52 matches found
ikiwiki -- multiple vulnerabilities
Mitre reports: ikiwiki 3.20161219 does not properly check if a revision changes the access permissions for a page on sites with the git and recentchanges plugins and the CGI interface enabled, which allows remote attackers to revert certain changes by leveraging permissions to change the page...
Moderate: Red Hat Security Advisory: squid security update
An update for squid is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Fedora Update for perl-CGI-Simple FEDORA-2011-0653
Check for the Version of perl-CGI-Simple OpenVAS Vulnerability Test Fedora Update for perl-CGI-Simple FEDORA-2011-0653 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...
Fedora Update for perl-CGI-Simple FEDORA-2011-0631
Check for the Version of perl-CGI-Simple OpenVAS Vulnerability Test Fedora Update for perl-CGI-Simple FEDORA-2011-0631 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...
[SECURITY] Fedora 14 Update: perl-CGI-Simple-1.113-1.fc14
Simple totally OO CGI interface that is CGI.pm compliant...
[SECURITY] Fedora 13 Update: perl-CGI-Simple-1.113-1.fc13
Simple totally OO CGI interface that is CGI.pm compliant...
Debian DSA-1882-1 : xapian-omega - missing input sanitization
It was discovered that xapian-omega, a CGI interface for searching xapian databases, is not properly escaping user-supplied input when printing exceptions. An attacker can use this to conduct cross-site scripting attacks via crafted search queries resulting in an exception and steal potentially...
[SECURITY] [DSA 1882-1] New xapian-omega packages fix cross-site scripting
-------------------------------------------------------------------------- Debian Security Advisory DSA-1882-1 [email protected] http://www.debian.org/security/ Nico Golde September 9th, 2009 http://www.debian.org/security/faq -...
DSA-1882-1 xapian-omega - cross-site scripting
Bulletin has no description...
HP OpenView Network Node Manager multiple security vulnerabilities
Multiple vulnerabilities in CGI interface...
HP OpenView Network Node Manager 6.10 - SNMP Denial of Service
source: https://www.securityfocus.com/bid/1713/info The OverView5 CGI interface by default is shipped with HP Openview Node Manager. HP Openview Node Manager can be compromised due to an unchecked buffer. By sending a specially crafted GET request comprised of 136 bytes to the web services defaul...
CVSweb Detection
CVSweb is a web interface for a CVS repository. It allows users to browse through the history of the source code of a given project. If your environement contains sensitive source code, then access to this CGI should be password-protected. C Tenable Network Security, Inc. include"compat.inc";...