CVE-2009-3962: Improper Input Validation

The management interface on the 2wire Gateway 1700HG, 1701HG, 1800HW, 2071, 2700HG, and 2701HG-T with software before 5.29.52 allows remote attackers to cause a denial of service reboot via a %0d%0a sequence in the page parameter to the xslt program on TCP port 50001, a related issue to...

[SECURITY] Fedora 10 Update: python-4Suite-XML-1.0.2-8.fc10

4Suite-XML is a suite of Python modules for XML and RDF processing. Its major components include the following: Ft.Xml.Domlette: A very fast, lightweight XPath-oriented DOM. Ft.Xml.XPath: An XPath 1.0 implementation for Domlette documents. Ft.Xml.Xslt: A robust XSLT 1.0 processor. Ft.Lib: Various...

Google Appliance ProxyStyleSheet Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Google...

Solaris Update for XML and XSLT libraries 125731-05

Check for the Version of XML and XSLT libraries OpenVAS Vulnerability Test Solaris Update for XML and XSLT libraries 125731-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...

Solaris Update for XML and XSLT libraries 125732-05

Check for the Version of XML and XSLT libraries OpenVAS Vulnerability Test Solaris Update for XML and XSLT libraries 125732-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...

Solaris Update for XML and XSLT libraries 125732-05

Check for the Version of XML and XSLT libraries OpenVAS Vulnerability Test Solaris Update for XML and XSLT libraries 125732-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...

Solaris Update for XML and XSLT libraries 125731-05

Check for the Version of XML and XSLT libraries OpenVAS Vulnerability Test Solaris Update for XML and XSLT libraries 125731-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...

SLES9: Security update for PHP4

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-zlib php4-shmop php4-ftp php4-filepro php4-mcrypt php4-servlet php4-gmp php4-bz2 php4-snmp php4-mysql php4-mimemagic php4 php4-pgsql modphp4-servlet...

SLES9: Security update for Security update PHP4

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache-modphp4 apache2-modphp4 modphp4 modphp4-apache2 modphp4-core modphp4-servlet php4 php4-bcmath php4-bz2 php4-calendar php4-ctype php4-curl php4-dba...

SLES9: Security update for PHP4

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache-modphp4 apache2-modphp4 modphp4 modphp4-apache2 modphp4-core modphp4-servlet php4 php4-bcmath php4-bz2 php4-calendar php4-ctype php4-curl php4-dba...

SLES9: Security update for PHP4

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-gmp php4-ldap php4-xslt php4-servlet php4-ftp php4-exif php4-devel php4-yp php4-shmop php4-iconv php4 php4-pear php4-sysvshm php4-mimemagic php4-curl...

RHEL 4 / 5 : java-1.5.0-bea (RHSA-2008:0244)

Updated java-1.5.0-bea packages that correct several security issues are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The BEA WebLogic JRockit 1.5.014 JRE and SDK conta...

Fedora Core 11 FEDORA-2009-8157 (xml-security-c)

The remote host is missing an update to xml-security-c announced via advisory FEDORA-2009-8157. OpenVAS Vulnerability Test $Id: fcore20098157.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8157 xml-security-c Authors: Thomas Reinke Copyright:...

Fedora Core 11 FEDORA-2009-8157 (xml-security-c)

The remote host is missing an update to xml-security-c announced via advisory FEDORA-2009-8157. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

[SECURITY] Fedora 11 Update: xml-security-c-1.5.1-1.fc11

The xml-security-c library is a C++ implementation of the XML Digital Signa ture specification. The library makes use of the Apache XML project's Xerces-C X ML Parser and Xalan-C XSLT processor. The latter is used for processing XPath and XSLT transforms...

openSUSE Security Update : opera (opera-366)

Opera 9.63 fixes the following security problems : - Manipulating text input contents can allow execution of arbitrary code - HTML parsing flaw can cause Opera to execute arbitrary code. - Long hostnames in file: URLs can cause execution of arbitrary code. - Script injection in feed preview can...

Design/Logic Flaw

The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read XML content from arbitrary web pages via a crafted document...

Code injection

The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which allows remote attackers to read 1 arbitrary local files and 2 files from different security zones via unspecified vectors...

CVE-2009-1700

The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read XML content from arbitrary web pages via a crafted document...

CVE-2009-1713

The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which allows remote attackers to read 1 arbitrary local files and 2 files from different security zones via unspecified vectors...