4633 matches found
SuSE 11.1 Security Update : logwatch (SAT Patch Number 4236)
Shell meta characters in log file names could lead to execution of arbitrary code. CVE-2011-1018 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...
CVE-2011-0700
Multiple cross-site scripting XSS vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to 1 the Quick/Bulk Edit title aka post title or posttitle, 2 poststatus, 3 commentstatus, 4 pingstatus, and 5 escaping of tags...
CVE-2011-0700
Multiple cross-site scripting XSS vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to 1 the Quick/Bulk Edit title aka post title or posttitle, 2 poststatus, 3 commentstatus, 4 pingstatus, and 5 escaping of tags...
Debian Security Advisory DSA 2182-1 (logwatch)
The remote host is missing an update to logwatch announced via advisory DSA 2182-1. OpenVAS Vulnerability Test $Id: deb21821.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2182-1 logwatch Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
Debian: Security Advisory (DSA-2182-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-2182-1 : logwatch - shell command injection
Dominik George discovered that Logwatch does not guard against shell meta-characters in crafted log file names such as those produced by Samba. As a result, an attacker might be able to execute shell commands on the system running Logwatch. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
WordPress < 3.0.5 Multiple Vulnerabilities
Binary data 5785.prm...
WordPress < 3.0.5 Multiple Vulnerabilities
According to its version number, the installation of WordPress hosted on the remote web server is affected by multiple vulnerabilities : - The application is prone to multiple cross-site scripting vulnerabilities. An attacker can exploit these issues through the 'title' field of the 'Quick/Bulk...
Mozilla Foundation Security Advisory 2010-79
Mozilla Foundation Security Advisory 2010-79 Title: Java security bypass from LiveConnect loaded via data: URL meta refresh Impact: Critical Announced: December 9, 2010 Reporter: Gregory Fleischer Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.13 Firefox 3.5.16 SeaMonkey 2.0.11 Description...
data: URL meta refresh (MFSA 2010-79)
Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle certain redirections involving data: URLs and Java LiveConnect scripts, which allows remote attackers to start processes, read arbitrary local files, and establish network connections via...
data: URL meta refresh (MFSA 2010-79)
Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, does not properly handle certain redirections involving data: URLs and Java LiveConnect scripts, which allows remote attackers to start processes, read arbitrary local files, and establish network connections via...
Java security bypass from LiveConnect loaded via data: URL meta refresh — Mozilla
Security researcher Gregory Fleischer reported that when a Java LiveConnect script was loaded via a data: URL which redirects via a meta refresh, then the resulting plugin object was created with the wrong security principal and thus received elevated privileges such as the abilities to read loca...
SuSE 11 Security Update : systemtap (SAT Patch Number 2579)
This update of systemtab fixes a shell meta character injection vulnerability that allows remote users to execute arbitrary commands with the privileges of the stap-server. CVE-2009-4273 Additionally, a remote denial of service bug in the getargv function has been fixed. CVE-2010-0411 %NASLMINLEV...
Moderate: Red Hat Security Advisory: pidgin security update
Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...
VLC Media Player Meta-Information Denial of Service Vulnerability (Windows)
The host is installed with VLC Media Player and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbvlcmediaplayerdosvulnwin.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player Meta-Information Denial of Service Vulnerability Windows Authors: Madhuri D Copyright:...
VLC Media Player Meta-Information Denial of Service Vulnerability (Linux)
The host is installed with VLC Media Player and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbvlcmediaplayerdosvulnlin.nasl 5388 2017-02-21 15:13:30Z teissa $ VLC Media Player Meta-Information Denial of Service Vulnerability Linux Authors: Madhuri D Copyright:...
VLC Media Player Meta-Information Denial of Service Vulnerability - Windows
VLC Media Player is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Microsoft Help Files (.CHM): 'Locked File' Feature Bypass
No description provided by source. Changes made with Windows XP introduced additional origin validation for files downloaded from the Internet when saved to an NTFS volume. This 'feature' is present in Windows XP, Vista and 7. When a user downloads a .CHM file using Internet Explorer or another...
Microsoft Help Files (.CHM): 'Locked File' Feature Bypass
, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. Microsoft Help Files .CHM: 'Locked File' Bypass Versions Affected: Windows XP, Windows Vista, Windows 7 pdf: http://www.security-assessment.com/files/advisories/WindowsLockedHelpFiles.pdf...
K-Search - SQL Injection Cross-Site Scripting
K-Search - SQL Injection Cross-Site Scripting Category: K-Search SQL/XSS Multiple Remote Vulnerabilities Download: http://turn-k.net/k-search/demo Dork: inurl:K-Search, Powered By K-Search Author: Sangteamtham at hcegroupdotnet Homepage: HCE group - bug-z0ne.info Info: K-Search provides you a qui...