[SA13935] Help Desk Reloaded Unspecified Login Vulnerability

TITLE: Help Desk Reloaded Unspecified Login Vulnerability SECUNIA ADVISORY ID: SA13935 VERIFY ADVISORY: http://secunia.com/advisories/13935/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: Help Desk Reloaded 3.x http://secunia.com/product/4545/ DESCRIPTION: A...

[SECURITY] [DSA 649-1] New xtrlock packages fix authentication bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 649-1 [email protected] http://www.debian.org/security/ Martin Schulze January 20th, 2005 http://www.debian.org/security/faq -...

DSA-639-1 mc - several

Bulletin has no description...

DSA-629-1 krb5 - buffer overflow

Bulletin has no description...

[SA13654] Linux Kernel SACF Instruction Privilege Escalation Vulnerability

TITLE: Linux Kernel SACF Instruction Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA13654 VERIFY ADVISORY: http://secunia.com/advisories/13654/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: Linux Kernel 2.6.x http://secunia.com/product/2719/...

Important: Red Hat Security Advisory: acroread security update

An updated Adobe Acrobat Reader package that fixes a security issue is now available. The Adobe Acrobat Reader browser allows for the viewing, distributing, and printing of documents in portable document format PDF. iDEFENSE has reported that Adobe Acrobat Reader 5.0.9 contains a buffer overflow...

Sybase ASE 12.5.2 vulnerabilities

Sherief Hammad of NGSSoftware has discovered three high risk security vulnerabilities in Sybase Adaptive Server Enterprise 12.5.2. Sybase ASE versions 12.5.2 and older are vulnerable to these issues. These vulnerabilities have now been fixed by Sybase in the Sybase ASE 12.5.3 interim release whic...

[SA13556] Email Sanitizer Unspecified MIME Denial of Service Vulnerability

TITLE: Email Sanitizer Unspecified MIME Denial of Service Vulnerability SECUNIA ADVISORY ID: SA13556 VERIFY ADVISORY: http://secunia.com/advisories/13556/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: Email Sanitizer 1.x http://secunia.com/product/4436/ DESCRIPTION: A...

[SA13600] Namazu "namazu.cgi" Cross-Site Scripting Vulnerability

TITLE: Namazu "namazu.cgi" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA13600 VERIFY ADVISORY: http://secunia.com/advisories/13600/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Namazu 2.x http://secunia.com/product/4441/ DESCRIPTION: A vulnerabili...

phpMyAdmin: Multiple vulnerabilities

Background phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL databases from a web-browser. Description Nicolas Gregoire exaprobe.com has discovered two vulnerabilities that exist only on a webserver where PHP safemode is off. These vulnerabilities could lead to...

[SA13413] IlohaMail Unspecified Vulnerability

TITLE: IlohaMail Unspecified Vulnerability SECUNIA ADVISORY ID: SA13413 VERIFY ADVISORY: http://secunia.com/advisories/13413/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: IlohaMail 0.8.x http://secunia.com/product/1039/ DESCRIPTION: A vulnerability with an unknown...

[SA12856] Ansel "image" SQL Injection and Script Insertion Vulnerabilities

TITLE: Ansel "image" SQL Injection and Script Insertion Vulnerabilities SECUNIA ADVISORY ID: SA12856 VERIFY ADVISORY: http://secunia.com/advisories/12856/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Ansel 2.x...

[SA13300] PHPNews "mid" Parameter SQL Injection Vulnerability

TITLE: PHPNews "mid" Parameter SQL Injection Vulnerability SECUNIA ADVISORY ID: SA13300 VERIFY ADVISORY: http://secunia.com/advisories/13300/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: PHPNews 1.x http://secunia.com/product/4313/ DESCRIPTION: A...

[SA13261] SecretSanta Security Bypass Vulnerability

TITLE: SecretSanta Security Bypass Vulnerability SECUNIA ADVISORY ID: SA13261 VERIFY ADVISORY: http://secunia.com/advisories/13261/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: SecretSanta 1.x http://secunia.com/product/4304/ DESCRIPTION: A vulnerability has been...

Firefox < 1.0.0 Multiple Vulnerabilities

The installed version of Firefox is earlier than 1.0.0. Such versions have multiple vulnerabilities that could result in a denial of service, local file disclosure, or password disclosure. These vulnerabilities are due to the fact that Firefox does handle the tag correctly. C Tenable Network...

[SA13135] SQLgrey Postfix greylisting service Unspecified SQL Injection

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

[SECURITY] [DSA 581-1] New xpdf packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 581-1 [email protected] http://www.debian.org/security/ Martin Schulze November 2nd, 2004 http://www.debian.org/security/faq -...

Mandrake Linux Security Advisory : squid (MDKSA-2004:112)

iDEFENSE discovered a Denial of Service vulnerability in squid version 2.5.STABLE6 and previous. The problem is due to an ASN1 parsing error where certain header length combinations can slip through the validations performed by the ASN1 parser, leading to the server assuming there is heap...

[SA12831] WeHelpBUS Arbitrary Command Execution Vulnerability

TITLE: WeHelpBUS Arbitrary Command Execution Vulnerability SECUNIA ADVISORY ID: SA12831 VERIFY ADVISORY: http://secunia.com/advisories/12831/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: WeHelpBUS 0.x http://secunia.com/product/4057/ DESCRIPTION: A vulnerability ha...

[SA12813] phpMyAdmin Unspecified Arbitrary Command Execution Vulnerability

TITLE: phpMyAdmin Unspecified Arbitrary Command Execution Vulnerability SECUNIA ADVISORY ID: SA12813 VERIFY ADVISORY: http://secunia.com/advisories/12813/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: phpMyAdmin 2.x http://secunia.com/product/1720/ DESCRIPTION: A...