PT-2011-1167

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions 1.8 through 1.8.4 MIT Kerberos 5 versions prior to 1.9.2 Description The issue affects the Key Distribution Center KDC in MIT Kerberos 5 when the db2 back end is used, allowing remote attackers to cause a denial of...

CVE-2011-1528: Improper Input Validation

The krb5ldaplockoutaudit function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8 through 1.8.4 and 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service assertion failure and daemon exit via unspecified vectors, related to the...

DSA-2317-1 icedove - several

Bulletin has no description...

PT-2011-1773

Name of the Vulnerable Software and Affected Versions Joomla! JSupport com jsupport component version 1.5.6 Description The issue allows remote authenticated users with Public Back-end permissions to execute arbitrary SQL commands. This is achieved by exploiting the alpha parameter in either a...

MyAuth3 Gateway 'pass' Parameter SQL Injection Vulnerability

This host is running MyAuth3 Gateway and is prone SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbmyauth3gatewayblindsqlinjvuln.nasl 5793 2017-03-30 13:40:15Z cfi $ MyAuth3 Gateway 'pass' Parameter SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2011 Greenbo...

Tencent 3. vulnerability is a combination of use and solution-vulnerability warning-the black bar safety net

Author: onlyguest Brief description: Permissions bypass+Cross Site+Service end of not verify the=night between 4 million users tragedy Detailed description: The first landing Have a cookie after you open the following page A class=keylink href="http://faxin.soso.com/JSONPageUserGetgold.a%20href= ...

RHEL 4 : redhat-release (EOL Notice) (RHSA-2011:1240)

This is the 6-month notification of the End Of Life plans for Red Hat Enterprise Linux 4. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the regular 7 year life cycle of Red Hat Enterprise Linux 4 will end on February 29, 2012. After this date, Red Hat will discontinue the...

Fedora Update for nip2 FEDORA-2011-10781

Check for the Version of nip2 OpenVAS Vulnerability Test Fedora Update for nip2 FEDORA-2011-10781 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

[SECURITY] Fedora 16 Update: nip2-7.24.2-1.fc16

nip2 is a graphical front end to the VIPS package. With nip2, rather than directly editing images, you build relationships between objects in a spreadsheet-like fashion. When you make a change somewhere, nip2 recalculates the objects affected by that change. Since it is demand-driven this update ...

[SECURITY] Fedora 15 Update: nip2-7.24.2-1.fc15

nip2 is a graphical front end to the VIPS package. With nip2, rather than directly editing images, you build relationships between objects in a spreadsheet-like fashion. When you make a change somewhere, nip2 recalculates the objects affected by that change. Since it is demand-driven this update ...

Fedora Update for zabbix FEDORA-2011-10618

Check for the Version of zabbix OpenVAS Vulnerability Test Fedora Update for zabbix FEDORA-2011-10618 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Get Ready for Microsoft 13 updates for August Patch Tuesday

Get Ready for Microsoft 13 updates for August Patch Tuesday Microsoft has announced that it will release 13 bulletins to address 22 vulnerabilities in Windows, Office, Internet Explorer, .NET and Visual Studio on its next Patch Tuesday. Another "critical" bulletin affects Windows server operating...

[20110902] - Core - XSS Vulnerability

Inadequate escaping leads to XSS vulnerability in back end...

Musicbox SQL Injection and Cross Site Scripting Vulnerabilities

Musicbox is prone to SQL injection and cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Joomla! Component JoomlaXi - Persistent Cross-Site Scripting

Joomla! Component JoomlaXi - Persistent Cross-Site Scripting 1.JoomlaXi persistent XSS vulnerabilty vendor: www.joomlaxi.com Author: 3psil0nLambDa a.k.a Karthik Email: [email protected] My blog: epsilonlambda.co.cc Google dork: © 2008-2010 JoomlaXi...

JoomlaXi Persistent XSS Vulnerability

Exploit for php platform in category web applications 1.JoomlaXi persistent XSS vulnerabilty vendor: www.joomlaxi.com Author: 3psil0nLambDa a.k.a Karthik Email: email protected My blog: epsilonlambda.co.cc Google dork: © 2008-2010 JoomlaXi...

SMPlayer v0.6.5.1 - Denial of Service Vulnerability

Document Title: =============== SMPlayer v0.6.5.1 - Denial of Service Vulnerability Release Date: ============= 2011-06-16 Vulnerability Laboratory ID VL-ID: ==================================== 57 Product & Service Introduction: =============================== SMPlayer intends to be a complete...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified IP Phones 7900 Series

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified IP Phones 7900 Series Advisory ID: cisco-sa-20110601-phone Revision 1.0 For Public Release 2011 June 1 1600 UTC GMT +----------------------------------------------------------------...

Gimp: Heap-based buffer overflow in Paint Shop Pro (PSP) plug-in

Heap-based buffer overflow in the readchanneldata function in file-psp.c in the Paint Shop Pro PSP plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a PSPCOMPRLE aka RLE compression image file that begins a long run...

Sybase M-Business Anywhere (AvantGo) gsoap Module password Tag Handling Overflow

The Sybase M-Business Anywhere AvantGo software installed on the remote host includes a SOAP server that fails to validate an XML end tag in a SOAP request, resulting in a buffer overflow. An unauthenticated, remote attacker can exploit this to execute arbitrary code. This plugin checks the heap...