Fedora Core 10 FEDORA-2009-1289 (gnumeric)

The remote host is missing an update to gnumeric announced via advisory FEDORA-2009-1289. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

SAP GUI 7.1 WebViewer2D ActiveX — Insecure Methods

Application: EAI WebViewer2D EnjoySAP, SAP GUI for Windows 6.4 and 7.1 Versions Affected:Tested on 7100.2.7.1038 PL 7 Vendor URL: Bugs: Insecure method, File owervriting Exploits: YES Reported: 02.07.2009 Vendor response: 02.07.2009 Date of Public Advisory: 28.09.2009 Author: Alexandr Polyakov...

SAP GUI 7.1 WebViewer3D ActiveX — Insecure Methods

Application: EnjoySAP, SAP GUI for Windows 6.4 and 7.1 Versions Affected: Tested on 7100.2.7.1038 PL 7 Vendor URL: Bugs: Insecure method, File owervriting Exploits: YES Reported: 02.07.2009 Vendor response: 02.07.2009 Date of Public Advisory: 28.09.2009 Author: Alexandr Polyakov Description SAP G...

[SECURITY] Fedora 9 Update: gnumeric-1.8.2-4.fc9

Gnumeric is a spreadsheet program for the GNOME GUI desktop environment...

[SECURITY] Fedora 10 Update: gnumeric-1.8.2-6.fc10

Gnumeric is a spreadsheet program for the GNOME GUI desktop environment...

CVE-2009-0288

Directory traversal vulnerability in k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to read arbitrary files outside the TFTP root directory via directory traversal sequences in a GET request...

CVE-2009-0289

CVE-2009-0289 affects k23productions TFTPUtil GUI versions 1.2.0 through 1.3.0. The issue allows remote attackers to cause a denial-of-service (service crash) by sending a crafted request with a long filename. The publicly documented workaround is to restrict the length of filenames in requests t...

CVE-2009-0288

CVE-2009-0288 affects k23productions TFTPUtil GUI versions 1.2.0 and 1.3.0. Multiple connected sources confirm a directory traversal vulnerability that allows remote attackers to read arbitrary files outside the TFTP root via traversal sequences in a GET request. Practical impact is potential una...

CVE-2008-3866

Affected product : Trend Micro OfficeScan NSC components (TmPfw.exe) used in OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007/2008 (17.0.1224). Vulnerability : The Personal Firewall service relies on client-side password protection in the configuration GUI, but this check is not enforced by ...

TFTPUtil GUI TFTP Server Denial of Service Vulnerability

--Vulnerability Summary-- Title: TFTPUtil GUI TFTP Server Denial of Service Vulnerability Product: TFTPUtil GUI Discovered: November 26, 2008 Discovered by: Rob Kraus, princeofnigeria PoN Vendor: k23productions as per various download sites Vendor URL: http://sourceforge.net/projects/tftputil...

TFTPUtil GUI TFTP Server multiple security vulnerabilities

DoS, directory traversal...

TFTPUtil GUI TFTP Server Denial of Service Vulnerability

Title: TFTPUtil GUI TFTP Directory Traversal Product: TFTPUtil GUI Discovered: November 26, 2008 Discovered by: Rob Kraus, princeofnigeria PoN Vendor: k23productions Vendor URL: http://sourceforge.net/projects/tftputil Vendor notification date: December 1, 2008 Vendor response date: December 8,...

[SECURITY] Fedora 10 Update: amarok-2.0.1.1-1.fc10

Amarok is a multimedia player with: - fresh playlist concept, very fast to use, with drag and drop - plays all formats supported by the various engines - audio effects, like reverb and compressor - compatible with the .m3u and .pls formats for playlists - nice GUI, integrates into the KDE look, b...

CVE-2008-3973

Unspecified vulnerability in the SQLPlus Windows GUI component in Oracle Database allows local users to affect confidentiality via unknown vectors...

CVE-2008-5439

Unspecified vulnerability in the SQLPlus Windows GUI component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the SQLPlus Windows GUI component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the SQLPlus Windows GUI component in Oracle Database allows local users to affect confidentiality via unknown vectors...

CVE-2008-3973

Technical details about CVE-2008-3973 are not publicly provided in the connected documents. They note an unspecified vulnerability in the SQL*Plus Windows GUI with limited information; monitor Oracle CPU advisories and vendor updates for specifics.

CVE-2008-3973

Unspecified vulnerability in the SQLPlus Windows GUI component in Oracle Database allows local users to affect confidentiality via unknown vectors...

CVE-2008-5439

CVE-2008-5439 concerns Oracle Database 10.2.0.4, specifically the SQL*Plus Windows GUI component. The vulnerability is described as unspecified, allowing remote authenticated users to affect confidentiality via unknown vectors. The NVD entry assigns a CVSS v2 base score of 4.0 (Medium) with netwo...