316 matches found
Slackware Advisory SSA:2011-122-02 mozilla-thunderbird
The remote host is missing an update as announced via advisory SSA:2011-122-02. OpenVAS Vulnerability Test $Id: esoftslkssa201112202.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2011-122-02 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
RedHat Update for scsi-target-utils RHSA-2011:0332-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Debian DSA-2408-1 : php5 - several vulnerabilities
Several vulnerabilities have been discovered in PHP, the web scripting language. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2011-1072 It was discovered that insecure handling of temporary files in the PEAR installer could lead to denial of service. -...
PHP Vulnerability Hunter v.1.1.4.6 - Automated fuzz testing tool
PHP Vulnerability Hunter v.1.1.4.6 - Automated fuzz testing tool This is the application that detected almost all of the web application vulnerabilities listed on the advisories page. PHP Vulnerability Hunter is an advanced automated whitebox fuzz testing tool capable of triggering a wide range o...
WordPress + Buddypress + Blogs Mu Theme Cross Site Scripting
Wordpress + Buddypress + Blogs Mu theme = XSS to Super Admin to Server Compromise ---------------------------------------------------------------------------------- Cross-site scripting XSS vulnerabilities tend to be seen as one of the less serious security issues. Sometimes XSS can be serious,...
Fedora 15 : zabbix-1.8.7-2.fc15 (2011-12485)
move the zabbix user home directory to the common zabbix package - fix https://support.zabbix.com/browse/ZBX-4099 - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream...
SuSE 10 Security Update : coreutils (ZYPP Patch Number 7655)
This update of coreutils fixes the following security issue : - 697897: coreutils: when running 'su -c' to execute commands as different user the target user could inject command back into the calling users terminal via the TIOCSTI ioctl. This update also fixes the following non-security issues :...
Mandriva Update for lsb-release MDVA-2011:004 (lsb-release)
Check for the Version of lsb-release OpenVAS Vulnerability Test Mandriva Update for lsb-release MDVA-2011:004 lsb-release Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
SuSE 11 / 11.1 Security Update : glibc (SAT Patch Numbers 3392 / 3393)
This update of glibc fixes various bugs and security issues : - Decoding of the $ORIGIN special value in various LD environment variables allowed local attackers to execute code in context of e.g. setuid root programs, elevating privileges. This issue does not affect SUSE as an assertion triggers...
Mandriva Update for gnupg2 MDVA-2010:204 (gnupg2)
Check for the Version of gnupg2 OpenVAS Vulnerability Test Mandriva Update for gnupg2 MDVA-2010:204 gnupg2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Mandriva Update for gtkspell MDVA-2010:140 (gtkspell)
Check for the Version of gtkspell OpenVAS Vulnerability Test Mandriva Update for gtkspell MDVA-2010:140 gtkspell Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
DSA-2024-1 moin - cross-site scripting
Bulletin has no description...
Mandriva Update for blogtk MDVA-2010:070 (blogtk)
Check for the Version of blogtk OpenVAS Vulnerability Test Mandriva Update for blogtk MDVA-2010:070 blogtk Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
CentOS 5 : avahi (CESA-2009:0013)
Updated avahi packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for...
MDVA-2008:176 : mdadm
mdadm would crash during bootup when trying to activate several raid10 devices, dropping the system in maintenance mode, where you had to manually reactivate the missing raid10 sets in order to continue the boot. The updated mdadm fixes this issue, allowing systems with raid10 to boot normally...
Mandriva Update for evolution MDVA-2008:186-1 (evolution)
Check for the Version of evolution OpenVAS Vulnerability Test Mandriva Update for evolution MDVA-2008:186-1 evolution Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...
RedHat Update for autofs5 RHSA-2007:1177-01
Check for the Version of autofs5 OpenVAS Vulnerability Test RedHat Update for autofs5 RHSA-2007:1177-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
RedHat Update for kernel RHSA-2008:0607-01
Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2008:0607-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Unfixed XSS vulnerability at www.elencoforum.com
Security researcher murdercode, has submitted on 12/01/2008 a cross-site-scripting XSS vulnerability affecting www.elencoforum.com, which at the time of submission ranked 1417615 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It is...
Pan .nzb文件解析堆溢出漏洞
BUGTRAQ ID: 29421 CVECAN ID: CVE-2008-2363 Pan是为GNOME设计的Usenet新闻阅读器。 Pan在解析.nzb文件时存在堆溢出漏洞,如果用户受骗读取了恶意的.nzb文件的话,就可以触发这个溢出,但最可能导致的是出现断言错误或分段错误。 Pan Pan 0.132 Pan Pan 0.131 Pan Pan 0.130 Pan Pan 0.129 Pan Pan 0.128 Pan --- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...