Moderate: Red Hat Security Advisory: mod_auth_openidc security update

An update for modauthopenidc is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Solaris 10 (x86) : 141553-04

SunOS 5.10x86: Apache 2 modperl Perl cgi. Date this patch was last updated by Sun : Apr/20/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (sparc) : 141552-04

SunOS 5.10: Apache 2 modperl Perl cgi pat. Date this patch was last updated by Sun : Apr/20/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2005-3392

Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safemode and openbasedir directives...

Apache 2.0.x mod_ssl Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11154/info Apache 2.x modssl is reported prone to a remote denial of service vulnerability. This issue likely exists because the application fails to handle exceptional conditions. The vulnerability originates in the...

openSUSE Security Update : apache2 (openSUSE-SU-2011:0993-1)

This update fixes a remote denial of service bug memory exhaustion in the Apache 2 HTTP server, that could be triggered by remote attackers using multiple overlapping Request Ranges . CVE-2011-3192 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

ProtonMail.ch Header Injection / CSRF

SecurityAdvisory ---------------- Time Line Vulnerability ------------------------------- -Day 05-05-2014 Security Advisory = No response -Days 08 12 19-05-2014 Multiples Advisories = No Response -Day 20-05-2014 Full Disclosure Alerts summary -CRLF injection/HTTP response splitting...

SuSE 10 Security Update : Apache (ZYPP Patch Number 7721)

This update fixes a remote denial of service bug memory exhaustion in the Apache 2 HTTP server, that could be triggered by remote attackers using multiple overlapping Request Ranges. CVE-2011-3192 It also fixes some non-security bugs : - take LimitRequestFieldsize config option into account when...

Ipho2010 SQL Injection

|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ | =======================================================================...

SuSE 11 Security Update : Apache 2 (SAT Patch Number 2293)

The following bugs have been fixed : - When using a multithreaded MPM Apache could leak memory of requests handled by a different thread when processing subrequests. CVE-2010-0434 - Specially crafted requests could crash modproxyajp. CVE-2010-0408 %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 11 / 11.1 Security Update : Apache 2 (SAT Patch Numbers 2880 / 2881)

PHP was updated to version 5.2.14 to fix serveral security issues : - CVE-2010-1860 - CVE-2010-1862 - CVE-2010-1864 - CVE-2010-1914 - CVE-2010-1915 - CVE-2010-1917 - CVE-2010-2093 - CVE-2010-2094 - CVE-2010-2097 - CVE-2010-2100 - CVE-2010-2101 - CVE-2010-2190 - CVE-2010-2191 - CVE-2010-2225 -...

SuSE 10 Security Update : Apache 2 (ZYPP Patch Number 6572)

This update of the Apache webserver fixes various security issues : - the option IncludesNOEXEC could be bypassed via .htaccess. CVE-2009-1195 - modproxy could run into an infinite loop when used as reverse proxy. CVE-2009-1890 - moddeflate continued to compress large files even after a network...

SuSE 10 Security Update : Apache 2 (ZYPP Patch Number 6987)

The following bugs have been fixed : When using a multi-threaded MPM apache could leak memory of requests handled by a different thread when processing subrequests CVE-2010-0434. Specially crafted requests could crash modproxyajp. CVE-2010-0408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

UK One Media CMS Error Based SQL Injection

O / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ | | | | | UK One Media CMS id Error Based SQL Injection Vulnerability | | | | | | | | Summary: Content Management System PHP+MySQL | | ...

UK One Media CMS - id Error-Based SQL Injection

UK One Media CMS - id Error-Based SQL Injection O / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ | | | | | UK One Media CMS id Error Based SQL Injection Vulnerability | | | | | | | |...

SuSE9 Security Update : Apache 2 (YOU Patch Number 12613)

The following bugs have been fixed : - Integer overflows in libapr could potentially be exploited to execute arbitrary code. CVE-2009-2412 - Specially crafted XML documents cause apache to consume large amounts of memory. CVE-2009-1955 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

SuSE 10 Security Update : Apache 2 (ZYPP Patch Number 6984)

The following bugs have been fixed : When using a multi-threaded MPM apache could leak memory of requests handled by a different thread when processing subrequests CVE-2010-0434. Specially crafted requests could crash modproxyajp. CVE-2010-0408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SLES9: Security update for Apache 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2 apache2-devel apache2-doc apache2-example-pages apache2-prefork apache2-worker libapr0 For more information, please visit the referenced security...

SLES11: Security update for Apache 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2 apache2-doc apache2-example-pages apache2-prefork apache2-utils apache2-worker More details may also be found by searching for the SuSE Enterprise...

SLES9: Security update for Apache 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2 apache2-devel apache2-doc apache2-example-pages apache2-prefork apache2-worker libapr0 For more information, please visit the referenced security...