Debian: Security Advisory (DSA-1054-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 248-1 (hypermail)

The remote host is missing an update to hypermail announced via advisory DSA 248-1. OpenVAS Vulnerability Test $Id: deb2481.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 248-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 1059-1 (quagga)

The remote host is missing an update to quagga announced via advisory DSA 1059-1. Konstantin Gavrilenko discovered several vulnerabilities in quagga, the BGP/OSPF/RIP routing daemon. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-2223 Remote attackers...

Debian Security Advisory DSA 784-1 (courier)

The remote host is missing an update to courier announced via advisory DSA 784-1. A problem has been discovered in the Courier Mail Server. DNS failures were not handled properly when looking up Sender Policy Framework SPF records, which could allow attackers to cause memory corruption. The defau...

Debian Security Advisory DSA 813-1 (centericq)

The remote host is missing an update to centericq announced via advisory DSA 813-1. Several problems have been discovered in libgadu which is also part of centericq, a text-mode multi-protocol instant messenger client. The Common Vulnerabilities and Exposures project identifies the following...

Debian Security Advisory DSA 317-1 (cupsys)

The remote host is missing an update to cupsys announced via advisory DSA 317-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-252)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-292)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1301-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

mod_proxy_ftp XSS

modproxyftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting XSS attacks using UTF-7 encoding...

Cross-Site Scripting vulnerability in RiSearch PHP

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в RiSearch PHP это локальный поисковый движок. XSS: http://site/search/searchru.php?query=223E3Cscript3Ealertdocument.cookie3C/script3E Уязвимы старые версии движка. Последняя версия движка уже неуязвима...

PostgreSQL privilege escalation via dblink

The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete...

CVE-2007-6661

2z project 0.9.6.1 allows attackers to change the password without supplying the old password...

CVE-2007-6661

2z project 0.9.6.1 allows attackers to change the password without supplying the old password...

SuSE 10 Security Update : findutils-locate (ZYPP Patch Number 3966)

The cronjob that deletes old core files could be tricked to delete arbitrary files. Old core files are deleted if DELETEOLDCORE=yes is set. That is not the case by default though. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Old Guy's Scripts TalkBack Comments and Guestbook远程文件包含漏洞

TalkBack 2.2.7 Multiple Remote File Inclusion Vulnerabilities Old Guy's Scripts TalkBack Comments and Guestbook是一款基于PHP的WEB应用程序。 Old Guy's Scripts TalkBack Comments and Guestbook不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于多个脚本对用户提交的'languagefile'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。...

DSA-1402-1 gforge - insecure temporary files

Bulletin has no description...

Fedora 7 : firestarter-1.0.3-16.fc7 (2007-0700)

Tue Jun 26 2007 Damien Durand - 1.0.3-16 - Fix BR - Fix active connections status - Sun Jun 17 2007 Damien Durand - 1.0.3-15 - Remove old doc - Fix pam configuration Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

CIFS signing sec= mount options don't work correctly

The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request...

Airkiosk/formlib application is XSS vuln

In the last week I've found a XSS vuln into the Sutra's Airkiosk application for the realtime distribution of flights/booking and check-in interface www.airkiosk.com. The XSS is possible because they are using a VULN/OLD formlib.pl in their application that permits to execute any JavaScript you...