Stack overflow

Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a 1 description or 2 keyword META tag. NOTE: the provenance of this information is unknown; the details ar...

Stack overflow

Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a TITLE tag...

CVE-2009-3709

The CVE-2009-3709 entry concerns Alleycode HTML Editor 2.21 from Konae Technologies. A stack-based buffer overflow in the Meta Content Optimizer allows user-assisted remote attackers to execute arbitrary code via a long value in a TITLE tag. Public records (NVD/OpenVAS entries) confirm remote cod...

CVE-2009-3708

Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a 1 description or 2 keyword META tag. NOTE: the provenance of this information is unknown; the details ar...

SLES10: Security update for OpenLDAP 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2 openldap2-back-meta openldap2-back-perl openldap2-client openldap2-devel More details may also be found by searching for the SuSE Enterprise Server...

SLES11: Security update for OpenLDAP2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libldap-24-2 openldap2 openldap2-back-meta openldap2-client More details may also be found by searching for the SuSE Enterprise Server 11 patch database...

SLES9: Security update for OpenLDAP 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2-back-meta openldap2-back-monitor openldap2-back-ldap openldap2 openldap2-devel openldap2-back-perl openldap2-client For more information, please...

openSUSE 10 Security Update : libldap-2_4-2 (libldap-2_4-2-6488)

This update of openldap2 makes SSL certificate verification more robust against uses of the special character \0 in the subjects name. CVE-2009-2408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

Information disclosure

The Meta tags aka Nodewords module before 6.x-1.1 for Drupal does not properly follow permissions during assignment of node meta tags, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2009-3442

The Meta tags aka Nodewords module before 6.x-1.1 for Drupal does not properly follow permissions during assignment of node meta tags, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2009-3442

The Meta tags aka Nodewords module before 6.x-1.1 for Drupal does not properly follow permissions during assignment of node meta tags, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2009-3442

The vulnerability CVE-2009-3442 affects the Drupal Meta tags (Nodewords) module prior to 6.x-1.1. The flaw is in how permissions are enforced during assignment of node meta tags, which can allow remote attackers to obtain sensitive information via unspecified vectors. The NVD reports a partial co...

CVE-2009-3337

SQL injection vulnerability in the Freetag serendipityeventfreetag plugin before 3.09 for Serendipity S9Y allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry...

Sql injection

SQL injection vulnerability in the Freetag serendipityeventfreetag plugin before 3.09 for Serendipity S9Y allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry...

CVE-2009-3337

SQL injection vulnerability in the Freetag serendipityeventfreetag plugin before 3.09 for Serendipity S9Y allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry...

XSS in header for Personal Spaces

Create a user with username "alert'hahahaha' User creates a personal space Try to add a page to the personal space This is caused by code code However since the personal space doesn't work too well with usernames with crazy letters, I don't think its a Blocker...

SuSE9 Security Update : gnome-vfs2,gnome-vfs2-doc (YOU Patch Number 10010)

This update fixes the following security problems : - The VFS scripts contained in GNOME are vulnerable to attacks on temporary files as well as command execution via shell meta-characters. These bugs can be exploited by accessing a malformated archive file. CVE-2004-0494 - Insufficient checks wh...

Google Chrome 'KEYGEN' Element Denial Of Service Vulnerability

This host is installed with Google Chrome and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodgooglechromekeygendosvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Google Chrome 'KEYGEN' Element Denial Of Service Vulnerability Authors: Sharath S Copyright: Copyright...

SA-CONTRIB-2009-060 - Meta tags (Nodewords) - Access bypass

The Meta tags also known as Nodewords module provides meta tags based on node titles. In certain conditions, the node meta tags were not respecting access permissions, potentially exposing content not available otherwise. Versions affected Meta tags for Drupal 6.x before Meta tags 6.x-1.1 Drupal...

Google Chrome 'KEYGEN' Element Denial Of Service Vulnerability

Google Chrome is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...