Oracle Linux 5 : nss / and / nspr (ELSA-2015-1980)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1980 advisory. - Resolves: Bug 1269359 - CVE-2015-7183 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Scientific Linux Security Update : nss, nss-util, and nspr on SL6.x, SL7.x i386/x86_64 (20151104)

A use-after-poison flaw and a heap-based buffer overflow flaw were found in the way NSS parsed certain ASN.1 structures. An attacker could use these flaws to cause NSS to crash or execute arbitrary code with the permissions of the user running an application compiled against the NSS library...

[SECURITY] [DSA 3393-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3393-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 04, 2015 https://www.debian.org/security/faq -...

nspr, nss security update

CentOS Errata and Security Advisory CESA-2015:1981 Updated nss, nss-util, and nspr packages that fix three security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System...

Critical: Red Hat Security Advisory: nss, nss-util, and nspr security update

Updated nss, nss-util, and nspr packages that fix three security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Critical: Red Hat Security Advisory: nss and nspr security update

Updated nss and nspr packages that fix three security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availab...

nss and nspr security update

nspr 4.10.8-2 - Resolves: Bug 1269359 - CVE-2015-7183 - nspr: heap-buffer overflow in PLARENAALLOCATE can lead to crash under ASAN, potential memory corruption rhel-5.11.z nss 3.19.1-2 - Resolves: Bug 1269354 - CVE-2015-7182 CVE-2015-7181...

RHEL 5 : nss and nspr (RHSA-2015:1980)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1980 advisory. Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server...

CVE-2014-7183

LiteCart 1.1.2.1 (and possibly older) is affected by multiple XSS in search.php via the query parameter or the QUERY_STRING. The underlying issue is a cross-site scripting vulnerability in LiteCart’s search handling. The Netsparker advisory notes that the vendor released a fix on or around 29/09/...

CVE-2013-7183

CVE-2013-7183 affects Seowon Intech SWC-9100 routers via CGI reboot.cgi, where remote unauthenticated attackers can trigger a reboot (default_reboot) or reset all configuration (factory_default) by crafting requests such as /cgi-bin/reboot.cgi?select_option_value=factory_default&reboot_option=on&...

CVE-2013-7183

creationtimestamp| type| source ---|---|--- 2014-02-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39073...

Seowon Intech WiMAX SWU-9100 mobile router contains multiple vulnerabilities

Overview Seowon Intech WiMAX SWU-9100 mobile routers contain command injection CWE-77 and direct request CWE-425 vulnerabilities. Description Seowon Intech WiMAX SWU-9100 mobile routers contain command injection CWE-77 and direct request CWE-425 vulnerabilities. CVE-2013-7183 -CWE-425: Direct...

CVE-2008-7183

CVE-2008-7183 affects EVA CMS 2.3.1. A PHP remote file inclusion vulnerability in eva/index.php can allow remote code execution when register_globals is enabled, by passing a URL in the eva[caminho] parameter. The potential impact is arbitrary PHP code execution on the affected server, with typic...

CVE-2006-7183

CVE-2006-7183 affects Exhibit Engine (EE) up to version 1.22. The issue is a PHP remote file inclusion in styles.php via the toroot parameter, allowing an attacker to cause arbitrary PHP code execution on the vulnerable server. The exploit uses a URL in toroot to include attacker-controlled code....

Exhibit Engine styles.php toroot Parameter Remote File Inclusion

The remote web server is running Exhibit Engine, a PHP based photo gallery management system. The version of Exhibit Engine installed on the remote host fails to sanitize input to the 'toroot' parameter before using it in the 'styles.php' script to include PHP code. Provided PHP's 'registerglobal...