discovered by: provensec Website: provensec.com version:710 Proof of concept​ a new manager can be added using csrf attack ​...

Ubuntu USN-710-1 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory USN-710-1. For details on the issues addressed with this update, please visit the referenced securtiy advisories. OpenVAS Vulnerability Test $Id: ubuntu7101.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7101.nasl 7969...

Ubuntu: Security Advisory (USN-710-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 710-1 (gtkhtml)

The remote host is missing an update to gtkhtml announced via advisory DSA 710-1. OpenVAS Vulnerability Test $Id: deb7101.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 710-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian DSA-710-1 : gtkhtml - NULL pointer dereference

Alan Cox discovered a problem in gtkhtml, an HTML rendering widget used by the Evolution mail reader. Certain malformed messages could cause a crash due to a NULL pointer dereference. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...