974 matches found
CVE-2008-3600: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in contrib/phpBB2/modules.php in Gallery 1.5.7 and 1.6-alpha3, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the phpEx parameter within a modload action...
SA-2008-023 - Ubercart - Cross site scripting
During checkout in Ubercart enabled stores, customers have text fields in which to enter their address and order information. Some stores will have modules enabled that restrict what sort of values are accepted in these fields, but this is not the case for everyone. This provides an opportunity f...
CentOS 3 : postgresql (CESA-2008:0039)
Updated postgresql packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PostgreSQL is an advanced Object-Relational database management system DBMS. The...
CVE-2007-5178: Improper Control of Generation of Code
contrib/mxglancesdesc.php in the mxglance 2.3.3 module for mxBB places a critical security check within a comment because of a missing comment delimiter, which allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via a URL in the mxrootpath parameter...
Fedora Core 6 : quagga-0.99.7-1.fc6 (2007-525)
This update contains rebase to quagga-0.99.7 along with fix for CVE-2007-1995. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Ubuntu 4.10 : postgresql contributed script vulnerability (USN-6-1)
Recently, Trustix Secure Linux discovered a vulnerability in the postgresql-contrib package. The script 'makeoidjoinscheck' created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the script. Note...
CVE-2005-3080: Undefined Security Weakness
contrib/example.php in GeSHi before 1.0.7.3 allows remote attackers to read arbitrary files via the language field without a source field set...
PostgreSQL: Multiple vulnerabilities
Background PostgreSQL is a SQL compliant, open source object-relational database management system. Description PostgreSQL gives public EXECUTE access to a number of character conversion routines, but doesn't validate the given arguments CAN-2005-1409. It has also been reported that the...
PostgreSQL < 8.0.3 Multiple Vulnerabilities
According to its banner, the version of PostgreSQL installed on the remote host may suffer from the following vulnerabilities : - Character Conversion Vulnerability Unprivileged users can call functions supporting client- server character set conversion from SQL commands even though those functio...
Vulnerability in contrib module (CVE-2005-1410)
The tsearch2 contrib module declares several functions as internal even though they don't take an internal argument. This allows attackers to cause a denial of service and may possibly have other impacts. A valid login is required to exploit this vulnerability.Note! See the announcement for speci...
Vulnerability in contrib module (CVE-2005-0246)
The intagg contrib module allows attackers to cause a denial of service. A valid login is required to exploit this vulnerability...
CVE-2005-0246: Undefined Security Weakness
The intagg contrib module for PostgreSQL 8.0.0 and earlier allows attackers to cause a denial of service crash via crafted arrays...
FreeBSD : postgresql-contrib -- insecure temporary file creation (153)
The following package needs to be updated: postgresql-contrib %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg6a164d842f7f11d9a9e70001020eed82.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML :...