iNTERNET.cms Cross-Site Scripting vulnerability

---------------------------------------------------------------------- PT-2009-33 Positive Technologies Security Advisory iNTERNET.cms Cross-Site Scripting vulnerability ---------------------------------------------------------------------- --- Affected Software iNTERNET.cms Versions prior to...

Neo CMS SQL Injection vulnerability

---------------------------------------------------------------------- PT-2009-36 Positive Technologies Security Advisory Neo CMS SQL Injection vulnerability ---------------------------------------------------------------------- --- Affected Software Neo CMS Versions up to 1.777 Product Link:...

MyBB < 1.4.9 Multiple Vulnerabilities

Binary data 5179.prm...

PostgreSQL Multiple Vulnerabilities

Binary data 5170.prm...

Altiris Deployment Solution 6.9.x < 6.9.430 Multiple Vulnerabilities

Binary data 5143.prm...

NaviCOPA Web Server Remote Buffer Overflow and Source Code Information Disclosure Vulnerabilities

NaviCOPA Web Server is prone to a remote buffer-overflow vulnerability and an information-disclosure vulnerability because the application fails to properly bounds-check or validate user-supplied input. Successful exploits of the buffer-overflow issue may lead to the execution of arbitrary code i...

Sun Java System Access Manager 7.1 < Patch 3 Multiple Vulnerabilities

Binary data 5133.prm...

Fedora 10 : Miro-2.0.5-3.fc10 / blam-1.8.5-13.fc10 / epiphany-2.24.3-9.fc10 / etc (2009-8288)

Update to new upstream Firefox version 3.0.13, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known-vulnerabilities/firefox30.htmlf irefox3.0.13 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox /...

VMSA-2009-0003 : ESX 2.5.5 patch 12 updates service console package ed

a. Updated ESX patch updates Service Console package ed ed is a line-oriented text editor, used to create, display, and modify text files both interactively and via shell scripts. A heap-based buffer overflow was discovered in the way ed, the GNU line editor, processed long file names. An attacke...

eEye Retina Network Security Scanner Detection

Retina Network Security Scanner is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid39807; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"eEye Retina Network Security Scann...

eDirectory < 8.8 SP5 Multiple Vulnerabilities

Binary data 5098.prm...

Debian DSA-1814-1 : libsndfile - heap-based buffer overflow

Two vulnerabilities have been found in libsndfile, a library to read and write sampled audio data. The Common Vulnerabilities and Exposures project identified the following problems : - CVE-2009-1788 Tobias Klein discovered that the VOC parsing routines suffer of a heap-based buffer overflow whic...

FreeBSD : moinmoin -- multiple XSS vulnerabilities (fc4d0ae8-3fa3-11de-a3fd-0030843d3802)

Secunia reports : Some vulnerabilities have been reported in MoinMoin, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed to multiple parameters in action/AttachFile.py is not properly sanitised before being returned to the user. This can be exploited...

Microsoft Whale Client Components ActiveX (WhlMgr.dll) Multiple Method Overflows

The version of the Whale Client Components ActiveX control, a component of Microsoft Whale Intelligent Application Gateway product and installed on the remote Windows host, reportedly contains multiple stack-based buffer overflows that can be triggered using long arguments to the 'CheckForUpdates...

Project Woodstock 404 Error Page UTF-7 Encoded XSS

The remote web server contains a web application built using Woodstock components, which are user interface components for the web- based on Java Server Faces and AJAX. Woodstock is part of Sun Glassfish Enterprise Server and can also be used with other Java web containers, such as JBoss, Tomcat,...

MDKA-2007:091 : drakx-net

Drakroam could erroneusly detect and reset the wireless mode to Master, instead of Managed. bug 30303 Draksambashare would check shares' names for partial matches, preventing the use of a share name partially equal to another. bug 30099 Draknfs and draksambashare were using the wrong translation...

MDKA-2007:062 : rpmdrake

The rpmdrake package, which provides the graphical software installation and update tools rpmdrake, drakrpm-edit-media and MandrivaUpdate, included with Mandriva Linux 2007 Spring contains several bugs. These include: When installing software with rpmdrake, if packages are selected for installati...

Fedora 10 : thunderbird-2.0.0.19-1.fc10 (2009-0183)

Update to the new upstream Thunderbird 2.0.0.19 fixing multiple security issues: http://www.mozilla.org/security/known- vulnerabilities/thunderbird20.htmlthunderbird2.0.0.19 Note: after the updated packages are installed, Thunderbird must be restarted for the update to take effect. Note that...

Serv-U < 8.0.0.1 Multiple Vulnerabilities (DoS, Traversal)

The installed version of Serv-U is earlier than 8.0.0.1 and thus is reportedly affected by the following issues : - A directory traversal vulnerability enables an authenticated, remote attacker to create directories outside his or her home directory. CVE-2009-1031 - An authenticated, remote...

FreeBSD : zabbix -- php frontend multiple vulnerabilities (03140526-1250-11de-a964-0030843d3802)

Secunia reports : Some vulnerabilities have been reported in the ZABBIX PHP frontend, which can be exploited by malicious people to conduct cross-site request forgery attacks and malicious users to disclose sensitive information and compromise a vulnerable system. Input appended to and passed via...