433 matches found
ViewGit 0.0.6 - Multiple XSS Vulnerabilities
ViewGit "is a git web repository viewer that aims to be easy to set up and upgrade, light on dependencies, and comfortable to use." http://viewgit.fealdia.org/. ViewGit contains multiple persistent arbitrary script injection XSS vulnerabilities in its "Shortlog" and "Heads" tables. These...
[SECURITY] Fedora 17 Update: gitolite3-3.04-4.fc17
Gitolite allows a server to host many git repositories and provide access to many developers, without having to give them real userids on the server. The essential magic in doing this is ssh's pubkey access and the authorized keys file, and the inspiration was an older program called gitosis...
XSS in Horde Application Framework <=3.3.8, icon_browser.php
Hi, Horde Application Framework v3.3.8 and lower are subject to a cross site scripting XSS vulnerability. The iconbrowser.php script fails to properly sanitize user supplied input to the 'subdir' URL parameter before printing it out as part of a HTML formatted error message. The following URL can...
Secunia Research: SWFTools Two Integer Overflow Vulnerabilities
====================================================================== Secunia Research 13/08/2010 - SWFTools Two Integer Overflow Vulnerabilities - ====================================================================== Table of Contents Affected...
Secunia Research: MantisBT "Add Category" Script Insertion Vulnerability
====================================================================== Secunia Research 05/08/2010 - MantisBT "Add Category" Script Insertion Vulnerability - ====================================================================== Table of Contents Affected...
[SECURITY] Fedora 13 Update: gitolite-1.4.2-1.fc13
Gitolite allows a server to host many git repositories and provide access to many developers, without having to give them real userids on the server. The essential magic in doing this is ssh's pubkey access and the authorized keys file, and the inspiration was an older program called gitosis...
Perl UTF-8规则表达式处理远程拒绝服务漏洞
Bugraq ID: 36812 CVE ID： CVE-2009-3626 Perl是一款流行的网络编程语言。 Perl在处理包含在规则表达式中使用UTF-8字符的字符串时存在错误，远程攻击者可以利用漏洞使解释器崩溃。 提交包含大量非法的UTF-8字符的邮件消息，给使用Perl的应用程序解析，可导致解析器崩溃。 Larry Wall Perl 5.10.1 + Turbolinux Home + Turbolinux Turbolinux Desktop 10.0 厂商解决方案 GIT库已经修正此漏洞，建议用户下载使用：...
VideoLAN VLC Media Player SMB Module Win32AddConnection Buffer Overflow
Added: 09/11/2009 CVE: CVE-2009-2484 BID: 35500 OSVDB: 55509 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem A stack-based buffer overflow vulnerability in the Win32AddConnection function may allow a remote attacker to execu...
git
New git packages are available for Slackware 12.0, 12.1, 12.2, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-3546 There are other security issues related to gitweb, which...
Debian DSA-1708-1 : git-core - shell command injection
It was discovered that gitweb, the web interface for the Git version control system, contained several vulnerabilities : Remote attackers could use crafted requests to execute shell commands on the web server, using the snapshot generation and pickaxe search functionality CVE-2008-5916 . Local...
Linux Kernel 'sctp_setsockopt_auth_key()'远程拒绝服务漏洞
BUGTRAQ ID:30847 CVE ID：CVE-2008-3526 CNCVE ID：CNCVE-20083526 Linux是一款开放源代码的操作系统。 Linux内核sctpsetsockoptauthkey函数存在整数溢出，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。 用于SCTPAUTHKEY选项的结构包含的长度缺少充分校验，可触发整数溢出。 Linux kernel 2.6.27 -rc2 Linux kernel 2.6.27 -rc1 Linux kernel 2.6.26 -rc6 Linux kernel 2.6.25 .9 Linux kernel 2.6....
Security fix for the ALT Linux 5 package ruby version 1.8.6-alt3
Jan. 11, 2008 Kirill A. Shutemov 1.8.6-alt3 - branch based git repository - update to ruby186 svn branch revision 14091 - sync with debian 1.8.6.111-2 + CVE-2007-5162 - install libruby.so into /usr/lib bug 13951 - move arch-depended siteruby to /usr/local/ raorn@ - update macros bug 13933 - add...