Update of jcaptcha

Update version of jcaptcha that we use...

PT-2009-1016 · Xmlsoft +2 · Libxml +3

Name of the Vulnerable Software and Affected Versions: libxml2 versions 2.5.10 through 2.6.32 libxml version 1.8.17 Description: The issue allows context-dependent attackers to cause a denial of service, resulting in an application crash, via crafted Notation or Enumeration attribute types in an...

openSUSE Security Update : gvim (gvim-561)

The VI Improved editor vim was updated to version 7.2.108 to fix various security problems and other bugs. CVE-2008-4677: The netrw plugin sent credentials to all servers. CVE-2009-0316: The python support used a search path including the current directory, allowing code injection when python cod...

Movable Type access restriction bypass vulnerability

Overview Movable Type contains an access restriction bypass vulnerability. Movable Type, a web log system from Six Apart KK, contains a vulnerability that allows a remote attacker to bypass access restrictions. A successful attack requires mt-wizard.cgi not to be deleted after initial setup. For...

HP Systems Insight Manager Unauthorized Access Vulnerability (Linux)

This host is running HP Systems Insight Manager SIM and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbhpsimunauthaccessvulnlin.nasl 4218 2016-10-05 14:20:48Z teissa $ HP Systems Insight Manager Unauthorized Access Vulnerability Linux Authors: Chandan S Copyright:...

php security and bug fix update

4.3.9-3.22.12 - set higher memorylimit in /usr/bin/pear 263501 4.3.9-3.22.11 - update to PEAR 1.4.9, matching RHEL-5 263501 bundle XMLRPC-1.5.0, ConsoleGetopt-1.2, ArchiveTar-1.3.1 fix paths in default pear.conf, installed PEAR registry replace /usr/bin/pear et al with simpler wrapper scripts...

projectpier-xssxsrf.txt

====================================================================== ProjectPier Impact: Cross Site Scripting Cross Site Request Forgery Status: patch available ------------------------------ Affected software description: ------------------------------ Application: ProjectPier Version: = 0.80...

PT-2008-2278

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions prior to 8.1.2 Description The issue concerns multiple unspecified vulnerabilities in Adobe Reader and Acrobat. The impact and attack vectors of these vulnerabilities are unknown. Recommendations For versions...

PT-2006-5462 · Phpopenchat · Phpopenchat

Name of the Vulnerable Software and Affected Versions: phpopenchat versions prior to 3.0.2 Description: The issue allows remote attackers to execute arbitrary PHP code via the sourcedir parameter in the contrib/yabbse/poc.php file. A dispute regarding this issue was raised by a third-party...

PT-2005-2892 · Silvercity · Silvercity

Name of the Vulnerable Software and Affected Versions: SilverCity versions prior to 0.9.5-r1 Description: The issue allows local users to execute arbitrary code due to the installation of certain files with read and write world permissions. The affected files include cgi-styler-form.py,...

[SA14746] Smart Cache Forwarder Denial of Service Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Smart Cache Forwarder Denial of Service Vulnerability...

[SA14372] ArGoSoft FTP Server "SITE COPY" Shortcuts Security Issue

TITLE: ArGoSoft FTP Server "SITE COPY" Shortcuts Security Issue SECUNIA ADVISORY ID: SA14372 VERIFY ADVISORY: http://secunia.com/advisories/14372/ CRITICAL: Less critical IMPACT: Unknown WHERE: From remote SOFTWARE: ArGoSoft FTP Server 1.4.x http://secunia.com/product/2260/ DESCRIPTION: Cirpian...

[SA14342] IRM LDAP Login Security Bypass Vulnerability

TITLE: IRM LDAP Login Security Bypass Vulnerability SECUNIA ADVISORY ID: SA14342 VERIFY ADVISORY: http://secunia.com/advisories/14342/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: IRM 1.x http://secunia.com/product/4681/ DESCRIPTION: Fulvio Civitareale has...

[SA14362] phpBB Avatar Functions Information Disclosure and Deletion

TITLE: phpBB Avatar Functions Information Disclosure and Deletion SECUNIA ADVISORY ID: SA14362 VERIFY ADVISORY: http://secunia.com/advisories/14362/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of sensitive information WHERE: From remote SOFTWARE: phpBB 2.x...

[SA14009] BIND "q_usedns" Array Buffer Overflow Vulnerability

TITLE: BIND "qusedns" Array Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA14009 VERIFY ADVISORY: http://secunia.com/advisories/14009/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: ISC BIND 8.x.x http://secunia.com/product/76/ DESCRIPTION: A vulnerability has been...

sphpBlog037.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: Simple PHP Blog directory traversal vulnerability Vulnerability discovery: Madelman Date: 02/01/2005 Severity: Moderate Summary: - -------- I started this project because I wanted a dead-simple blog. Something that didn't require a database, us...

[SA13110] eGroupWare Unspecified "JiNN" Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

[SA13028] Shadow "passwd_check()" Security Bypass Vulnerability

TITLE: Shadow "passwdcheck" Security Bypass Vulnerability SECUNIA ADVISORY ID: SA13028 VERIFY ADVISORY: http://secunia.com/advisories/13028/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system SOFTWARE: Shadow 4.x http://secunia.com/product/4190/ DESCRIPTION: Martin Schulze has...

[SA12794] The ASN.1 Compiler Unspecified Security Issues

TITLE: The ASN.1 Compiler Unspecified Security Issues SECUNIA ADVISORY ID: SA12794 VERIFY ADVISORY: http://secunia.com/advisories/12794/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: The ASN.1 Compiler 0.x http://secunia.com/product/4038/ DESCRIPTION: Two security...

RHEL 2.1 : xchat (RHSA-2002:124)

A security issue in XChat allows a malicious server to execute arbitrary commands. XChat is a popular cross-platform IRC client. Versions of XChat prior to 1.8.9 do not filter the response from an IRC server when a /dns query is executed. Because XChat resolves hostnames by passing the configured...