316 matches found
Unfixed XSS vulnerability at www.dica33.it
Security researcher LadyViolet, has submitted on 05/11/2008 a cross-site-scripting XSS vulnerability affecting www.dica33.it, which at the time of submission ranked 46006 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is current...
Fedora 8 : ruby-1.8.6.114-1.fc8 (2008-2443)
Tue Mar 4 2008 Akira TAGOH - 1.8.6.114-1 - Security fix for CVE-2008-1145. - Improve a spec file. 226381 - Correct License tag. - Fix a timestamp issue. - Own a arch-specific directory. - Tue Feb 19 2008 Fedora Release Engineering - 1.8.6.111-9 - Autorebuild for GCC 4.3 - Tue Feb 19 2008 Akira...
Unfixed XSS vulnerability at www.c00lstuff.com
Security researcher tenest, has submitted on 29/01/2008 a cross-site-scripting XSS vulnerability affecting www.c00lstuff.com, which at the time of submission ranked 41801 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/02/2008. It is current...
Unfixed XSS vulnerability at www.ianrpubs.unl.edu
Security researcher SolarFlare, has submitted on 17/01/2008 a cross-site-scripting XSS vulnerability affecting www.ianrpubs.unl.edu, which at the time of submission ranked 13345 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/01/2008. It is...
Fedora 7 : subversion-1.4.4-1.fc7 (2007-2635)
This update includes the Subversion 1.4.4 release, including a number of bug fixes and a fix for a minor security issue. An issue was discovered in the implementation of access control for revision properties in the path-based authorization code. In a repository using path-based access control, i...
openSUSE 10 Security Update : mailman (mailman-2170)
This update of mailman fixes the following security issues : - A malicious user could visit a specially crafted URI and inject an apparent log message into Mailman's error log which might induce an unsuspecting administrator to visit a phishing site. This has been blocked. Thanks to Moritz Nauman...
Fedora Core 6 : ipsec-tools-0.6.5-8.fc6 (2007-665)
Mon Apr 23 2007 Steve Grubb - 0.6.5-8 - Upstream fix for Racoon DOS, informational delete must be encrypted - Resolves: rhbz235388 - CVE-2007-1841 ipsec-tools racoon DoS - Fri Apr 20 2007 Steve Grubb - 0.6.5-7 - Resolves: 218386 labeled ipsec does not work over loopback - Mon Apr 16 2007 Steve...
Unfixed XSS vulnerability at www.madhalaster.com
Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.madhalaster.com, which at the time of submission ranked 2697917 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...
MattWrighttextcounter.pl远程执行命令漏洞
textcounter.pl是一个由Matt Wright编写的基于Web的记数器脚本，使用比较广泛。 某些早期版本的textcounter.pl脚本实现上存在输入验证漏洞，远程攻击者可以利用此漏洞以httpd进程的权限在主机上执行任意系统命令。问题在于程序脚本没有过滤用户输入中包含的一些特殊字符，远程攻击者可以向$DOCUMENTURI环境变量注入指定的值，脚本在处理的时候就会以Web守护程序的权限（root或nobody）在主机上执行攻击者指定的任意命令。 Matt Wright TextCounter1.2...
CentOS 4 : dbus (CESA-2005:102)
Updated dbus packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. D-BUS is a system for sending messages between applications. It is used both for the systemwide message...
phpBB 2.0.17 released
Hi everyone, phpBB Group announces the release of phpBB 2.0.17, the "no, we did not forget naming it last time" release. This release addresses several bugfixes and some low security issues as well as the recently seemingly wide-spread XSS issue only affecting Internet Explorer. Please have a loo...
Slackware 8.1 / 9.0 / 9.1 / current : PHP local security issue (SSA:2004-154-02)
New PHP packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix a security issue. These fix a problem in previous Slackware php packages where linking PHP against a static library in an insecure path under /tmp could allow a local attacker to place shared libraries at this locatio...
Update for Lync Server 2010, Mediation Server (KB 2502810)
This Package fixes issues described in KB Article 2502810...
Update for Lync 2010 X86 (KB 2540951)
This package fixes the issues described in KB 2540951...
Update for Office Communications Server 2007 R2, Unified Communications Managed API 2.0 Windows Workflow Activities Redist (KB 2502324)
This Package fixes some issues described in KB Article 2502324...
Update Rollup for Skype for Business Server 2015, SmartSetup (KB3061064)
This package fixes issues described in KB3061064...
Security Update for Windows Server 2012 R2 (KB3170377)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Update Rollup 5 for Microsoft System Center 2012 SP1 - Orchestrator Runbook Designer (x86) (KB2904725)
This update fixes the problems described in KB article 2904730...