[SECURITY] [DLA 251-1] zendframework security update

Package : zendframework Version : 1.10.6-1squeeze3 CVE ID : CVE-2012-6531 CVE-2012-6532 CVE-2014-2681 CVE-2014-2682 CVE-2014-2683 CVE-2014-2684 CVE-2014-2685 CVE-2014-4914 CVE-2014-8088 CVE-2014-8089 CVE-2015-3154 Debian Bug : 743175 754201 Several vulnerabilities were found in the Zend PHP...

DLA-233-1 clamav - security update

Bulletin has no description...

[SECURITY] [DLA 120-2] xorg-server regression update

Package : xorg-server Version : 2:1.7.7-18+deb6u3 CVE ID : CVE-2015-3418 Debian Bug : 774308 Andreas Cord-Landwehr reported an issue where the X.Org Xserver would often crash with an arithmetic exception when maximizing application windows. This issue CVE-2015-3418 is a regression which got...

[SECURITY] [DLA 218-1] xorg-server security update

Package : xorg-server Version : 2:1.7.7-18+deb6u2 CVE ID : CVE-2015-0255 Olivier Fourdan discovered that missing input validation in the Xservers handling of XkbSetGeometry requests may result in an information leak or denial of service. This upload to Debian squeeze-lts fixes the issue by not...

[SECURITY] [DLA 217-1] xdg-utils security update

The two below CVE issues have recently been fixed in Debian squeeze-lts: CVE-2014-9622 John Houwer discovered a way to cause xdg-open, a tool that automatically opens URLs in a users preferred application, to execute arbitrary commands remotely. CVE-2015-1877 Jiri Horner discovered a way to cause...

DLA-217-1 xdg-utils - security update

Bulletin has no description...

DLA-218-1 xorg-server - security update

Bulletin has no description...

DLA-180-1 gnutls26 - security update

Bulletin has no description...

DLA-152-1 postgresql-8.4 - new minor release

Bulletin has no description...

DLA-91-1 tomcat6 - security update

Bulletin has no description...

DLA-69-1 exuberant-ctags - security update

Bulletin has no description...

DLA-24-1 poppler - security update

Bulletin has no description...

DLA-0014-1 phpmyadmin - security update

Bulletin has no description...

PlumeCMS <= 1.2.4 CSRF Vulnerability

No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : PlumeCMS = 1.2.4 CSRF Vulnerability Date : 20-02-2012 Author : Ivano Binetti http://ivanobinetti.com Software link ...

SocialCMS 1.0.2 - CSRF Vulnerability

No description provided by source. +-------------------------------------------------------------------------+ Exploit Title : Socialcms CSRF Vulnerability Date : 16-02-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://socialcms.com Software link :...

PlumeCMS <= 1.2.4 - Multiple Persistent XSS

No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : PlumeCMS = 1.2.4 Multiple Persistent XSS Date : 04-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com...

Axous 1.1.1 - Multiple Vulnerabilities (CSRF - Persistent XSS)

No description provided by source. +-----------------------------------------------------------------------------------------------------------+ Exploit Title : Axous 1.1.1 Multiple Vulnerabilities CSRF - Persistent XSS Date : 30-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software...

CKEditor 4.0.1 - Multiple Vulnerabilities

No description provided by source. =========================================== Vulnerable Software: ckeditor 4.0.1 standard Download: http://download.cksource.com/CKEditor/CKEditor/CKEditor%204.0.1/ckeditor4.0.1standard.zip Vulns: Full Path Disclosure && XSS...

Xoops 2.5.4 - Blind SQL Injection

No description provided by source. ------------------------------------------ Xoops 2.5.4 Blind SQL Injection ------------------------------------------ Dork: Powered by XOOPS 2.5.4 Download: http://sourceforge.net/projects/xoops/ Date: 10/12/2011 Author: blkhtc0rp Mail: blkhtc0rpatyahoodotcom...

CVE-2014-3127

dpkg 1.15.9 on Debian squeeze introduces support for the "C-style encoded filenames" feature without recognizing that the squeeze patch program lacks this feature, which triggers an interaction error that allows remote attackers to conduct directory traversal attacks and modify files outside of t...