238 matches found
[SECURITY] Fedora 18 Update: php-symfony2-HttpKernel-2.1.6-1.fc18
HttpKernel provides the building blocks to create flexible and fast HTTP-based frameworks. It takes a Request as an input and should return a Response as an output. Using this interface makes your code compatible with all frameworks using the Symfony2 components. And this will give you many cool...
[SECURITY] Fedora 17 Update: php-symfony2-HttpKernel-2.1.6-1.fc17
HttpKernel provides the building blocks to create flexible and fast HTTP-based frameworks. It takes a Request as an input and should return a Response as an output. Using this interface makes your code compatible with all frameworks using the Symfony2 components. And this will give you many cool...
[SECURITY] Fedora 17 Update: php-symfony2-HttpFoundation-2.1.4-1.fc17
The HttpFoundation Component defines an object-oriented layer for the HTTP specification. In PHP, the request is represented by some global variables $GET, $POST, $FILE, $COOKIE, $SESSION... and the response is generated by some funct ions echo, header, setcookie, .... The Symfony2 HttpFoundation...
Fedora 16 : openstack-swift-1.4.8-3.fc16 (2012-15098)
Do not use pickle for serialization in memcache CVE-2012-4406 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
Code injection
The Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal does not properly handle the $user object in memcacheadmin, which might "lead to a role change not being recognized until the user logs in again."...
Cross site scripting
Cross-site scripting XSS vulnerability in memcacheadmin in the Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-5276
The Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal does not properly handle the $user object in memcacheadmin, which might "lead to a role change not being recognized until the user logs in again."...
CVE-2010-5276
The issue CVE-2010-5276 affects the Memcache module for Drupal 5.x and 6.x. Specifically, versions 5.x prior to 5.x-1.10 and 6.x prior to 6.x-1.6 mishandle the $user object in memcache_admin, which can cause a user’s role change to not be recognized until the user logs in again. The Drupal SA adv...
CVE-2010-5275
CVE-2010-5275 corresponds to an XSS vulnerability in the Memcache Drupal project, specifically the memcache_admin module. Technical details across connected documents show that this affects memcache for Drupal 5.x (before 5.x-1.10) and Drupal 6.x (before 6.x-1.6). The root cause is that memcache_...
CVE-2010-5275
Cross-site scripting XSS vulnerability in memcacheadmin in the Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-5276
The Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal does not properly handle the $user object in memcacheadmin, which might "lead to a role change not being recognized until the user logs in again."...
CVE-2010-5275: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in memcacheadmin in the Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-5276: Undefined Security Weakness
The Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal does not properly handle the $user object in memcacheadmin, which might "lead to a role change not being recognized until the user logs in again."...
SA-CONTRIB-2010-098 - Memcache - Multiple vulnerabilities
The Memcache project provides an alternative cache backend which works with memcached program to speed up high traffic sites. The memcache backend caches the current $user object a little too aggressively, which can lead to a role change not being recognized until the user logs in again. The...
[SECURITY] Fedora 9 Update: lighttpd-1.4.20-6.fc9
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...
[SECURITY] Fedora 8 Update: lighttpd-1.4.18-6.fc8
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...
[SECURITY] Fedora 7 Update: lighttpd-1.4.18-3.fc7
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...
[SECURITY] Fedora 7 Update: lighttpd-1.4.18-1.fc7
Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...