CVE-2010-4765: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System OTRS before 2.4.8 allows remote authenticated users to corrupt the TicketCounter.log data in opportunistic circumstances by creating tickets...

CVE-2011-1147

Multiple stack-based and heap-based buffer overflows in the 1 decodeopentype and 2 udptlrxpacket functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.6.2.16.2, and 1.8 before 1.8.2.4; Business Edition C.x.x before C.3.6.3; AsteriskNOW...

CVE-2011-1147: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based and heap-based buffer overflows in the 1 decodeopentype and 2 udptlrxpacket functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.6.2.16.2, and 1.8 before 1.8.2.4; Business Edition C.x.x before C.3.6.3; AsteriskNOW...

PT-2011-2904

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 1.4.x through 1.4.39.1 Asterisk Open Source versions 1.6.1.x through 1.6.1.21 Asterisk Open Source versions 1.6.2.x through 1.6.2.16.1 Asterisk Open Source versions 1.8.x through 1.8.2.3 Asterisk Business Edition...

CVE-2010-4748

Cross-site scripting XSS vulnerability in pmwiki.php in PmWiki 2.2.20 allows remote attackers to inject arbitrary web script or HTML via the from parameter to Main/WikiSandbox. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in pmwiki.php in PmWiki 2.2.20 allows remote attackers to inject arbitrary web script or HTML via the from parameter to Main/WikiSandbox. NOTE: some of these details are obtained from third party information...

PT-2011-1698

Name of the Vulnerable Software and Affected Versions PmWiki version 2.2.20 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the from parameter to the "Main/WikiSandbox" page. Recommendations For PmWiki...

CVE-2010-4748: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in pmwiki.php in PmWiki 2.2.20 allows remote attackers to inject arbitrary web script or HTML via the from parameter to Main/WikiSandbox. NOTE: some of these details are obtained from third party information...

PT-2011-2426

Name of the Vulnerable Software and Affected Versions 389 Directory Server versions 1.2.x Description The issue concerns the backup and restore scripts, main initialization script, and ldap-agent script in 389 Directory Server. These scripts place a zero-length directory name in the LD LIBRARY...

Million network the Main Station due to filter poor lead to cross-site multi-use vulnerability-vulnerabilities and early warning-the black bar safety net

Brief description: The Main Station is due to submit content security checks generated by the vulnerability Detailed description: http://www.hichina.com/hasclient/whois1.asp?tongyong=yes&domain=xxx&code=0 0 0 0 Modify the three variables in any one place for' Since the Universal network of securi...

CVE-2011-0495: Out-of-bounds Write

Stack-based buffer overflow in the asturiencode function in main/utils.c in Asterisk Open Source before 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.1, 1.8.1.2, 1.8.2.; and Business Edition before C.3.6.2; when running in pedantic mode allows remote authenticated users to execute arbitrary...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to 1 bin/viewrev/Main/WebHome and 2 bin/view/Blog, and the 3 registerfirstname and 4 registerlastname parameters to bin/register/XWiki/Register...

PT-2010-5604

Name of the Vulnerable Software and Affected Versions XWiki Watch version 1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the rev parameter to API endpoints such as "bin/viewrev/Main/WebHome" and "bin/view/Blog", and the register...

CVE-2010-4215

Foswiki 1.1.0 and 1.1.1 are affected by CVE-2010-4215. The flaw resides in UI/Manage.pm, allowing remote authenticated users to escalate privileges by altering the GROUP and ALLOWTOPICCHANGE settings in Main.AdminGroup topic preferences. Evidence from multiple scanners/advisories confirms remote ...

CVE-2010-3697

The waitforchildtodie function in main/event.c in FreeRADIUS 2.1.x before 2.1.10, in certain circumstances involving long-term database outages, does not properly handle long queue times for requests, which allows remote attackers to cause a denial of service daemon crash by sending many requests...

CVE-2010-3697: Undefined Security Weakness

The waitforchildtodie function in main/event.c in FreeRADIUS 2.1.x before 2.1.10, in certain circumstances involving long-term database outages, does not properly handle long queue times for requests, which allows remote attackers to cause a denial of service daemon crash by sending many requests...

PT-2010-5008

Name of the Vulnerable Software and Affected Versions FreeRADIUS versions 2.1.x through 2.1.9 Description The issue arises from the wait for child to die function in main/event.c, which does not properly handle long queue times for requests under certain circumstances, such as long-term database...

Format string

Red Hat libvirt, possibly 0.6.1 through 0.8.2, looks up disk backing stores without referring to the user-defined main disk format, which might allow guest OS users to read arbitrary files on the host OS, and possibly have unspecified other impact, via unknown vectors...

CVE-2010-3024: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in user/main/updateuser in DiamondList 0.1.6, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that 1 change the administrative password or 2 change the site's configuration...

CentOS 5 : NetworkManager / dbus-glib (CESA-2010:0616)

Updated dbus-glib packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...