8997 matches found
USN-151-3: zlib vulnerabilities
USN-148-1 and USN-151-1 fixed two security flaws in zlib, which could be exploited to cause Denial of Service attacks or even arbitrary code execution with malicious data streams. Since aide is statically linked against the zlib library, it is also affected by these issues. The updated packagages...
security flaw
Multiple vulnerabilities in Ethereal 0.10.12 and earlier allow remote attackers to cause a denial of service memory consumption via unspecified vectors in the 1 ISAKMP, 2 FC-FCS, 3 RSVP, and 4 ISIS LSP dissector...
SSL Version 2 and 3 Protocol Detection
The remote service accepts connections encrypted using SSL 2.0 and/or SSL 3.0. These versions of SSL are affected by several cryptographic flaws, including: - An insecure padding scheme with CBC ciphers. - Insecure session renegotiation and resumption schemes. An attacker can exploit these flaws ...
Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
Dear security community and Oracle users, Many of my customers run Oracle. Much of the U.K. Critical National Infrastructure relies on Oracle; indeed this is true for many other countries as well. I know that there's a lot of private information about me stored in Oracle databases out there. I ha...
WebWasher < 4.4.1 Build 1613 Multiple XSS
The remote host is running the web proxy WebWasher. According to its banner, the installed version of WebWasher is prone to multiple cross-site scripting flaws. Successful exploitation of these issues may allow an attacker to execute malicious script code in a user's browser within the context of...
security flaw
Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of service or corrupt memory via a crafted filesystem...
Netscape Browser < 8.0.4 Multiple Vulnerabilities
The remote host is using Netscape Browser / Netscape Navigator, an alternative web browser. The version of Netscape Browser / Netscape Navigator installed on the remote host is prone to multiple flaws, including one that may allow an attacker to execute arbitrary code on the affected system. C...
Fedora Core 3 : evolution-2.0.4-2 (2005-255)
There were several security flaws found in the mozilla package, which evolution depends on. Users of evolution are advised to upgrade to this updated package which has been rebuilt against a later version of mozilla which is not vulnerable to these flaws. Note that Tenable Network Security has...
SaveWebPortal <= 3.4 Multiple Vulnerabilities
The remote host is running SaveWebPortal, a PHP web portal application. The installed version of SaveWebPortal is prone to multiple vulnerabilities, including remote code execution, arbitrary file inclusion, and cross-site scripting XSS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Land Down Under < 802 events.php SQL Injection
Binary data 3209.prm...
Important: Red Hat Security Advisory: httpd security update
Updated Apache httpd packages that correct two security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular and freely-available Web server. A flaw...
sphpblog_vulns.pl.txt
!/usr/bin/perl -w =============================================================================== Title: sphpblogvulns.pl Written by: Kenneth F. Belva, CISSP Franklin Technologies Unlimited, Inc. http://www.ftusecurity.com Date: August 25, 2005 Version: 0.1 Description: This program is for...
wordpress15sql.txt
--------------------------------------------------- | BuHa Security-Advisory 1 | May 17th, 2005 | --------------------------------------------------- | Vendor | Wordpress | | URL | http://wordpress.org/ | | Version | getvar"SELECT pingstatus FROM $wpdb-posts WHERE ID = $tbid"; Example: I converte...
MS05-038: Cumulative Security Update for Internet Explorer (896727)
The remote host contains a version of the Internet Explorer that is vulnerable to multiple security flaws JPEG Rendering, Web Folder, COM Object that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web pag...
Cyberstrong eShop Multiple Script ProductCode Parameter SQL Injection
The remote host is running Cyberstrong eShop, a shopping cart written in ASP. The remote version of this software contains several input validation flaws leading to SQL injection vulnerabilities. An attacker may exploit these flaws to affect database queries, possibly resulting in disclosure of...
pluggedBlog.txt
Plugged-Blog XSS and SQL-Injection flaw & Remove Admin vendor url: http://www.pluggedout.com advisory: http://falcondeoro.blogspot.com/2005/07/plugged-blog-xss-and-sql-injection.html vendor notify: yes exploit available: yes Plugged-Blog is a CMS WebBlog-Portal content management systen, theinsta...
USN-151-2: zlib vulnerabilities
USN-148-1 and USN-151-1 fixed two security flaws in zlib, which could be exploited to cause Denial of Service attacks or even arbitrary code execution with malicious data streams. Most applications use the shared library provided by the "zlib1g" package; however, some packages contain copies of t...
Fedora Core 4 : yelp-2.10.0-1.4.1 (2005-622)
Yelp is a help documentation browser for the GNOME environment. There were several security flaws found in the mozilla package, which yelp depends on. Users of yelp are advised to upgrade to this updated package which has been rebuilt against a version of mozilla not vulnerable to these flaws. No...
Fedora Core 3 : devhelp-0.9.2-2.3.5 (2005-618)
Devhelp is an API document browser for the GNOME environment. There were several security flaws found in the mozilla package, which devhelp depends on. Users of devhelp are advised to upgrade to this updated package which has been rebuilt against a version of mozilla not vulnerable to these flaws...