1983 matches found
DSA-1347-1 xpdf
Bulletin has no description...
JVN#05187780 Hiki arbitrary file deletion vulnerability
Hiki contains a vulnerability that allows an arbitrary file to be deleted on a server running Hiki. This is caused by the improper handling of a session management file. Impact A remote attacker may be able to delete arbitrary files with the privilege of the user running Hiki. Solution Upgrade th...
DSA-1316-1 emacs21
Bulletin has no description...
W3M浏览器InputAnswer格式串漏洞
W3M是一款开放源代码的文字式网页浏览器。 W3M不正确过滤用户提交给格式打印函数的输入，远程攻击者可以利用漏洞进行格式串攻击，可能以进程权限执行任意指令。 目前没有详细漏洞细节提供。 W3M W3M 0.5.1 W3M W3M 0.3.2 .2 W3M W3M 0.3.2 .1 W3M W3M 0.3.2 W3M W3M 0.3.1 + RedHat Linux 8.0 i386 + RedHat Linux 8.0 W3M W3M 0.3 + RedHat Linux 7.3 i386 + RedHat Linux 7.3 W3M W3M 0.2.5 .1 W3M W3M 0.2.5...
DSA-1274-1 file - buffer overflow
Bulletin has no description...
DSA-1272-1 tcpdump - buffer overflow
Bulletin has no description...
DSA-1263-1 clamav
Bulletin has no description...
DoS and code execution issue in LedgerSMB < 1.1.5 and SQL-Ledger < 2.6.25
Hi; A person on the LedgerSMB core team has found a serious arbitrary code execution issue in LedgerSMB prior to 1.1.5 and SQL-Ledger. A version of SQL-Ledger which fixes this vulnerability was released today version 2.6.25. The vulnerability allows a user to specify a custom function to run when...
CheckPoint Connectra端点绕过安全检测漏洞
Check Point Connectra是一款Web安全网关，提供 SSL VPN 访问，并在一个统一的解决方案内集成了终端安全和应用安全。 Connectra在处理端点访问认证时存在漏洞，远程攻击者可能通过伪造认证信息来绕过安全检测，非授权获取访问。 Connectra的一个主要功能是综合端点安全服务，具体来讲，就是在客户端连接到内部网络之前会对客户端执行测试，检查该计算机是否存在安全风险，如果检测出风险就会提示用户风险的详细信息，并在该用户登陆到网络之前会要求再次进行测试。...
DSA-1250-1 cacti
Bulletin has no description...
Allied Telesis AT-9000/24 Ethernet switch management can be accessed from all VLANs.
Overview The AT-9000/24 Ethernet switch's management can be accessed from any VLAN which has been configured to switch. Normally remote management SNMP, telnet, http should be only available from management VLAN and with AT-9000/24 this can't be chosen. Only option for the management VLAN is...
DSA-1235-1 ruby1.8
Bulletin has no description...
DSA-1202-1 screen - programming error
Bulletin has no description...
DSA-1200-1 qt-x11-free - integer overflow
Bulletin has no description...
DSA-1196-1 clamav
Bulletin has no description...
DSA-1192-1 mozilla
Bulletin has no description...
Cisco Guard Enables Cross Site Scripting
A vulnerability in the Cisco Guard may enable an attacker to send a web browser client to a malicious website with the use of Cross Site Scripting XSS when the Guard is providing anti-spoofing services between the web browser client and a webserver. The attacker may exploit this by providing a...
SOL6612 - BIND 9: Multiple DoS vulnerabilities VU#697164 and VU#915404
This security advisory describes multiple BIND 9 denial of service vulnerabilities. For information about this advisory, refer to the Internet Systems Consortium website at the following location: F5 Networks Product Development is tracking this issue as ID 314714 formerly CR68956 and ID 264730...