[SECURITY] [DSA 2350-1] freetype security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2350-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 20, 2011 http://www.debian.org/security/faq -...

DSA-2339-1 nss - several

Bulletin has no description...

[SECURITY] [DSA 2337-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2337-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 6, 2011 http://www.debian.org/security/faq -...

CVE-2010-5018

Cross-site scripting XSS vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script allows remote attackers to inject arbitrary web script or HTML via the sid parameter...

CVE-2010-5018

Cross-site scripting XSS vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script allows remote attackers to inject arbitrary web script or HTML via the sid parameter...

PT-2011-1953

Name of the Vulnerable Software and Affected Versions 2daybiz Online Classified Script affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the sid parameter in the...

CVE-2010-5018: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in products/classified/headersearch.php in 2daybiz Online Classified Script allows remote attackers to inject arbitrary web script or HTML via the sid parameter...

Oracle Password Hashdump

This module dumps the usernames and password hashes from Oracle given the proper Credentials and SID. These are then stored as creds for later cracking using auxiliary/analyze/jtroraclefast. This module supports Oracle DB versions 8i, 9i, 10g, 11g, and 12c. This module requires Metasploit:...

Debian Security Advisory DSA 2315-1 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory DSA 2315-1. OpenVAS Vulnerability Test $Id: deb23151.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2315-1 openoffice.org Authors: Thomas Reinke Copyright: Copyright c 2011 E-Sof...

CVE-2010-4935

SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sid parameter...

PT-2011-1870

Name of the Vulnerable Software and Affected Versions Entrans versions 0.3.2 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the sid parameter in the "poll.php" file. Recommendations For Entrans versions 0.3.2 and earlier, avoid...

CVE-2010-4935: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2010-4911

SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the sid parameter...

PT-2011-1846

Name of the Vulnerable Software and Affected Versions PHP Classifieds Ads affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the sid parameter in the "classi/detail.php" file. Recommendations At the moment, there i...

CVE-2010-4911: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the sid parameter...

DSA-2317-1 icedove - several

Bulletin has no description...

Debian Security Advisory DSA 2294-1 (freetype)

The remote host is missing an update to freetype announced via advisory DSA 2294-1. OpenVAS Vulnerability Test $Id: deb22941.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2294-1 freetype Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian: Security Advisory (DSA-2302-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2295-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows SMB LsaQueryInformationPolicy Function SID Enumeration Without Credentials

By emulating the call to LsaQueryInformationPolicy, it was possible to obtain the host SID Security Identifier, without credentials. The host SID can then be used to get the list of local users. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56210; scriptversion"1.5"...