BGP implementations do not properly handle UPDATE messages

Overview BGP implementations from multiple vendors including Juniper may not properly handle specially crafted BGP UPDATE messages. These vulnerabilities could allow an unauthenticated, remote attacker to cause a denial of service. Disrupting BGP communication could lead to routing instability...

Cross site scripting

Cross-site scripting XSS vulnerability in the Bluemoon, Inc. 1 BackPack 0.91 and earlier, 2 BmSurvey 0.84 and earlier, 3 newbbfileup 1.83 and earlier, 4 Newsembed newsfileup 1.44 and earlier, and 5 PopnupBlog 3.19 and earlier modules for XOOPS 2.0.x, XOOPS Cube 2.1, and ImpressCMS allows remote...

CVE-2008-2035

Cross-site scripting XSS vulnerability in the Bluemoon, Inc. 1 BackPack 0.91 and earlier, 2 BmSurvey 0.84 and earlier, 3 newbbfileup 1.83 and earlier, 4 Newsembed newsfileup 1.44 and earlier, and 5 PopnupBlog 3.19 and earlier modules for XOOPS 2.0.x, XOOPS Cube 2.1, and ImpressCMS allows remote...

CVE-2008-2035

CVE-2008-2035 is a cross-site scripting (XSS) vulnerability affecting Bluemoon Inc. XOOPS modules: Backpack 0.91 and earlier, BmSurvey 0.84 and earlier, newbb_fileup 1.83 and earlier, News_embed (news_fileup) 1.44 and earlier, and PopnupBlog 3.19 and earlier, used with XOOPS 2.0.x, XOOPS Cube 2.1...

Debian Security Advisory DSA 1554-1 (roundup)

The remote host is missing an update to roundup announced via advisory DSA 1554-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

JVN#31351020 Cross-site scripting vulnerabilities in multiple Bluemoon Inc. XOOPS modules

Mutiple modules provided by Blumoon Inc. for XOOPS 2.0.x / XOOPS Cube 2.1 / ImpressCMS are vulnerable to cross-site scripting. Impact An arbitrary script can be executed on the user's web browser. Solution Update the Software Update the product to the latest version according to the information...

CVE-2008-1962

Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 class parameter to include/functions.inc.php and the 2 file parameter to include/common.inc.php...

DDIVRT-2008-11 BadBlue uninst.exe DoS

Title ----- DDIVRT-2008-11 BadBlue uninst.exe DoS Severity -------- Medium Date Discovered --------------- March 5th 2008 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Steven James and r@b13$ Vulnerability Description ------------------------- BadBlue is a...

Team SHATTER Security Advisory: Multiple DoS in JAR files manipulation procedures

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Multiple DoS in JAR files manipulation procedures April 17th 2008 Risk Level: High Affected versions: All versions of IBM DB2 Database Server on Windows platform. Remote exploitable: Yes Authentication to Database Server...

Apple Safari WebKit fails to properly handle a crafted URL

Overview A vulnerability in the way Apple Mac OS X handles specially crafted URLs may allow an attacker to execute script in the context of another site.. Description According to Apple Safari 3.1.1: An issue exists in WebKit's handling of URLs containing a colon character in the host name. Openi...

Fedora 8 : wireshark-1.0.0-1.fc8 (2008-3040)

Upgrade to 1.0.0 fixes several security flaws wireshark crashes, see BZ references. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Debian Security Advisory DSA 1531-1 (policyd-weight)

The remote host is missing an update to policyd-weight announced via advisory DSA 1531-1. OpenVAS Vulnerability Test $Id: deb15311.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1531-1 policyd-weight Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...

libarchive does not properly terminate loop

Overview libarchive contains a vulnerability that may allow an attacker to cause a denial of service. Description The libarchive library provides an interface for reading and writing archive files.There is a vulnerability in libarchive that occurs when it parses the pax interchange format. If an...

KLA10375 WLF vulnerability in UltraEdit

A directory traversal vulnerability was found in UltrEdit. By exploiting this vulnerability malicious users can create & overwrite arbitrary files. This vulnerability can be exploited remotely via a specially designed response. Original advisories - Related products UltraEdit CVE list CVE-2008-27...

Debian Security Advisory DSA 1493-2 (sdl-image1.2)

The remote host is missing an update to sdl-image1.2 announced via advisory DSA 1493-2. OpenVAS Vulnerability Test $Id: deb14932.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1493-2 sdl-image1.2 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

Core Security Technologies Advisory 2008.0123

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Leopard Server Remote Path Traversal Advisory Information Title: Leopard Server Remote Path Traversal Advisory ID: CORE-2008-0123 Advisory URL:...

X.Org PCF font parser buffer overflow

Overview A vulnerability in the X.Org server could allow a remote attacker to execute arbitrary code on an affected system. Description The X.Org project provides an open source implementation of the X Window System. The server supports bitmapped fonts in various formats, including Portable...

Leopard Server Remote Path Traversal

Advisory ID Internal CORE-2008-0123 Advisory Information Title: Leopard Server Remote Path Traversal Advisory ID: CORE-2008-0123 Date published: 2008-03-18 Date of last update: 2008-03-18 Vendors contacted: Apple Inc. Release mode: Coordinated release Vulnerability Information Class: Remote Path...

Fedora 8 : nx-3.1.0-25.1.fc8 (2008-2258)

Wed Jan 2 2008 Axel Thimm - 3.1.0-25 - Update to 3.1.0. - add nxcompshad, nxauth; remove nxviewer, nxdesktop. - add -fPIC for ppc64. - Propagate %optflags for x8664, too. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

JVN#10606373 BFup ActiveX Control buffer overflow vulnerability

BFup ActiveX Control is developed by an individual that provides file upload and download functionality. BFup ActiveX Control contains a buffer overflow vulnerability. According to the developer of BFup ActiveX Control, this vulnerability only exists in BFup ActiveX Control developed by the...