180 matches found
EC-CUBE vulnerable to cross-site scripting
Overview EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a vulnerability in handling the output of parameters, which may result in cross-site scripting. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC coordinated with th...
Linux Kernel NCI多个远程栈缓冲区溢出漏洞
BUGTRAQ ID: 54966 CVE ID: CVE-2012-3364 Linux是最受欢迎的自由电脑操作系统内核。 Linux Kernel在实现上存在多个远程栈缓冲区溢出漏洞，攻击者可利用此漏洞以内核权限执行任意代码，完全控制受影响计算机。 0 Linux kernel 3.3.5 Linux kernel 3.3.4 Linux kernel 3.2.x Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...
Apple Mac OS X CoreMedia H.264编码视频文件缓冲区溢出漏洞
BUGTRAQ ID: 50068 CVE ID: CVE-2011-3219 Mac OS X是苹果家族机器所使用的操作系统。 Apple Mac OS X在实现上存在缓冲区溢出漏洞，此漏洞可影响CoreMedia组件，允许攻击者以当前用户权限执行任意代码。 当解析H.264流的Sequence Parameter Set数据时，会读取帧剪裁偏移字段，当这些字段包含错误数据时，Quicktime会最终在视频流所分配的缓冲区之外写入，造成任意代码执行。 Apple Mac OS X 10.x Apple MacOS X Server 10.6.x 厂商补丁： Apple -----...
Dolphin 7.0.7 PHP Code Injection
$aItems 8...
BaserCMS vulnerable to cross-site scripting
Overview BaserCMS contains a cross-site scripting vulnerability. BaserCMS is an open-source Contents Management System CMS. BaserCMS contains a cross-site scripting vulnerability. Masako Ohno reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...
TWSL2011-007: iOS SSL Implementation Does Not Validate Certificate Chain
Trustwave's SpiderLabs Security Advisory TWSL2011-007: iOS SSL Implementation Does Not Validate Certificate Chain https://www.trustwave.com/spiderlabs/advisories/TWSL2011-007.txt Published: 2011-07-25 Version: 1.0 Vendor: Apple http://www.apple.com Product: iOS Version affected: Versions Prior to...
subversion security update
1.4.2-4.0.1.el53.1 - Add oracle-enterprise.patch 1.4.2-4.el53.1 - add security fix for CVE-2009-2411 515817...
Solaris Update for kernel 120012-14
Check for the Version of kernel OpenVAS Vulnerability Test Solaris Update for kernel 120012-14 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...
XOOPS Cube Legacy cross-site scripting vulnerability
Overview XOOPS Cube Legacy from XOOPS Cube Project contains a cross-site scripting vulnerability. XOOPS Cube Legacy from XOOPS Cube Project is an open source contents management system. XOOPS Cube Legacy contains a cross-site scripting vulnerability. According to the developers, a XOOPS Cube Lega...
Debian Security Advisory DSA 187-1 (apache)
The remote host is missing an update to apache announced via advisory DSA 187-1. OpenVAS Vulnerability Test $Id: deb1871.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 187-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
PT-2007-1107 · Tcpdump +1 · Tcpdump +1
Name of the Vulnerable Software and Affected Versions: tcpdump versions 3.9.6 and earlier tcpdump versions prior to 3.9.5-r3 Description: The issue is related to an integer overflow in the BGP dissector in tcpdump, which allows remote attackers to execute arbitrary code via crafted TLVs in a BGP...
xp Chinese version through the Microsoft validation Update Patch method summary-vulnerability warning-the black bar safety net
xp Chinese version through the Microsoft validation Update Patch method summary Golden State 2 0 0 6. 1. 1 4 System xp English version, the personal user, sp1,sp2 can be. Objective 1: break through Microsoft's validation, to be able to update the system patch. Purpose 2: lunar 1 and 2. 2 4 is the...
Symantec Brightmail AntiSpam: Malformed MIME, Denial of Service
SUMMARY Risk Impact Low Remote Access | Yes incoming mail ---|--- Local Access | No Authentication Required | No Exploit publicly available | NA AFFECTED PRODUCTS Product | Version | Build | Solution ---|---|---|--- Symantec Brightmail AntiSpam | 6.0 | 1 | Update patch 162 Symantec Brightmail...
Solaris 2.6 (sparc) : 105703-29
CDE 1.2: dtlogin patch. Date this patch was last updated by Sun : Feb/14/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
Solaris 7 (sparc) : 108319-03
SunOS 5.7: /usr/bin/at patch. Date this patch was last updated by Sun : Jan/27/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...
FishCart Integer Overflow / Rounding Error
FishCartR is a popular full-featured multi-language open source e-commerce system. It is written in PHP4 and works with a variety of database engines. It has been in production for 6 years and is in active use in a number of countries. FishCart has developers in the US and western Europe. On 8...
Multiple incorrect permissions in QNX.
TOPIC: Multiple incorrect permissions in QNX. ADVISORY NR: 200202 DATE: Nov 13 2002 VULNERABILITY FOUND BY: 1; One Semicolon CONTACT INFORMATION: http://www.4os.org [email protected] STATUS: QNX Software Systems Ltd was contacted on November 11, 2002. I received prompt replies and was assured that this w...
Microsoft .NET Framework 3.0: x86 (KB928416)
Microsoft .NET Framework 3.0: x86 KB928416...