9879 matches found
CVE-2009-3839: Undefined Security Weakness
Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv37 through snv125, might allow remote attackers to execute arbitrary code by leveraging access to the X server...
CVE-2009-3376
Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override aka RLO or U+202E Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displayin...
[SECURITY] Fedora 11 Update: epiphany-extensions-2.26.1-7.fc11
Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser...
CVE-2009-3376: Undefined Security Weakness
Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override aka RLO or U+202E Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displayin...
TYPO3 Security Bulletin
Several vulnerabilities have been found in the following third party TYPO3 extensions: Apache Solr Search solr, Random Images maagrandomimage, Flagbit Filebase fbfilebase, freeCap CAPTCHA srfreecap Release Date: Oktober 20, 2009 Please read first: This Collective Security Bulletin CSB is a listin...
Solaris 10 (sparc) : 126363-10 (deprecated)
SunOS 5.10: X Window System changes - Solaris Trusted Extensions. Date this patch was last updated by Sun : Jun/14/14 This plugin has been deprecated and either replaced with individual 126363 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...
Solaris Update for CDE Desktop changes - Solaris Trusted Extensions 126365-15
Check for the Version of CDE Desktop changes - Solaris Trusted Extensions OpenVAS Vulnerability Test Solaris Update for CDE Desktop changes - Solaris Trusted Extensions 126365-15 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This...
Solaris Update for CDE Desktop changes - Solaris Trusted Extensions 126365-15
Check for the Version of CDE Desktop changes - Solaris Trusted Extensions OpenVAS Vulnerability Test Solaris Update for CDE Desktop changes - Solaris Trusted Extensions 126365-15 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This...
Solaris Update for CDE Desktop changes - Solaris Trusted Extensions 126366-15
Check for the Version of CDE Desktop changes - Solaris Trusted Extensions OpenVAS Vulnerability Test Solaris Update for CDE Desktop changes - Solaris Trusted Extensions 126366-15 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This...
Solaris Update for CDE Desktop changes - Solaris Trusted Extensions 126366-15
Check for the Version of CDE Desktop changes - Solaris Trusted Extensions OpenVAS Vulnerability Test Solaris Update for CDE Desktop changes - Solaris Trusted Extensions 126366-15 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This...
SuSE 11 Security Update : Epiphany (SAT Patch Number 1342)
This update fixes a regression with the epiphany browser which did not work with the newer Mozilla XULRunner 1.9.1 engine. Epiphany now explicitly uses the old 1.9.0 engine again. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
FreeBSD : mybb -- multiple vulnerabilities (beb6f4a8-add5-11de-8b55-0030843d3802)
mybb team reports : Input passed via avatar extensions is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by uploading specially named avatars. The script allows to sign up with usernames containing zero width space characters, which can be...
Command injection
Multiple unspecified vulnerabilities in Common Desktop Environment CDE in Sun Solaris 10, when Trusted Extensions is enabled, allow local users to execute arbitrary commands or bypass the Mandatory Access Control MAC policy via unknown vectors, related to a menu typo and the Style Manager...
CVE-2009-3468
CVE-2009-3468 pertains to Solaris 10 CDE 1.6. The vulnerability set, related to a menu typo and the Style Manager, allows local users to execute arbitrary commands or bypass MAC when Trusted Extensions is enabled. Concrete remediation is available: patch 139620-01 for Solaris 10 (SunOS) SPARC, wi...
CVE-2009-3468: Undefined Security Weakness
Multiple unspecified vulnerabilities in Common Desktop Environment CDE in Sun Solaris 10, when Trusted Extensions is enabled, allow local users to execute arbitrary commands or bypass the Mandatory Access Control MAC policy via unknown vectors, related to a menu typo and the Style Manager...
CVE-2009-3334
SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component aka JINC or comjinc component 0.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a messages action to index.php...
CVE-2009-3334
The CVE-2009-3334 entry documents an SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component (aka JINC or com_jinc) version 0.2 for Joomla!. The flaw allows remote attackers to execute arbitrary SQL commands through the newsid parameter in the messages ...
CVE-2009-3334
SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component aka JINC or comjinc component 0.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a messages action to index.php...
CVE-2009-3334: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component aka JINC or comjinc component 0.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a messages action to index.php...
mybb -- multiple vulnerabilities
mybb team reports: Input passed via avatar extensions is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by uploading specially named avatars. The script allows to sign up with usernames containing zero width space characters, which can be...