RHEL 3 / 4 : ipsec-tools (RHSA-2006:0267)

Updated ipsec-tools packages that fix a bug in racoon are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The ipsec-tools package is used in conjunction with the IPsec functionality in the linux kernel and includes racoon, an IKE...

MonsterTopList- Remote Code Execution bug

MonsterTopList- Remote Code Execution bug discovered By: VietMafia ================================= Developer site: http://www.monstertoplist.com/ Software: MTL 1.4 and prior Risk: Moderate Status: unpatched orginal advisory:http://pridels.blogspot.com/2006/04/monstertoplist.html...

[eVuln] qliteNews SQL Injection Vulnerability

New eVuln Advisory: qliteNews SQL Injection Vulnerability http://evuln.com/vulns/114/summary.html --------------------Summary---------------- eVuln ID: EV0114 CVE: CVE-2006-1571 Vendor: r2xDesign.net Vendor's Web Site: http://www.r2xdesign.net/ Software: qliteNews Versions: 2005.07.01 Critical...

[eVuln] VSNS Lemon Multiple Vulnerabilities

New eVuln Advisory: VSNS Lemon Multiple Vulnerabilities http://evuln.com/vulns/106/summary.html --------------------Summary---------------- eVuln ID: EV0106 CVE: CVE-2006-1553 CVE-2006-1554 CVE-2006-1555 Vendor: Tachyon Vendor's Web Site: http://tachyondecay.net/ Software: VSNS Lemon Versions:...

[eVuln] phpNewsManager Multiple SQL Injections

New eVuln Advisory: phpNewsManager Multiple SQL Injections http://evuln.com/vulns/110/summary.html --------------------Summary---------------- eVuln ID: EV0110 CVE: CVE-2006-1560 Vendor: SkinTech Group Vendor's Web Site: http://www.skintech.org/ Software: phpNewsManager Versions: 1.48 Critical...

RHEL 4 : openmotif (RHSA-2006:0272)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2006:0272 advisory. - openmotif libUil buffer overflows CVE-2005-3964 Note that Nessus has not tested for this issue but has instead relied only on the application's...

[eVuln] Maian Weblog Multiple SQL Injection Vulnerabilities

New eVuln Advisory: Maian Weblog Multiple SQL Injection Vulnerabilities http://evuln.com/vulns/101/summary.html --------------------Summary---------------- eVuln ID: EV0101 CVE: CVE-2006-1334 Software: Maian Weblog Sowtware's Web Site: http://www.maianscriptworld.co.uk/ Versions: 2.0 Critical...

[eVuln] DSPoll Multiple SQL Injection Vulnerabilities

New eVuln Advisory: DSPoll Multiple SQL Injection Vulnerabilities http://evuln.com/vulns/96/summary.html --------------------Summary---------------- eVuln ID: EV0096 CVE: CVE-2006-1217 Software: DSPoll Sowtware's Web Site: http://dsportal.uw.hu/ Versions: 1.1 Critical Level: Moderate Type: SQL...

[eVuln] CyBoards PHP Lite SQL Injection Vulnerability

New eVuln Advisory: CyBoards PHP Lite SQL Injection Vulnerability http://evuln.com/vulns/91/summary.html --------------------Summary---------------- eVuln ID: EV0091 CVE: CVE-2006-1134 Software: CyBoards PHP Lite Sowtware's Web Site:...

EV0074.txt

New eVuln Advisory: BirthSys SQL Injection Vulnerability http://evuln.com/vulns/74/summary.html --------------------Summary---------------- eVuln ID: EV0074 CVE: CVE-2006-0775 Software: BirthSys Sowtware's Web Site: http://clvfoto.free.fr/site/download.php3 Versions: 3.1 Critical Level: Moderate...

RHEL 4 : libpng (RHSA-2006:0205)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2006:0205 advisory. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. A heap based buffe...

[eVuln] Vanilla Guestbook Multiple XSS & SQL Injection Vulnerabilities

New eVuln Advisory: Vanilla Guestbook Multiple XSS & SQL Injection Vulnerabilities http://evuln.com/vulns/54/summary.html --------------------Summary---------------- Software: Vanilla Guestbook Sowtware's Web Site: http://tachyondecay.net/ Versions: 1.0 Beta Critical Level: Moderate Type: Multipl...

ExpressionEngine-1.4.1.txt

New eVuln Advisory: ExpressionEngine 'Referer' XSS Vulnerability http://evuln.com/vulns/48/summary.html --------------------Summary---------------- Software: ExpressionEngine Sowtware's Web Site: http://www.pmachine.com Versions: 1.4.1 Critical Level: Moderate Type: Cross-Site Scripting Class:...

Note-A-Day-2.1.txt

New eVuln Advisory: Note-A-Day Weblog Sensitive Information Disclosure http://evuln.com/vulns/44/summary.html --------------------Summary---------------- Software: Note-A-Day Sowtware's Web Site: http://noteaday.com/ Versions: 2.1 Critical Level: Moderate Type: Sensitive Information Disclosure...

SaralBlog-sql.txt

New eVuln Advisory: SaralBlog XSS & Multiple SQL Injection Vulnerabilities http://evuln.com/vulns/40/summary/bt/ --------------------Summary---------------- Software: SaralBlog Sowtware's Web Site: http://www.saralblog.org/ Versions: 1.0 Critical Level: Moderate Type: Multiple Vulnerabilities...

[eVuln] aoblogger Multiple Vulnerabilities

New eVuln Advisory: aoblogger Multiple Vulnerabilities http://evuln.com/vulns/37/summary/bt/ --------------------Summary---------------- Software: aoblogger Sowtware's Web Site: http://mikeheltonisawesome.com/ Versions: 2.3 Critical Level: Moderate Type: Multiple Vulnerabilities Class: Remote...

RHEL 2.1 : apache (RHSA-2006:0158)

Updated Apache httpd packages that correct a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular and freely-available Web server. A flaw in modim...

RHEL 2.1 / 3 / 4 : ethereal (RHSA-2006:0156)

Updated Ethereal packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ethereal is a program for monitoring network traffic. Two denial of service bugs were found in Ethereal's IRC...

EV0015.txt

New eVuln Advisory: ADNForum Multiple Vulnerabilities --------------------Summary---------------- Vendor: Agustin Dondo Vendor's Web Site: http://www.agustin.co.nr/ Software: ADNForum Sowtware's Web Site: http://adnforum.sourceforge.net/ Versions: 1.0b Critical Level: Moderate Type: Multiple...

[eVuln] PHPenpals SQL Injection Vulnerabilit

New eVuln Advisory: PHPenpals SQL Injection Vulnerability --------------------Summary---------------- Vendor: Jevontec http://jevontech.com/ Software: PHPenpals Versions: 310704 Critical Level: Moderate Type: SQL Injection Class: Remote Status: Unpatched Exploit: Available Solution: Not Available...