295 matches found
Security fix for the ALT Linux 9 package glibc version 6:2.17-alt6
Jan. 11, 2014 Dmitry V. Levin 6:2.17-alt6 - Backported upstream fixes for sw bugs: 14547, 14699, 15003, 15014, 15073, 15122, 15160, 15234, 15330, 15465, 15736, 15754, 15759, 15855, 15856, 15857, 15917, 16038, 16072 including fixes for CVE-2012-4412, CVE-2012-4424, CVE-2013-4237, CVE-2013-4332,...
CVE-2013-6386
Removed by vendor...
RedHat Update for libguestfs RHSA-2013:1536-02
Check for the Version of libguestfs OpenVAS Vulnerability Test RedHat Update for libguestfs RHSA-2013:1536-02 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
[IPv6 Disable Tool] Command-line Software to Enable or Disable IPv6 on Windows
IPv6 Disable is the free command-line tool to quickly Enable or Disable IPv6 Internet Protocol version 6 on your Windows system. It automatically checks for the current status of IPv6 and then enable/disable it accordingly. It is simple & easy to use tool. Also being a command-line based tool mak...
Microsoft Internet Explorer Multiple Vulnerabilities (2862772)
This host is missing a critical security update according to Microsoft Bulletin MS13-059. OpenVAS Vulnerability Test $Id: secpodms13-059.nasl 6079 2017-05-08 09:03:33Z teissa $ Microsoft Internet Explorer Multiple Vulnerabilities 2862772 Authors: Thanga Prakash S Copyright: Copyright c 2013 SecPo...
ESA-2013-035: EMC Avamar Client Improper Certificate Validation Vulnerability
ESA-2013-035.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-035: EMC Avamar Client Improper Certificate Validation Vulnerability EMC Identifier: ESA-2013-035 CVE Identifier: CVE-2013-0945 Severity Rating: CVSS v2 Base Score: 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C Affected products: EMC Avamar...
High-risk vulnerabilities CVE-2 0 1 3-0 0 2 7 EXP, the impact of IE on all versions-bug warning-the black bar safety net
Microsoft Internet Explorer handles CPasteComma there is a use-after-free error allows constructing a malicious WEB page and entice a user to parse, can be the application context to execute arbitrary code. CVE number CVE-2 0 1 3-0 0 2 7, The impact of the version as follows: Microsoft Internet...
RedHat Update for kernel RHSA-2013:0630-01
Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2013:0630-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Oracle Java SE Multiple Vulnerabilities -02 Feb 13 (Windows)
This host is installed with Oracle Java SE and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoraclejavasemultvuln02feb13win.nasl 28074 2013-02-22 13:41:39Z feb$ Oracle Java SE Multiple Vulnerabilities -02 Feb 13 Windows Authors: Arun Kallavi Copyright: Copyright c 20...
Drupal 6.x < 6.28 / 7.x < 7.19 Multiple Vulnerabilities
The remote web server is running a version of Drupal that is 6.x prior to 6.28 or 7.x prior to 7.19. It is, therefore, potentially affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists due to properly sanitized user-supplied input to certain Drupal JavaScript...
CVE-2012-5651
Removed by vendor...
SA-CONTRIB-2012-169 - Email Field - Cross Site Scripting and Access bypass
The email module provides a field type CCK / FieldAPI for storing email addresses and a formatter to output the email address as a link to a contact form. The contact form formatter allows a site visitor to email the stored address without letting them see what that e-mail address is. Access bypa...
Microsoft Internet Explorer Remote Code Execution Vulnerability (2757760)
This host is missing a critical security update according to Microsoft Bulletin MS12-063. OpenVAS Vulnerability Test $Id: gbmsiecodeexecvulnvuln.nasl 5958 2017-04-17 09:02:19Z teissa $ Microsoft Internet Explorer Remote Code Execution Vulnerability 2757760 Authors: Rachana Shetty Copyright:...
SA-CONTRIB-2012-133 - Taxonomy Image - Cross Site Scripting (XSS) & Arbitrary PHP code execution
The taxonomyimage module allows site administrators to associate images with taxonomy terms. The module did not sufficiently filter retrieval of taxonomy images, allowing users to bypass Drupal's normal file upload protections to install malicious HTML or executable code to the server. This...
SA-CONTRIB-2012-134 - Views - Privilege Escalation
The Views module provides a flexible method for Drupal site designers to control how lists and tables of content, users, taxonomy terms and other data are presented. The module incorrectly modifies the global user object in some situations when a view has a uid argument and performs validation on...
SA-CONTRIB-2012-135 - CAPTCHA - Insufficient anti-automation prevention
This module enables you to protect website forms using a CAPTCHA. A CAPTCHA is a test which attempts to differentiate between a human and an automated bot or script. The module doesn't ensure that test submissions have a single-use unique token. This means that web robots could reuse a single...
SA-CONTRIB-2012-123 - Shibboleth authentication - Access Bypass
The Shibboleth authentication module provides user authentication with Shibboleth single sign-on systems both v1.3 and v2.0 as well as some authorization features automatic role assignment based on Shibboleth attributes. The module doesn't sufficiently confirm the user's active status in Drupal...
SA-CONTRIB-2012-116 - Subuser - Cross Site Request Forgery (CSRF) and Access Bypass
The Subuser module allows users to be given the permission to create subusers. The subusers may then be automatically assigned a role or roles. The parent user then has the ability to manage the subusers they have created. A parent user is allowed to assume the role of a subuser they created swit...
SA-CONTRIB-2012-113 - Drupal Commons - Access Bypass
Drupal Commons is a ready-to-use solution for building either internal or external communities. The Drupal Commons feature a central module in the distribution includes a listing of recent comments on discussions. This listing of comments is powered by a view that doesn't fully enforce node acces...
SA-CONTRIB-2012-065 - Sitedoc - Information disclosure
CVE: CVE-2012-2302 This module enables you to display a plethora of information about your site's structure. Optionally, the information may be saved into a file for later comparison. The module doesn't sufficiently verify that the saved file is protected by the Private File System. This...