CVE-2010-1618

Cross-site scripting XSS vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message...

PHP: Multiple vulnerabilities

Background PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML. Description Multiple vulnerabilities have been discovered in PHP. Please review the CVE identifiers referenced below and the associated PHP release notes...

SuSE9 Security Update : OpenLDAP 2 (YOU Patch Number 12222)

This update fixes a security problem in the liblber client library of openldap that allowed remote attackers to cause a denial of service program termination via crafted ASN.1 BER datagrams, which triggers an assertion error. CVE-2008-2952 Additionally a bug was fixed in ldapfreeconnection which...

Fedora Core 10 FEDORA-2009-9356 (libsilc)

The remote host is missing an update to libsilc announced via advisory FEDORA-2009-9356. OpenVAS Vulnerability Test $Id: fcore20099356.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9356 libsilc Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 11 FEDORA-2009-9342 (libsilc)

The remote host is missing an update to libsilc announced via advisory FEDORA-2009-9342. OpenVAS Vulnerability Test $Id: fcore20099342.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9342 libsilc Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-9356 (libsilc)

The remote host is missing an update to libsilc announced via advisory FEDORA-2009-9356. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora Core 11 FEDORA-2009-9342 (libsilc)

The remote host is missing an update to libsilc announced via advisory FEDORA-2009-9342. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

[SECURITY] Fedora 11 Update: libsilc-1.1.8-7.fc11

SILC Client Library libraries for clients to connect to SILC networks. SILC Secure Internet Live Conferencing is a protocol which provides secure conferencing services on the Internet over insecure channel...

[SECURITY] Fedora 10 Update: libsilc-1.1.8-7.fc10

SILC Client Library libraries for clients to connect to SILC networks. SILC Secure Internet Live Conferencing is a protocol which provides secure conferencing services on the Internet over insecure channel...

[SECURITY] Fedora 11 Update: neon-0.28.6-1.fc11

neon is an HTTP and WebDAV client library, with a C interface; providing a high-level interface to HTTP and WebDAV methods along with a low-level interface for HTTP request handling. neon supports persistent connections, proxy servers, basic, digest and Kerberos authentication, and has complete S...

Mandrake Security Advisory MDVSA-2009:166 (c-client)

The remote host is missing an update to c-client announced via advisory MDVSA-2009:166. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

FreeBSD : neon format string vulnerabilities (84237895-8f39-11d8-8b29-0020ed76ef5a)

Greuff reports that the neon WebDAV client library contains several format string bugs within error reporting code. A malicious server may exploit these bugs by sending specially crafted PROPFIND or PROPPATCH responses. Although several applications include neon, such as cadaver and subversion, t...

CVE-2009-0671

CVE-2009-0671 is rejected/not used per the description; not an active vulnerability entry.

Fedora Update for libsilc FEDORA-2008-2641

Check for the Version of libsilc OpenVAS Vulnerability Test Fedora Update for libsilc FEDORA-2008-2641 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for libsilc FEDORA-2008-2616

Check for the Version of libsilc OpenVAS Vulnerability Test Fedora Update for libsilc FEDORA-2008-2616 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Forgot Password/Crowd Integration exception handling and regex improvements

If JIRA is integrated with Crowd, and Crowd has password restrictions e.g. regex, a user will receive a stack trace in JIRA if the new password does not meet Crowd's password requirements e.g. through the Forgot Password link in JIRA. noformat java.lang.IllegalArgumentException: Could not change...

CVE-2008-5514

Off-by-one error in the rfc822outputchar function in the RFC822BUFFER routines in the University of Washington UW c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service crash via an e-mail message...

DEBIAN-CVE-2008-5514

Off-by-one error in the rfc822outputchar function in the RFC822BUFFER routines in the University of Washington UW c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service crash via an e-mail message...

CVE-2008-5514

CVE-2008-5514 describes an off-by-one error in the RFC822BUFFER handling of the UW c-client library (used by the UW IMAP toolkit). The root cause is an off-by-one in the rfc822_output_char function, which can be triggered by a crafted email message to cause a crash (context-dependent denial of se...

CVE-2008-5514

Off-by-one error in the rfc822outputchar function in the RFC822BUFFER routines in the University of Washington UW c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service crash via an e-mail message...