Debian DSA-1770-1 : imp4 - Insufficient input sanitising

Several vulnerabilities have been found in imp4, a webmail component for the horde framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-4182 It was discovered that imp4 suffers from a cross-site scripting XSS attack via the user field in an IM...

Mandriva Update for gimp MDKSA-2007:170 (gimp)

Check for the Version of gimp OpenVAS Vulnerability Test Mandriva Update for gimp MDKSA-2007:170 gimp Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Debian DSA-1762-1 : icu - insufficient input sanitising

It was discovered that icu, the internal components for Unicode, did not properly sanitise invalid encoded data, which could lead to cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

RedHat Security Advisory RHSA-2009:0261

The remote host is missing updates announced in advisory RHSA-2009:0261. Virtual Network Computing VNC is a remote display system which allows you to view a computer SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Debian DSA-1715-1 : moin - insufficient input sanitising

It was discovered that the AttachFile action in moin, a python clone of WikiWiki, is prone to cross-site scripting attacks CVE-2009-0260 . Another cross-site scripting vulnerability was discovered in the antispam feature CVE-2009-0312 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Debian DSA-1698-1 : gforge - insufficient input sanitising

It was discovered that GForge, a collaborative development tool, insufficiently sanitises some input allowing a remote attacker to perform SQL injection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Moderate: Red Hat Security Advisory: lcms security update

Updated lcms packages that resolve several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Little Color Management System LittleCMS, or simply "lcms" is a small-footprint,...

[SECURITY] [DSA 1675-1] New phpmyadmin packages fix cross site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1675-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 30, 2008 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-1664-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1664-1 (ekg)

The remote host is missing an update to ekg announced via advisory DSA 1664-1. OpenVAS Vulnerability Test $Id: deb16641.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1664-1 ekg Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

DSA-1664-1 ekg - denial of service

Bulletin has no description...

FreeBSD Ports: phpMyAdmin, phpmyadmin

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian: Security Advisory (DSA-1620-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun xVM VirtualBox < 1.6.4 Privilege Escalation Vulnerability PoC

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Sun xVM VirtualBox Privilege Escalation Vulnerability Advisory Information Title: Sun xVM VirtualBox Privilege Escalation...

Sun xVM VirtualBox < 1.6.4 Privilege Escalation Vulnerability PoC

Exploit for multiple platform in category dos / poc ================================================================= Sun xVM VirtualBox 1.6.4 Privilege Escalation Vulnerability PoC ================================================================= -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cor...

Python: Multiple integer overflows

Background Python is an interpreted, interactive, object-oriented programming language. Description Multiple vulnerabilities were discovered in Python: David Remahl reported multiple integer overflows in the file imageop.c, leading to a heap-based buffer overflow CVE-2008-1679. This issue is due ...

Debian: Security Advisory (DSA-1568-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1568-1 : b2evolution - insufficient input sanitising

'unsticky' discovered that b2evolution, a blog engine, performs insufficient input sanitising, allowing for cross site scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1568. The...

[SECURITY] [DSA 1564-1] New wordpress packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1564-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 01, 2008 http://www.debian.org/security/faq -...

Debian DSA-1557-1 : phpmyadmin - insufficient input sanitising

Several remote vulnerabilities have been discovered in phpMyAdmin, an application to administrate MySQL over the WWW. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1924 Attackers with CREATE table permissions were allowed to read arbitrary files...