9899 matches found
Gnome File Roller directory traversal
Directory traversal on archive processing...
Oracle Linux 4 / 5 : perl-Archive-Tar (ELSA-2010-0505)
From Red Hat Security Advisory 2010:0505 : An updated perl-Archive-Tar package that fixes multiple security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring...
Oracle Linux 3 : cpio (ELSA-2010-0145)
From Red Hat Security Advisory 2010:0145 : An updated cpio package that fixes two security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or ta...
Oracle Linux 5 : Moderate: / star (ELSA-2007-0873)
The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2007-0873 advisory. 1.5a08-5 - fix directory traversal vulnerability CVE-2007-4134 - Resolves: rhbz254130 Tenable has extracted the preceding description block directly from the...
CVE-2013-4668
Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to...
HawtJNI: predictable temporary file name leading to local arbitrary code execution
The HawtJNI Library class wrote native libraries to a predictable file name in /tmp when the native libraries were bundled in a JAR file, and no custom library path was specified. A local attacker could overwrite these native libraries with malicious versions during the window between when HawtJN...
WordPress category-grid-view-galler plugin Cross-Site Scripting Vulnerabilities
The WordPress category-grid-view-galler plugin suffers from a Cross-Site Scripting vulnerability. Iranian Exploit DataBase http://exploit.iedb.ir Exploit Title : WordPress category-grid-view-galler plugin Cross-Site Scripting Vulnerabilities Author : Iranian Exploit DataBase Discovered By : IeDb...
Debian Security Advisory DSA 2720-1 (icedove - several vulnerabilities)
Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client. Multiple memory safety errors, use-after-free vulnerabilities, missing permission checks, incorrect memory handling and other implementation errors may lead to the execution of...
Comodo Internet Security Scan Bypass Vulnerability
The host is installed with Comodo Internet Security and is prone to scan bypass vulnerability. OpenVAS Vulnerability Test $Id: gbcomodoscanbypassvulnwin.nasl 6115 2017-05-12 09:03:25Z teissa $ Comodo Internet Security Scan Bypass Vulnerability Authors: Arun Kallavi Copyright: Copyright c 2013...
Comodo Internet Security Scan Bypass Vulnerability
Comodo Internet Security is prone to scan bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress Category-Grid-View-Gallery XSS
Iranian Exploit DataBase http://exploit.iedb.ir Exploit Title : WordPress category-grid-view-galler plugin Cross-Site Scripting Vulnerabilities Author : Iranian Exploit DataBase Discovered By : IeDb Email : [email protected] Home : http://exploit.iedb.ir Software Link : http://wordpress.org/...
[SECURITY] Fedora 17 Update: ark-4.10.4-1.fc17
Ark is a program for managing various archive formats. Archives can be viewed, extracted, created and modified from within Ark. The program can handle various formats such as tar, gzip, bzip2, zip, rar and lha if appropriate command-line programs are installed...
Fedora Update for ark FEDORA-2013-10130
Check for the Version of ark OpenVAS Vulnerability Test Fedora Update for ark FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
[SECURITY] Fedora 18 Update: ark-4.10.4-1.fc18
Ark is a program for managing various archive formats. Archives can be viewed, extracted, created and modified from within Ark. The program can handle various formats such as tar, gzip, bzip2, zip, rar and lha if appropriate command-line programs are installed...
[SECURITY] Fedora 19 Update: ark-4.10.4-1.fc19
Ark is a program for managing various archive formats. Archives can be viewed, extracted, created and modified from within Ark. The program can handle various formats such as tar, gzip, bzip2, zip, rar and lha if appropriate command-line programs are installed...
[SECURITY] [DSA 2699-1] iceweasel security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2699-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 02, 2013 http://www.debian.org/security/faq -...
CVE-2013-2079
mod/assign/locallib.php in the assignment module in Moodle 2.3.x before 2.3.7 and 2.4.x before 2.4.4 does not consider capability requirements during the processing of ZIP assignment-archive download aka downloadall requests, which allows remote authenticated users to read other users' assignment...
HPSBHF02878 rev.1 - HP Smart Zero Client, Unauthorized Access
Potential Security Impact Unauthorized access VULNERABILITY SUMMARY A potential security vulnerability has been identified with the HP Smart Zero Client. This vulnerability could be exploited by a local user on the device to gain unauthorized access. RESOLUTION HP has provided updated operating...
