2136 matches found
Joomla! Component CB Resume Builder - 'group_id' SQL Injection
source: https://www.securityfocus.com/bid/36598/info The CB Resume Builder 'comcbresumebuilder' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
How to Protect Your Resume From Identity Theft
“Job candidates are willing in this market to give any information they can that would help them get a job,” said Ellen B. Vance, an HR consultant and auditor who advises companies on how to safeguard applicant and employee information. The instinct is natural, but it can leave you vulnerable to...
Unrestricted file upload
Unrestricted file upload vulnerability in PHPStore Job Search aka PHPCareers allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessing it via a direct request to the file in jobseekers/jobseekerprofileimages...
MDVA-2008:073 : hal-info
This package adds quirks to fix suspend/resume on Airis Kira, Asus EEE PC. It also ensure fake CDROM on Option/Huawei 3G keys are ignored, and fix Delete key not working properly on Acer Extensa 5220. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not...
Mandriva Linux Security Advisory : kernel (MDVSA-2008:246)
Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The chipcommand function in drivers/media/video/tvaudio.c in the Linux kernel 2.6.25.x before 2.6.25.19, 2.6.26.x before 2.6.26.7, and 2.6.27.x before 2.6.27.3 allows attackers to cause a denial of service NULL function...
Mandriva Update for hal-info MDVA-2008:073 (hal-info)
Check for the Version of hal-info OpenVAS Vulnerability Test Mandriva Update for hal-info MDVA-2008:073 hal-info Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Mandriva Update for hal-info MDVA-2008:073 (hal-info)
Check for the Version of hal-info OpenVAS Vulnerability Test Mandriva Update for hal-info MDVA-2008:073 hal-info Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CVE-2008-6053
PreProjects Pre Resume Submitter stores onlineresume.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request...
CVE-2008-6053
PreProjects Pre Resume Submitter stores onlineresume.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request...
Pre Resume Submitter Database Disclosure
--------------------------------------------------------- Portal Name: PRE RESUME SUBMITTER Vendor : http://preproject.com/submit.asp Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD:...
CVE-2007-5640
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager BCM, Mobile Voice Client, and other product lines, allow remote attackers to block calls and force re-registration via a resume message to the Signaling Server...
CVE-2007-5640
The CVE-2007-5640 issue affects Nortel UNIStim products (e.g., UNIStim IP Softphone 2050, IP Phone 1140E and related lines such as BCM and Mobile Voice Client). A resume message to the Signaling Server with a spoofed source IP can allow remote attackers to block calls and force re-registration; t...
Mandrake Linux Security Advisory : kernel (MDKSA-2006:123)
A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The kernel did not clear sockaddrin.sinzero before returning IPv4 socket names for the getsockopt function, which could allow a local user to obtain portions of potentially sensitive memory if getsockopt is called...
Mandrake Linux Security Advisory : kernel (MDKSA-2006:086)
A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to Linux kernel 2.6.16.5, the kernel does not properly handle uncanonical return addresses on Intel EM64T CPUs which causes the kernel exception handler to run on the user stack with the wrong GS...
Sun Solaris 2.6 - power management
Sun Solaris 2.6 - power management source: https://www.securityfocus.com/bid/160/info A vulnerability exists in Sun's power management software under Solaris versions 2.4-2.6 although only 2.6 as part of the main distribution. The sys-suspend program is initiated when a user runs the program, or...
