CVE-2004-2548

Multiple cross-site scripting XSS vulnerabilities in NetWin 1 SurgeMail before 2.0c and 2 WebMail allow remote attackers to inject arbitrary web script or HTML via a a URI containing the script, or b the username field in the login form. NOTE: it is possible that the first attack vector is...

security flaw

Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via 1 a negative offset value to the shmopwrite function, 2 an "integer overflow/underflow" in the pack function, or 3 an "integer...

RHEL 3 : XFree86 (RHSA-2004:612)

Updated XFree86 packages that fix several security flaws in libXpm are now available for Red Hat Enterprise Linux 3. XFree86 is an open source implementation of the X Window System. It provides the basic low level functionality which full fledged graphical user interfaces GUIs such as GNOME and K...

Moderate: Red Hat Security Advisory: XFree86 security update

Updated XFree86 packages that fix several security flaws in libXpm are now available for Red Hat Enterprise Linux 3. XFree86 is an open source implementation of the X Window System. It provides the basic low level functionality which full fledged graphical user interfaces GUIs such as GNOME and K...

Moderate: Red Hat Security Advisory: XFree86 security update

Updated XFree86 packages that fix several security flaws in libXpm are now available for Red Hat Enterprise Linux 2.1. XFree86 is an open source implementation of the X Window System. It provides the basic low level functionality which full fledged graphical user interfaces GUIs, such as GNOME an...

ISAKMPd/KAME/Racoon multiple bugs

Multiple bugs in RFC 2407-2409 realization...

Multiple XSS Vulnerabilities in Wordpress 1.2.1

Vendor : Wordpress URL : http://wordpress.org/ Version: Wordpress 1.2.1 Risk: : XSS Description WordPress is a state-of-the-art semantic personal publishing platform with a focus on aesthetics, web standards, and usability. ... Visit http://wordpress.org/ for detailed informations. Summary After ...

Important: Red Hat Security Advisory: Updated Itanium kernel packages resolve security issues

Updated Itanium kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 2.1. This is the sixth regular update. The Linux kernel handles the basic functions of the operating system. This is the sixth regular Itanium kernel update to Red Hat...

RHEL 2.1 / 3 : openmotif (RHSA-2004:537)

Updated openmotif packages that fix flaws in the Xpm image library are now available. OpenMotif provides libraries which implement the Motif industry standard graphical user interface. During a source code audit, Chris Evans and others discovered several stack overflow flaws and an integer overfl...

cups-lpr -- lppasswd multiple vulnerabilities

D. J. Bernstein reports that Bartlomiej Sieka has discovered several security vulnerabilities in lppasswd, which is part of CUPS. In the following excerpt from Bernstein's email, CVE names have been added for each issue: First, lppasswd blithely ignores write errors in fputsline,outfile at lines...

imlib -- xpm heap buffer overflows and integer overflows

Pavel Kankovsky reports: Imlib affected by a variant of CAN-2004-0782 too. I've discovered more vulnerabilities in Imlib 1.9.13. In particular, it appears to be affected by a variant of Chris Evans' libXpm flaw 1 CAN-2004-0782, see http://scary.beasts.org/security/CESA-2004-003.txt. Look at the...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix several security issues in Red Hat Enterprise Linux 3 are now available. The Linux kernel handles the basic functions of the operating system. This update includes fixes for several security issues: A missing serialization flaw in unixdgramrecvmsg was discovered...

Important: Red Hat Security Advisory: openmotif security update

Updated openmotif packages that fix flaws in the Xpm image library are now available. OpenMotif provides libraries which implement the Motif industry standard graphical user interface. During a source code audit, Chris Evans and others discovered several stack overflow flaws and an integer overfl...

Nucleus CMS < 3.15 Multiple Vulnerabilities

The remote host is running Nucleus CMS, an open source content management system. The remote version of this software is vulnerable to various flaws that may allow an attacker to perform a cross-site scripting attack using the remote host and to perform a SQL injection attack on the remote...

waraxe-2004-SA038.txt

================================================================================ waraxe-2004-SA038 ================================================================================ Multiple vulnerabilities in Event Calendar module for PhpNuke...

[waraxe-2004-SA#038 - Multiple vulnerabilities in Event Calendar module for PhpNuke]

================================================================================ waraxe-2004-SA038 ================================================================================ Multiple vulnerabilities in Event Calendar module for PhpNuke...

Skype buffer overflow

callto: URL buffer overflow...

Goollery < 0.04b Multiple Vulnerabilities

According to its self-reported version number, the instance of Goollery running on the remote host is affected by multiple cross-site scripting XSS vulnerabilities in the viewpic.php script. An unauthenticated, remote attacker can exploit these vulnerabilities, via a specially crafted request, to...

PostNuke Detection

The remote host is running PostNuke, a content manager system written in PHP. Development of Postnuke stopped in 2008. Security flaws will not be patched. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid15721; scriptversion"1.15";...

RHEL 2.1 / 3 : xpdf (RHSA-2004:592)

An updated xpdf package that fixes a number of integer overflow security flaws is now available. Xpdf is an X Window System based viewer for Portable Document Format PDF files. During a source code audit, Chris Evans and others discovered a number of integer overflow bugs that affected all versio...