CVE-2009-4371

CVE-2009-4371 describes a Cross-site scripting (XSS) vulnerability in Drupal Core, specifically the Locale module (modules/locale/locale.module). Affected versions include Drupal Core 6.14 and potentially 6.15. The issue allows remote authenticated users who have the "administer languages" permis...

CVE-2009-4371: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Locale module modules/locale/locale.module in Drupal Core 6.14, and possibly other versions including 6.15, allows remote authenticated users with "administer languages" permissions to inject arbitrary web script or HTML via the 1 Language name in...

Drupal 6.x Core XSS

The full text of this advisory can be found at http://www.madirish.net/?article=442 Description of Vulnerability: - - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that provides extensibility through various third party...

Microsoft IIS WebDAV Request Source Code Disclosure

The Internet Information Server IIS is a collection of Internet services packaged with several versions of the Windows operating system. IIS includes a Web server service that is capable of serving static, as well as dynamic content. The Web server is equipped with the Active Server Pages ASP...

Solaris Update for Simplified Chinese locale 120413-10

Check for the Version of Simplified Chinese locale OpenVAS Vulnerability Test Solaris Update for Simplified Chinese locale 120413-10 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Solaris Update for Simplified Chinese locale 120413-10

Check for the Version of Simplified Chinese locale OpenVAS Vulnerability Test Solaris Update for Simplified Chinese locale 120413-10 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Solaris Update for Simplified Chinese locale 120412-10

Check for the Version of Simplified Chinese locale OpenVAS Vulnerability Test Solaris Update for Simplified Chinese locale 120412-10 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Solaris Update for Simplified Chinese locale 120412-10

Check for the Version of Simplified Chinese locale OpenVAS Vulnerability Test Solaris Update for Simplified Chinese locale 120412-10 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

SLES10: Security update for Mono

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mono-core mono-data mono-data-firebird mono-data-oracle mono-data-postgresql mono-data-sqlite mono-data-sybase mono-locale-extras mono-nunit mono-web...

SLES11: Security update for Mono

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mono-core mono-data mono-data-postgresql mono-data-sqlite mono-locale-extras mono-nunit mono-web mono-winforms More details may also be found by searching fo...

python off-by-one locale.strxfrm() (possible memory disclosure)

Off-by-one error in the PyLocalestrxfrm function in Modules/localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due ...

CVE-2009-2611: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in infusions/lastseenuserspanel/lastseenuserspanel.php in MyFusion aka MyF 6 Beta, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the settingslocale parameter...

Solaris Update for Simplified Chinese locale 120413-09

Check for the Version of Simplified Chinese locale OpenVAS Vulnerability Test Solaris Update for Simplified Chinese locale 120413-09 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Solaris Update for Simplified Chinese locale 120412-09

Check for the Version of Simplified Chinese locale OpenVAS Vulnerability Test Solaris Update for Simplified Chinese locale 120412-09 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Solaris Update for Simplified Chinese locale 120413-09

Check for the Version of Simplified Chinese locale OpenVAS Vulnerability Test Solaris Update for Simplified Chinese locale 120413-09 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Solaris Update for Simplified Chinese locale 120412-09

Check for the Version of Simplified Chinese locale OpenVAS Vulnerability Test Solaris Update for Simplified Chinese locale 120412-09 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

MDVA-2008:042 : rpmdrake

This update fixes a few minor issues like a rare crash on searching 37626, a rare crash when an icon is missing 37700 and a crash with non existing packages 36529. We really query local packages with the proper UTF-8 locale. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

MDVA-2008:159 : curl

An idiosyncratic feature of the Turkish language is that the letter 'i' in Turkish is not the lower-case version of the letter 'I'. This issue breaks standard POSIX string case comparison on strings containing the character 'i'. This issue affected the curl package shipped with Mandriva Linux 200...

Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2008:155-1)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 2.0.0.16 CVE-2008-1233, CVE-2008-1234, CVE-2008-1235, CVE-2008-1236, CVE-2008-1237, CVE-2008-2785, CVE-2008-2798, CVE-2008-2799, CVE-2008-2802, CVE-2008-2803, CVE-2008-2807,...

Mandriva Update for initscripts MDKA-2007:037 (initscripts)

Check for the Version of initscripts OpenVAS Vulnerability Test Mandriva Update for initscripts MDKA-2007:037 initscripts Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...