Remote File Upload Vulnerability in WordPress Ultimate Product Catalogue Plugin

Product Description: ------------------- Ultimate Product Catalog plugin is designed to help WordPress sites administrators display products quickly and easily in an attractive and customizable layout, making your catalogue easy to browse, sort and update with categories, sub-categories, and tags...

Fedora 20 : perl-DBD-Firebird-1.19-1.fc20 (2015-5601)

DBD::Firebird 1.19 2015-03-22 =============================== - Fix $VERSION in Firebird.pm - Fix typo in ISCPASSWORD spelling - Positive logic and early return - Allow re-executing/fetch on prepared sth RT92810, Tux - Add rests for $dbh-Name and others - Implement $dbh-Name - Fix attributions to...

DSA-3082-1 flac - security update

Bulletin has no description...

Debian Security Advisory DSA 2715-1 (puppet - code execution)

It was discovered that puppet, a centralized configuration management system, did not correctly handle YAML payloads. A remote attacker could use a specially-crafted payload to execute arbitrary code on the puppet master. OpenVAS Vulnerability Test $Id: deb2715.nasl 6611 2017-07-07 12:07:20Z...

DSA-2684-1 libxrandr - several

Bulletin has no description...

DSA-2636-1 xen - several

Bulletin has no description...

DSA-2350-1 freetype - missing input sanitising

Bulletin has no description...

DSA-2335-1 man2html - missing input sanitization

Bulletin has no description...

vsftpd FTP Server "ls.c"远程拒绝服务漏洞

BUGTRAQ ID: 46617 CVE ID: CVE-2011-0762 vsftpd是Very Secure FTP daemon的缩写，是UNIX类平台上安全的FTP服务器。 vsftpd在处理ls.c时存在远程拒绝服务漏洞，远程攻击者可利用此漏洞造成受影响应用程序崩溃，拒绝服务合法用户。 Vsftpd 2.3.2 Vsftpd 2.3 厂商补丁： Vsftpd ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://vsftpd.beasts.org/ include stdio.h include stdlib.h include...

Fedora 11 : bournal-1.4.1-1.fc11 (2010-3301)

Sat Feb 27 2010 Fabian Affolter - 1.4.1-1 - Updated URL and source URL - Updated to new upstream version 1.4.1 to fix 568440 CVE-2010-0118, CVE-2010-0119 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

[Backports-security-announce] Security update for dovecot

Jaldhar H. Vyas uploaded new packages which fix the following problem: DSA-1892-1 CVE-2009-2632, CVE-2009-3235 Multiple stack-based buffer overflows in the Sieve plugin in Dovecot For the etch-backports distribution the problem has been fixed in version 1.0.15-2.3+lenny1bpo40+1 For the...

ikiwiki Teximg Plugin TeX Command Arbitrary File Disclosure Vulnerability

ikiwiki is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-1849-1 xml-security-c - signature forgery

Bulletin has no description...

Debian Security Advisory DSA 1829-1 (sork-passwd-h3)

The remote host is missing an update to sork-passwd-h3 announced via advisory DSA 1829-1. OpenVAS Vulnerability Test $Id: deb18291.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1829-1 sork-passwd-h3 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

DSA-1351-1 bochs - buffer overflow

Bulletin has no description...

DSA-1327-1 gsambad - insecure temporary files

Bulletin has no description...

DSA-883-1 thttpd - insecure temporary file

Bulletin has no description...

Debian DSA-683-1 : postgresql - buffer overflows

Several buffer overflows have been discovered in PL/PgSQL as part of the PostgreSQL engine which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Debian DSA-680-1 : htdig - unsanitised input

Michael Krax discovered a cross site scripting vulnerability in ht://dig, a web search system for an intranet or small internet. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-680. The te...

[SECURITY] [DSA 667-1] New PostgreSQL packages fix arbitrary library loading

-------------------------------------------------------------------------- Debian Security Advisory DSA 667-1 [email protected] http://www.debian.org/security/ Martin Schulze February 4th, 2005 http://www.debian.org/security/faq -...