SLES9: Security update for libpng

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libpng libpng-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5043440...

SLES9: Security update for PostgreSQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql-libs postgresql-pl postgresql-devel postgresql-docs postgresql postgresql-server postgresql-contrib For more information, please visit the...

SLES9: Security update for libxml2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libxml2 libxml2-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5055249...

SLES9: Security update for libxml2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libxml2 libxml2-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5055249...

SLES9: Security update for libpng

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libpng-devel libpng For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5023140...

SLES9: Security update for Python

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: python-doc-pdf python-tk python-gdbm python-idle python-xml python-devel python python-mpz python-demo python-doc python-curses For more information, please...

SLES9: Security update for Mozilla suite

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla-hu mozilla-deat mozilla-mail mozilla-irc mozilla-dom-inspector mozilla-venkman mozilla-devel mozilla-calendar mozilla-cs mozilla For more information...

SLES9: Security update for id3lib

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: id3lib-examples id3lib id3lib-devel For more information, please visit the referenced security advisories. More details may also be found by searching for...

SLES9: Security update for opensc

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: opensc opensc-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5034600...

SLES9: Security update for cyrus-sasl

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cyrus-sasl cyrus-sasl-crammd5 cyrus-sasl-devel cyrus-sasl-digestmd5 cyrus-sasl-gssapi cyrus-sasl-otp cyrus-sasl-plain For more information, please visit the...

SLES9: Security update for libxml.rpm

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libxml libxml-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5058211...

openSUSE 10 Security Update : bytefx-data-mysql (bytefx-data-mysql-6365)

The XML signature checker did not impose limits on the minimum length of HMAC signatures in XML documents. Attackers could therefore specify a length of e.g. 1 to make the signature appear valid and therefore effectively bypass verification of XML documents. %NASLMINLEVEL 70300 C Tenable Network...

openSUSE 10 Security Update : libmysqlclient-devel (libmysqlclient-devel-6360)

the COMCREATEDB and COMDROPDB suffered from format string vulnerabilities CVE-2009-2446 - the command line client was prone to cross-site scripting XSS attacks CVE-2008-4456 - fix slave reconnect %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

openSUSE 10 Security Update : Xerces-c (Xerces-c-6430)

The Xerces-c package was vulnerable to various bugs while parsing XML. CVE-2009-1885 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update Xerces-c-6430. The text description of this plugin is C SUS...

openSUSE 10 Security Update : libldap-2_4-2 (libldap-2_4-2-6488)

This update of openldap2 makes SSL certificate verification more robust against uses of the special character \0 in the subjects name. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE 10 Security Update : libtiff-devel (libtiff-devel-6406)

This update of the tiff package fixes various integer overflows in the tools. CVE-2009-2347 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libtiff-devel-6406. The text description of this...

Cross site scripting

Cross-site scripting XSS vulnerability in the variable editor in the Devel module 5.x before 5.x-1.2 and 6.x before 6.x-1.18, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a variable name...

CVE-2009-3435

Cross-site scripting XSS vulnerability in the variable editor in the Devel module 5.x before 5.x-1.2 and 6.x before 6.x-1.18, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a variable name...

CVE-2009-3435

Cross-site scripting XSS vulnerability in the variable editor in the Devel module 5.x before 5.x-1.2 and 6.x before 6.x-1.18, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a variable name...

CVE-2009-3435

The CVE-2009-3435 entry concerns a Cross-site Scripting (XSS) flaw in the Drupal Devel module’s variable editor. The issue affects Drupal module versions: 5.x prior to 5.x-1.2 and 6.x prior to 6.x-1.18, where an attacker could inject arbitrary script/HTML via a variable name. The vulnerability sc...