Fedora 16 : zabbix-1.8.15-1.fc16 (2012-12488)

Release notes: http://www.zabbix.com/rn1.8.15.php Amongst others : - Solves SQL injection vulnerability CVE-2012-3435 - Removes useless backup files from the frontend Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenab...

CVE-2011-5113: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in frontend/models/techfoliodetail.php in Techfolio comtechfolio component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2012-4259

CVE-2012-4259 affects C4B XPhone Unified Communications UC, specifically the XPhone UC Web/ web frontend for XPhone Virtual Directory (2011 Web 4.1.890S R1). The vulnerability is a cross-site scripting (XSS) issue allowing remote attackers to inject arbitrary script via the company name in the Co...

Ganglia Detection (HTTP)

HTTP based detection of Ganglia. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.103534";...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

the Xen implementation did not prevent applications running in a para-virtualized guest from modifying CR4 TSC. This could cause a local denial of service. CVE-2007-5907, Important - Tavis Ormandy reported missing boundary checks in the Virtual Dynamic Shared Objects vDSO implementation. This...

Fedora Update for cantor FEDORA-2011-13417

Check for the Version of cantor OpenVAS Vulnerability Test Fedora Update for cantor FEDORA-2011-13417 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

phpDenora 1.4.6 SQL Injection

Title : phpDenora = 1.4.6 Multiple SQL Injection Vulnerabilities Author : P. de Brouwer - KnickLighter @knickz0r NLSecurity - www.nlsecurity.org [email protected] Dork : intext:"Powered by phpDenora" Software : phpDenora = 1.4.6 http://sourceforge.net/projects/phpdenora/files/phpDenora/1.4.6/...

phpDenora 1.4.6 - Multiple SQL Injections

Title : phpDenora = 1.4.6 Multiple SQL Injection Vulnerabilities Author : P. de Brouwer - KnickLighter @knickz0r NLSecurity - www.nlsecurity.org [email protected] Dork : intext:"Powered by phpDenora" Software : phpDenora = 1.4.6 http://sourceforge.net/projects/phpdenora/files/phpDenora/1.4.6/...

CVE-2012-1207: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in frontend/core/engine/javascript.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to read arbitrary files via a .. dot dot in the module parameter to frontend/js.php...

FreeBSD Ports: zabbix-frontend

The remote host is missing an update to the system as announced in the referenced advisory. VID 048c77df-3211-11e1-9583-14dae938ec40 OpenVAS Vulnerability Test $ Description: Auto generated from VID 048c77df-3211-11e1-9583-14dae938ec40 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: zabbix-frontend

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Joomla Component com_frontenduseraccess 3.4.0 LFI

A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

FreeBSD : zabbix-frontend -- multiple XSS vulnerabilities (048c77df-3211-11e1-9583-14dae938ec40)

Martina Matari reports : These URLs hostgroups.php, usergrps.php are vulnerable to persistent XSS attacks due to improper sanitation of gname variable when creating user and host groups. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

Fedora Update for cacti FEDORA-2011-17049

Check for the Version of cacti OpenVAS Vulnerability Test Fedora Update for cacti FEDORA-2011-17049 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

CVE-2011-4568: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI...

[SECURITY] Fedora 16 Update: cantor-4.7.1-2.fc16

KDE Frontend to Mathematical Software...

[SECURITY] Fedora 16 Update: kdesdk-4.7.1-1.fc16

A collection of applications and tools used by developers, including: cervisia: a CVS frontend kate: advanced text editor kcachegrind: a browser for data produced by profiling tools e.g. cachegr ind kompare: diff tool kuiviewer: displays designer's UI files lokalize: computer-aided translation...

Citrix XenApp / XenDesktop Stack-Based Buffer Overflow

No description provided by source. n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2011.001 28-Jul-2011 Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Stack-Based Buffer...

XenApp / XenDesktop Buffer Overflow

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2011.001 28-Jul-2011 Vendor: Citrix, http://www.citrix.com Affected Products: XenApp and XenDesktop Affected Version: See the Citrix security bulletin 2 for a list Vulnerability: Stack-Based Buffer Overflow in Citrix XML Service Risk:...

Novo Knowledge Management Persistent / Non-Persistent Xss Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...