CVE-2012-0427: Undefined Security Weakness

yast2-add-on-creator in SUSE inst-source-utils 2008.11.26 before 2008.11.26-0.9.1 and 2012.9.13 before 2012.9.13-0.8.1 allows local users to gain privileges via a crafted 1 file name or 2 directory name...

CVE-2013-4474

CVE-2013-4474 affects Poppler (before 0.24.3). A format string vulnerability in the extractPages function (utils/pdfseparate.cc) allows remote attackers to crash the process via specially crafted destination filenames, causing a denial of service. Affected: Poppler’s pdfseparate tool; root cause:...

CVE-2013-4474: Improper Input Validation

Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service crash via format string specifiers in a destination filename...

CVE-2013-4473: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a source filename...

PT-2013-5032

Name of the Vulnerable Software and Affected Versions poppler versions prior to 0.24.2 Description The issue is a stack-based buffer overflow in the extractPages function, located in utils/pdfseparate.cc, which can be exploited by remote attackers. This can lead to a denial of service crash and...

CVE-2013-6172

steps/utils/savepref.inc in Roundcube webmail before 0.8.7 and 0.9.x before 0.9.5 allows remote attackers to modify configuration settings via the session parameter, which can be leveraged to read arbitrary files, conduct SQL injection attacks, and execute arbitrary code...

CVE-2013-6044

The issafeurl function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.2, and 1.6 before beta 2 treats a URL's scheme as safe even if it is not HTTP or HTTPS, which might introduce cross-site scripting XSS or other vulnerabilities into Django applications that use this function, a...

CVE-2013-6044: Improper Neutralization of Input During Web Page Generation

The issafeurl function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.2, and 1.6 before beta 2 treats a URL's scheme as safe even if it is not HTTP or HTTPS, which might introduce cross-site scripting XSS or other vulnerabilities into Django applications that use this function, a...

PT-2013-5937

Name of the Vulnerable Software and Affected Versions Django versions 1.4.x through 1.4.5 Django versions 1.5.x through 1.5.1 Django versions 1.6 before beta 2 Description The issue in the is safe url function in utils/http.py might introduce cross-site scripting XSS or other issues into...

PT-2013-3571

Name of the Vulnerable Software and Affected Versions OpenStack Swift versions Folsom through Havana Description The issue allows attackers to trigger invalid or spoofed responses via an account name, potentially exploiting an XML injection vulnerability in the account/utils.py file...

Oracle Linux 5 / 6 : ecryptfs-utils (ELSA-2011-1241)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1241 advisory. - privilege escalation via mountpoint race conditions CVE-2011-1831, CVE-2011-1832 - race condition when checking source during mount CVE-2011-1833...

Oracle Linux 5 : nfs-utils (ELSA-2012-0310)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2012-0310 advisory. - Mount fails to anticipate RLIMITFSIZE bz 697979,CVE-2011-1749 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 5 : scsi-target-utils (ELSA-2010-0518)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2010-0518 advisory. 0.0-6.20091205snap.3 - Fix buffer overflow in isns scn handling CVE-2010-2221 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 6 : cifs-utils (ELSA-2012-0902)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2012-0902 advisory. 4.8.1-10 - mount.cifs: don't allow unprivileged users to mount onto dirs they can't chdir into bz 812782 4.8.1-9 - cifs.upcall: use krb5snametoprincipal to...

Oracle Linux 5 : gnutls (ELSA-2010-0166)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0166 advisory. - implement safe renegotiation - CVE-2009-3555 533125 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 3 : shadow-utils (ELSA-2007-0431)

From Red Hat Security Advisory 2007:0431 : An updated shadow-utils package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs for...

Oracle Linux 5 : scsi-target-utils (ELSA-2010-0362)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2010-0362 advisory. 0.0-6.20091205snap.2 - 576359 Fix format string vulnerability CVE-2010-0743 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 5 : bluez-libs / and / bluez-utils (ELSA-2008-0581)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2008-0581 advisory. - Fix CVE-2008-2374 Resolves: 452880 bluez-utils: Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Oracle Linux 6 : Core X11 clients (ELSA-2013-0502)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0502 advisory. - x11perf 1.5.4 CVE-2011-2504 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 5 / 6 : scsi-target-utils (ELSA-2011-0332)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-0332 advisory. 1.0.4-3.1 - fix the buffer overflow bug before iscsi login CVE-2011-0001 Tenable has extracted the preceding description block directly from the Oracle Linu...