Adobe Acrobat Reader Plugin Crafted URL Double Free (CVE-2007-0046)

Adobe Acrobat is a product for creating, distributing, and viewing PDF documents. Adobe Acrobat Reader is a free application that allows for viewing and printing of PDF documents. Adobe extends the functionality of the PDF specification and their products as new revisions are produced. Most of th...

Mandriva Update for phonon-gstreamer MDVA-2010:034 (phonon-gstreamer)

Check for the Version of phonon-gstreamer OpenVAS Vulnerability Test Mandriva Update for phonon-gstreamer MDVA-2010:034 phonon-gstreamer Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

Mandriva Update for phonon-gstreamer MDVA-2010:034 (phonon-gstreamer)

Check for the Version of phonon-gstreamer OpenVAS Vulnerability Test Mandriva Update for phonon-gstreamer MDVA-2010:034 phonon-gstreamer Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

[SECURITY] Fedora 11 Update: pidgin-2.6.5-1.fc11

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

CentOS 5 : gstreamer-plugins-base (CESA-2009:0352)

Updated gstreamer-plugins-base packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GStreamer is a streaming media framework based on graphs of filters which operat...

WordPress Plugin Events - SQL Injection

WordPress Plugin Events - SQL Injection +===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PHPope 1.0.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSconfigdirplugins parameter to plugins/address/admin/index.php, 2 GLOBALSconfigdirfunctions parameter to plugins/im/compose.php, and 3...

CVE-2009-4472: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in PHPope 1.0.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSconfigdirplugins parameter to plugins/address/admin/index.php, 2 GLOBALSconfigdirfunctions parameter to plugins/im/compose.php, and 3...

CVE-2009-4300: Exposure of Sensitive Information to an Unauthorized Actor

Multiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 store the MD5 hashes for passwords in the user table, even when the cached hashes are not used by the plugin, which might make it easier for attackers to obtain credentials via unspecified vectors...

Fedora 11 : moodle-1.9.7-1.fc11 (2009-13080)

Moodle upstream has released latest stable versions 1.9.7 and 1.8.11, fixing multiple security issues. The list for 1.9.7 release: -------------------------- Security issues MSA-09-0022 - Multiple CSRF problems fixed MSA-09-0023 - Fixed user account disclosure in LAMS module MSA-09-0024 - Fixed...

Fedora 12 : moodle-1.9.7-1.fc12 (2009-13065)

Moodle upstream has released latest stable versions 1.9.7 and 1.8.11, fixing multiple security issues. The list for 1.9.7 release: -------------------------- Security issues MSA-09-0022 - Multiple CSRF problems fixed MSA-09-0023 - Fixed user account disclosure in LAMS module MSA-09-0024 - Fixed...

Fedora 10 : moodle-1.9.7-1.fc10 (2009-13040)

Moodle upstream has released latest stable versions 1.9.7 and 1.8.11, fixing multiple security issues. The list for 1.9.7 release: -------------------------- Security issues MSA-09-0022 - Multiple CSRF problems fixed MSA-09-0023 - Fixed user account disclosure in LAMS module MSA-09-0024 - Fixed...

Mandriva Security Advisory MDVSA-2009:130-1 (gstreamer0.10-plugins-good)

The remote host is missing an update to gstreamer0.10-plugins-good announced via advisory MDVSA-2009:130-1. OpenVAS Vulnerability Test $Id: mdksa20091301.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:130-1 gstreamer0.10-plugins-good Authors: Thomas...

Wordpress Image Manager Plugins Shell Upload Vulnerability

Exploit for unknown platform in category web applications ========================================================== Wordpress Image Manager Plugins Shell Upload Vulnerability ========================================================== Exploit Title: Wordpress Image Manager Plugins Shell Upload...

[SECURITY] Fedora 10 Update: wireshark-1.2.1-1.fc10

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

CVE-2009-4085

CVE-2009-4085 describes a remote file inclusion (RFI) in PHP Traverser 0.8.0. The vulnerability affects the file assets/plugins/mp3_id/mp3_id.php, where an attacker can supply a URL via the GLOBALS[BASE] parameter to execute arbitrary PHP code on the server. The CVSSv2 base score is 7.5 (HIGH) wi...

Vulnerabilities in plugins for WordPress

Hello Bugtraq! I want to tell you about different vulnerabilities in plugins for WordPress. About some of them there were posts to the list earlier. This August I made a summary about all vulnerabilities in plugins for WordPress http://websecurity.com.ua/3397/, which I found during 2006-2009. In...

Mandrake Security Advisory MDVSA-2009:278 (compiz-fusion-plugins-main)

The remote host is missing an update to compiz-fusion-plugins-main announced via advisory MDVSA-2009:278. OpenVAS Vulnerability Test $Id: mdksa2009278.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:278 compiz-fusion-plugins-main Authors: Thomas Rein...

Mandriva Linux Security Advisory : compiz-fusion-plugins-main (MDVSA-2009:278)

A vulnerability has been found and corrected in compiz-fusion-plugins-main : The Expo plugin in Compiz Fusion 0.7.8 allows local users with physical access to drag the screen saver aside and access the locked desktop by using Expo mouse shortcuts, a related issue to CVE-2007-3920 CVE-2008-6514...

SLES10: Security update for gstreamer

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: gstreamer010-plugins-good More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...