762 matches found
CentOS Update for vim-common CESA-2008:0617 centos4 i386
Check for the Version of vim-common OpenVAS Vulnerability Test CentOS Update for vim-common CESA-2008:0617 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
CentOS Update for xpdf CESA-2008:0240 centos4 x86_64
Check for the Version of xpdf OpenVAS Vulnerability Test CentOS Update for xpdf CESA-2008:0240 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Design/Logic Flaw
Apple iTunes before 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...
CVE-2008-3439
SpeedBit Video Acceleration before 2.2.1.8 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...
CVE-2008-3440
CVE-2008-3440 affects Sun Java 1.6.0_03 and earlier (potentially later versions) where updater authenticity is not properly verified, enabling a man-in-the-middle attacker to run arbitrary code via a Trojan horse update (as demonstrated by evilgrade and DNS cache poisoning). The connected sources...
Citrix Presentation Server heap based buffer overflow
Overview A heap-based buffer overflow in Citrix Presentation Server may allow a remote attacker to execute arbitrary code on an vulnerable system in the context of the system user. Description Citrix Presentation Server is an application delivery system providing access to users accross a network...
Debian Security Advisory DSA 087-1 (wu-ftpd)
The remote host is missing an update to wu-ftpd announced via advisory DSA 087-1. OpenVAS Vulnerability Test $Id: deb0871.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 087-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
DSA-1357-1 koffice - integer overflow
Bulletin has no description...
RHEL 4 : cpio (RHSA-2005:073)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:073 advisory. GNU cpio copies files into or out of a cpio or tar archive. It was discovered that cpio uses a 0 umask when creating files using the -O archive option...
Fedora Core 2 : xemacs-21.4.17-0.FC2 (2005-145)
Update to 21.4.17 stable release, which also fixes the CVE-2005-0100 movemail string format vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as muc...
Mandrake Linux Security Advisory : libxml2 (MDKSA-2004:018)
A flaw in libxml2 versions prior to 2.6.6 was found by Yuuichi Teranishi. When fetching a remote source via FTP or HTTP, libxml2 uses special parsing routines that can overflow a buffer if passed a very long URL. In the event that the attacker can find a program that uses libxml2 which parses...
RHEL 2.1 : mailman (RHSA-2002:181)
Updated mailman packages are now available for Red Hat Linux Advanced Server. These updates close a cross-site scripting vulnerability present in mailman versions prior to version 2.0.12. Mailman versions prior to 2.0.12 contain a cross-site scripting vulnerability in the processing of invalid...
[SECURITY] [DSA-318-1] New lyskom-server packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 318-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 12th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 220-1] New squirrelmail packages fix cross site scripting problem
-------------------------------------------------------------------------- Debian Security Advisory DSA 220-1 [email protected] http://www.debian.org/security/ Martin Schulze January 2nd, 2003 http://www.debian.org/security/faq -...
[SECURITY] New version of make released
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman February 20, 2000 - ------------------------------------------------------------------------ Package: make Vulnerability type:...
Security Update for Microsoft Outlook 2010 (KB4032222) 32-Bit Edition
A security vulnerability exists in Microsoft Outlook 2010 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for 2010 Microsoft Business Productivity Servers (KB4464571)
A security vulnerability exists in 2010 Microsoft Business Productivity Servers that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft Office 2016 (KB5002033) 64-Bit Edition
A security vulnerability exists in Microsoft Office 2016 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft Office 2016 (KB5002616) 64-Bit Edition
A security vulnerability exists in Microsoft Office 2016 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Microsoft Office 2007 System (KB2553090)
A security vulnerability exists in Microsoft Office 2007 System that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...