CVE-2009-3839

Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv37 through snv125, might allow remote attackers to execute arbitrary code by leveraging access to the X server...

CVE-2009-3839

Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv37 through snv125, might allow remote attackers to execute arbitrary code by leveraging access to the X server...

CVE-2009-3839

CVE-2009-3839 concerns an unspecified vulnerability in the Solaris Trusted Extensions Policy configuration on Sun Solaris 10 and OpenSolaris snv_37 through snv_125. The issue could allow remote attackers to execute arbitrary code by leveraging access to the X server. Affected products are Solaris...

CVE-2009-3376

Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override aka RLO or U+202E Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displayin...

[SECURITY] Fedora 11 Update: epiphany-extensions-2.26.1-7.fc11

Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser...

TYPO3 Security Bulletin

Several vulnerabilities have been found in the following third party TYPO3 extensions: Apache Solr Search solr, Random Images maagrandomimage, Flagbit Filebase fbfilebase, freeCap CAPTCHA srfreecap Release Date: Oktober 20, 2009 Please read first: This Collective Security Bulletin CSB is a listin...

Solaris 10 (sparc) : 126363-10 (deprecated)

SunOS 5.10: X Window System changes - Solaris Trusted Extensions. Date this patch was last updated by Sun : Jun/14/14 This plugin has been deprecated and either replaced with individual 126363 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris Update for CDE Desktop changes - Solaris Trusted Extensions 126366-15

Check for the Version of CDE Desktop changes - Solaris Trusted Extensions OpenVAS Vulnerability Test Solaris Update for CDE Desktop changes - Solaris Trusted Extensions 126366-15 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This...

Solaris Update for CDE Desktop changes - Solaris Trusted Extensions 126365-15

Check for the Version of CDE Desktop changes - Solaris Trusted Extensions OpenVAS Vulnerability Test Solaris Update for CDE Desktop changes - Solaris Trusted Extensions 126365-15 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This...

Solaris Update for CDE Desktop changes - Solaris Trusted Extensions 126366-15

Check for the Version of CDE Desktop changes - Solaris Trusted Extensions OpenVAS Vulnerability Test Solaris Update for CDE Desktop changes - Solaris Trusted Extensions 126366-15 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This...

Solaris Update for CDE Desktop changes - Solaris Trusted Extensions 126365-15

Check for the Version of CDE Desktop changes - Solaris Trusted Extensions OpenVAS Vulnerability Test Solaris Update for CDE Desktop changes - Solaris Trusted Extensions 126365-15 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This...

SuSE 11 Security Update : Epiphany (SAT Patch Number 1342)

This update fixes a regression with the epiphany browser which did not work with the newer Mozilla XULRunner 1.9.1 engine. Epiphany now explicitly uses the old 1.9.0 engine again. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

FreeBSD : mybb -- multiple vulnerabilities (beb6f4a8-add5-11de-8b55-0030843d3802)

mybb team reports : Input passed via avatar extensions is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by uploading specially named avatars. The script allows to sign up with usernames containing zero width space characters, which can be...

Command injection

Multiple unspecified vulnerabilities in Common Desktop Environment CDE in Sun Solaris 10, when Trusted Extensions is enabled, allow local users to execute arbitrary commands or bypass the Mandatory Access Control MAC policy via unknown vectors, related to a menu typo and the Style Manager...

CVE-2009-3468

CVE-2009-3468 pertains to Solaris 10 CDE 1.6. The vulnerability set, related to a menu typo and the Style Manager, allows local users to execute arbitrary commands or bypass MAC when Trusted Extensions is enabled. Concrete remediation is available: patch 139620-01 for Solaris 10 (SunOS) SPARC, wi...

CVE-2009-3334

SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component aka JINC or comjinc component 0.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a messages action to index.php...

CVE-2009-3334

SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component aka JINC or comjinc component 0.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a messages action to index.php...

CVE-2009-3334

The CVE-2009-3334 entry documents an SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component (aka JINC or com_jinc) version 0.2 for Joomla!. The flaw allows remote attackers to execute arbitrary SQL commands through the newsid parameter in the messages ...

mybb -- multiple vulnerabilities

mybb team reports: Input passed via avatar extensions is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by uploading specially named avatars. The script allows to sign up with usernames containing zero width space characters, which can be...

Fedora Core 11 FEDORA-2009-9505 (epiphany-extensions)

The remote host is missing an update to epiphany-extensions announced via advisory FEDORA-2009-9505. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...