samba4 security update

CentOS Errata and Security Advisory CESA-2014:0383 Updated samba4 packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...

Moderate: Red Hat Security Advisory: samba4 security update

Updated samba4 packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

samba4 security update

4.0.0-61.rc4 - resolves: 1073913 - Fix CVE-2012-6150. - resolves: 1073913 - Fix CVE-2013-4496. - resolves: 1073913 - Fix CVE-2013-6442...

CVE-2012-6645

Cross-site scripting XSS vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via the title of a node, a different vulnerability than...

CVE-2012-0033

The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a denial of service crash via a crafted DCC RESUME request...

CVE-2012-0033

Summary: CVE-2012-0033 affects the ZNC project, specifically the bouncedcc module (CBounceDCCMod::OnPrivCTCP in bouncedcc.cpp) on ZNC 0.200 and 0.202, allowing remote attackers to cause a denial of service (crash) via a crafted DCC RESUME request. What is affected: ZNC server software using the b...

CVE-2012-6645

CVE-2012-6645 is an XSS vulnerability affecting Drupal Finder module autocomplete. The issue allows injection of arbitrary script/HTML via the node title in Finder 6.x-1.x (before 6.x-1.26), 7.x-1.x, and 7.x-2.x (before 7.x-2.0-alpha8). The underlying flaw is cross-site scripting in the autocompl...

CVE-2012-6642

The CVE-2012-6642 entry concerns ClipBucket 2.6 with a Cross-site Scripting (XSS) flaw allowing remote attackers to inject arbitrary web script or HTML via the type parameter to view_channel.php. The vulnerability is supported by multiple feeds (NVD, Red Hat advisory, OpenVAS) and is described wi...

CVE-2012-1561

CVE-2012-1561 affects the Drupal Finder module (6.x-1.x before 6.x-1.26; 7.x-1.x; 7.x-2.x before 7.x-2.0-alpha8). The issue is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the checkbox and radio b...

CVE-2012-0033

The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote attackers to cause a denial of service crash via a crafted DCC RESUME request...

CVE-2012-6644

ClipBucket 2.6 is reported to be affected by multiple cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via several parameters across different pages: (1) cat in channels.php, (2) collections.php, (3) groups.php, (4) videos.php, (...

CVE-2012-6643

CVE-2012-6643 affects ClipBucket 2.6, where the update_counter function in includes/functions.php is vulnerable to SQL injection. An attacker can pass a crafted time parameter via videos.php or channels.php to cause arbitrary SQL execution. The OpenVAS entry corroborates multiple vulnerabilities ...

GLSA-201404-06 : Mesa: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201404-06 Mesa: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mesa. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with...

CVE-2012-6641

Cross-site scripting XSS vulnerability in redirect.php in the Socolissimo module modules/socolissimo/ in PrestaShop before 1.4.7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to "parameter names and values."...

CVE-2012-1834

Cross-site scripting XSS vulnerability in the cmstpvadminhead function in functions.php in the CMS Tree Page View plugin before 0.8.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cmstpvview parameter to wp-admin/options-general.php...

CVE-2012-1834

CVE-2012-1834 concerns the WordPress plugin CMS Tree Page View. The vulnerability is a persistent XSS in the cms_tpv_admin_head function (functions.php) that allows an attacker to inject arbitrary script/HTML via the cms_tpv_view parameter sent to wp-admin/options-general.php. Affected versions a...

CVE-2012-6641

Cross-site scripting XSS vulnerability in redirect.php in the Socolissimo module modules/socolissimo/ in PrestaShop before 1.4.7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to "parameter names and values."...

CVE-2012-1834

Cross-site scripting XSS vulnerability in the cmstpvadminhead function in functions.php in the CMS Tree Page View plugin before 0.8.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cmstpvview parameter to wp-admin/options-general.php...

CVE-2012-2095

The CVE-2012-2095 issue affects WICD before 1.7.2, where the SetWiredProperty function in the D-Bus interface allows local users to write arbitrary configuration and gain privileges via a crafted property name in a dbus message. This is a local-privilege-escalation vulnerability with CVSS v2 base...

CVE-2012-6640

Cross-site scripting XSS vulnerability in Horde Internet Mail Program IMP before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565...