kernel security and bug fix update

kernel 2.6.18-348.1.1.0.1 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function orabug 14277030 - oprofile oprofile, x86: Fix nmi-unsafe callgraph support orabug 14277030 - oprofile oprofile: use KMNMI slot for kmapatomic orabug 14277030 - oprofile...

DEBIAN-CVE-2012-4566

The DTLS support in radsecproxy before 1.6.2 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to the block being used for verifying the certificate chain, which might allow remote attackers to bypass intended access restrictions and spo...

PT-2012-5977

Name of the Vulnerable Software and Affected Versions Subrion CMS version 2.2.1 Subrion CMS version 2.2.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including multi title in "/blocks/add/", cost, days, or titleen in "/plans/add/",...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in admin/controller.php in eSyndiCat Pro 2.3.05 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to the admins 2 blocks, 3 articles, or 4 suggest-category; or 5 sort parameter to the search page...

CVE-2010-5269

Untrusted search path vulnerability in tbb.dll in Intel Threading Building Blocks TBB 2.2.013 allows local users to gain privileges via a Trojan horse tbbmalloc.dll file in the current working directory, as demonstrated by a directory that contains a .pbk file. NOTE: some of these details are...

Design/Logic Flaw

Untrusted search path vulnerability in tbb.dll in Intel Threading Building Blocks TBB 2.2.013 allows local users to gain privileges via a Trojan horse tbbmalloc.dll file in the current working directory, as demonstrated by a directory that contains a .pbk file. NOTE: some of these details are...

CVE-2010-5269

Untrusted search path vulnerability in tbb.dll in Intel Threading Building Blocks TBB 2.2.013 allows local users to gain privileges via a Trojan horse tbbmalloc.dll file in the current working directory, as demonstrated by a directory that contains a .pbk file. NOTE: some of these details are...

CVE-2010-5269

CVE-2010-5269 : The issue is an untrusted search path vulnerability in the TBB library. Specifically, tbb.dll used by Intel Threading Building Blocks (TBB) 2.2.013 can be hijacked by a malicious tbbmalloc.dll placed in the current working directory, enabling local privilege escalation as demonstr...

PT-2012-1479

Name of the Vulnerable Software and Affected Versions Intel Threading Building Blocks TBB version 2.2.013 Description The issue allows local users to gain privileges via a Trojan horse tbbmalloc.dll file in the current working directory. This can be demonstrated by a directory that contains a .pb...

CVE-2010-5269: Undefined Security Weakness

Untrusted search path vulnerability in tbb.dll in Intel Threading Building Blocks TBB 2.2.013 allows local users to gain privileges via a Trojan horse tbbmalloc.dll file in the current working directory, as demonstrated by a directory that contains a .pbk file. NOTE: some of these details are...

Fedora Update for maniadrive FEDORA-2012-10936

Check for the Version of maniadrive OpenVAS Vulnerability Test Fedora Update for maniadrive FEDORA-2012-10936 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Cross site scripting

Cross-site scripting XSS vulnerability in the MultiBlock module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the administer blocks permission to inject arbitrary web script or HTML via the block title...

CVE-2012-2070

Cross-site scripting XSS vulnerability in the MultiBlock module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the administer blocks permission to inject arbitrary web script or HTML via the block title...

CVE-2012-2070: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the MultiBlock module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the administer blocks permission to inject arbitrary web script or HTML via the block title...

PT-2012-3784

Name of the Vulnerable Software and Affected Versions Drupal MultiBlock module versions 6.x-1.x before 6.x-1.4 Drupal MultiBlock module versions 7.x-1.x before 7.x-1.1 Description A cross-site scripting XSS issue exists in the MultiBlock module for Drupal, allowing remote authenticated users with...

CVE-2012-3390

lib/filelib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly restrict file access after a block has been hidden, which allows remote authenticated users to obtain sensitive information by reading a file that is embedded in a block...

WordPress Global Content Blocks <= 1.5.1 Multiple Vulnerabilities - Active Check

The WordPress Global Content Blocks plugin is prone to multiple security vulnerabilities, including a remote PHP code execution vulnerability and multiple information disclosure vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced...

CVE-2012-3376

DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out the same BlockPool twice from a NodeName, which might allow remote clients to read arbitrary blocks, write to blocks to which they only have read access, and...

Design/Logic Flaw

DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out the same BlockPool twice from a NodeName, which might allow remote clients to read arbitrary blocks, write to blocks to which they only have read access, and...

CVE-2012-3376

DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out the same BlockPool twice from a NodeName, which might allow remote clients to read arbitrary blocks, write to blocks to which they only have read access, and...