3343 matches found
DEBIAN-CVE-2012-5784
Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or...
CVE-2012-4485
Multiple cross-site scripting XSS vulnerabilities in the galleryformatterfieldformatterview functiuon in galleryformatter.tpl.php the Gallery formatter module before 7.x-1.2 for Drupal allow remote authenticated users with permissions to create a node or entity to inject arbitrary web script or...
Security fix for the ALT Linux 6 package perl-Encode version 2.47-alt0.M60P.1
Oct. 30, 2012 Vladimir Lettiev 2.47-alt0.M60P.1 - Backported to p6 including fix for CVE-2011-2939...
Security fix for the ALT Linux 7 package libexif version 0.6.21-alt1
Oct. 27, 2012 Dmitriy Khanzhin 0.6.21-alt1 - 0.6.21 - fixed CVE-2012-2812, CVE-2012-2813, CVE-2012-2814, CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841, CVE-2012-2845...
Security fix for the ALT Linux 6 package pidgin version 2.10.6-alt1.M60P.1
Oct. 25, 2012 Gleb Fotengauer-Malinovskiy 2.10.6-alt1.M60P.1 - 2.10.6 - p6 security update fix CVE-2012-3374...
Security fix for the ALT Linux 9 package mailman version 5:2.1.15-alt0.2
Oct. 17, 2012 Konstantin Lepikhov 5:2.1.15-alt0.2 - New upstream release 2.1.15. - Security fixes: + CVE-2011-0707, + many fixes in web interface against XSS attacks, + web admin interface has been hardened against CSRF attacks. - Re-merge debian patches...
Security fix for the ALT Linux 6 package freeradius version 2.1.10-alt3.M60P.1
Sept. 14, 2012 Vladimir Lettiev 2.1.10-alt3.M60P.1 - Security fix: CVE-2012-3547 - Fixed permissions for /etc/raddb/modules, /etc/raddb/sql/mysql, /etc/raddb/sql/postgresql dirs 640 - 750...
Security fix for the ALT Linux 7 package automake_1.10 version 1:1.10.3-alt2
Sept. 9, 2012 Dmitry V. Levin 1:1.10.3-alt2 - distdir.am distcheck: backported upstream fix for CVE-2012-3386. - aclocal: backported upstream fix for perl 5.16.0...
Security fix for the ALT Linux 10 package libtiff version 3.9.6-alt3
Aug. 27, 2012 Dmitry V. Levin 3.9.6-alt3 - Updated to Release-v3-9-6-8-g0f67777 fixes CVE-2012-2113 CVE-2012-2088 CVE-2012-3401...
CVE-2012-2584
Multiple cross-site scripting XSS vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with 1 the Cascading Style Sheets CSS expression property in conjunction with a CSS comment within the STYLE attribute of an IMG...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with 1 the Cascading Style Sheets CSS expression property in conjunction with a CSS comment within the STYLE attribute of an IMG...
CVE-2012-2584
Multiple cross-site scripting XSS vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with 1 the Cascading Style Sheets CSS expression property in conjunction with a CSS comment within the STYLE attribute of an IMG...
CVE-2012-2584
CVE-2012-2584 affects Alt-N MDaemon Free 12.5.4 with multiple XSS in email bodies: CSS expression usage (within STYLE on IMG or other elements) and innerHTML attributes in XML. Root cause is improper sanitization enabling script/HTML injection, leading to potential remote code execution-like impa...
Alt-N MDaemon free 12.5.4 - Persistent Cross-Site Scripting
!/usr/bin/python ''' Author: loneferret of Offensive Security Product: Alt-N MDaemon Free Version: 12.5.4 Vendor Site: http://www.altn.com/ Software Download: http://www.altn.com/Downloads/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT with...
Alt-N MDaemon Free 12.5.4 Stored XSS
Exploit for php platform in category web applications !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Alt-N MDaemon Free Version: 12.5.4 Vendor Site: http://www.altn.com/ Software Download: http://www.altn.com/Downloads/ Timeline: 29 May 2012: Vulnerability reported to CERT...
Alt-N MDaemon free 12.5.4 - Persistent Cross-Site Scripting
Alt-N MDaemon free 12.5.4 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Alt-N MDaemon Free Version: 12.5.4 Vendor Site: http://www.altn.com/ Software Download: http://www.altn.com/Downloads/ Timeline: 29 May 2012: Vulnerability reported t...
Security fix for the ALT Linux 9 package krb5 version 1.10.2-alt2
Aug. 7, 2012 Vitaly Kuznetsov 1.10.2-alt2 - CVE-2012-1015...
Security fix for the ALT Linux 8 package krb5 version 1.10.2-alt2
Aug. 7, 2012 Vitaly Kuznetsov 1.10.2-alt2 - CVE-2012-1015...