PT-2014-2712

Name of the Vulnerable Software and Affected Versions Monkey HTTP Daemon versions prior to 1.2.1 Description The issue is a stack-based buffer overflow in the mk request header process function, located in mk request.c. This allows remote attackers to potentially cause a denial of service,...

[SECURITY] Fedora 20 Update: check-mk-1.2.4p2-2.fc20

check-mk is a general purpose Nagios-plugin for retrieving data. It adopts a new approach for collecting data from operating systems and network compone nts. It obsoletes NRPE, checkbyssh, NSClient, and checksnmp and it has many benefits, the most important are a significant reduction of CPU usag...

[SECURITY] Fedora 19 Update: check-mk-1.2.4p2-2.fc19

check-mk is a general purpose Nagios-plugin for retrieving data. It adopts a new approach for collecting data from operating systems and network compone nts. It obsoletes NRPE, checkbyssh, NSClient, and checksnmp and it has many benefits, the most important are a significant reduction of CPU usag...

Fedora 19 : check-mk-1.2.4p2-2.fc19 (2014-6818)

Install the mk-job binary on /usr/bin. - Make sure the proper permissions are given to /var/lib/checkmkagent/job to prevent any hard or symlink to be created by a normal user and pointing to any file on the filesystem exposing it on the check-mk-agent output being run as root. Note that Tenable...

Fedora 20 : check-mk-1.2.4p2-2.fc20 (2014-6810)

Install the mk-job binary on /usr/bin. - Make sure the proper permissions are given to /var/lib/checkmkagent/job to prevent any hard or symlink to be created by a normal user and pointing to any file on the filesystem exposing it on the check-mk-agent output being run as root. Note that Tenable...

Fedora Update for check-mk FEDORA-2014-5194

Check for the Version of check-mk OpenVAS Vulnerability Test Fedora Update for check-mk FEDORA-2014-5194 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for check-mk FEDORA-2014-5194

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for check-mk FEDORA-2014-5139

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for check-mk FEDORA-2014-5139

Check for the Version of check-mk OpenVAS Vulnerability Test Fedora Update for check-mk FEDORA-2014-5139 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora 19 : check-mk-1.2.4p2-1.fc19 (2014-5139)

New upstream release. Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330 - CVE-2014-2331 - CVE-2014-2332 Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330 - CVE-2014-2331 - CVE-2014-2332 Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330 - CVE-2014-2331 - CVE-2014-2332 Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330...

Fedora 20 : check-mk-1.2.4p2-1.fc20 (2014-5194)

New upstream release. Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330 - CVE-2014-2331 - CVE-2014-2332 Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330 - CVE-2014-2331 - CVE-2014-2332 Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330 - CVE-2014-2331 - CVE-2014-2332 Fixes CVEs : - CVE-2014-2329 - CVE-2014-2330...

[SECURITY] Fedora 20 Update: check-mk-1.2.4p2-1.fc20

check-mk is a general purpose Nagios-plugin for retrieving data. It adopts a new approach for collecting data from operating systems and network compone nts. It obsoletes NRPE, checkbyssh, NSClient, and checksnmp and it has many benefits, the most important are a significant reduction of CPU usag...

[SECURITY] Fedora 19 Update: check-mk-1.2.4p2-1.fc19

check-mk is a general purpose Nagios-plugin for retrieving data. It adopts a new approach for collecting data from operating systems and network compone nts. It obsoletes NRPE, checkbyssh, NSClient, and checksnmp and it has many benefits, the most important are a significant reduction of CPU usag...

PT-2013-4581

Name of the Vulnerable Software and Affected Versions Monkey version 1.1.1 Description The issue allows remote attackers to cause a denial of service, resulting in a thread crash and service outage. This is achieved by including a '0' character in an HTTP request, which is processed by the mk...

Manx 1.0.1 Cross Site Scripting

Manx cms.xml 1.0.1 ajaxgetfilelisting.php Multiple XSS Vulnerabilities Vendor: Paul Jova Product web page: http://manx.jovascript.com Affected version: 1.0.1 Summary: Manx is a Content Management System that uses xml text files to store the page contents, instead of a mysql database. Desc: Input...

Microsoft Source Code Analyzer for SQL Injection 1.3 - Improper Permissions

Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions Vendor: Microsoft Corp. Product web page: http://www.microsoft.com Affected version: 1.3.30601.30705 summary: Microsoft Source Code Analyzer for SQL Injection is a static code analysis tool for finding SQL Injection...

Sql injection

SQL injection vulnerability in the MK Wastebasket mkwastebasket extension 2.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1010

SQL injection vulnerability in the MK Wastebasket mkwastebasket extension 2.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1010

CVE-2010-1010 describes an SQL injection vulnerability in the TYPO3 MK Wastebasket (mk_wastebasket) extension, present in version 2.1.0 and earlier. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The vulnerability is documented across multiple sources...

CVE-2010-1010: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the MK Wastebasket mkwastebasket extension 2.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...