[SECURITY] Fedora 12 Update: wireshark-1.2.6-1.fc12

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

CVE-2010-0759: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allows remote attackers to read, and possibly include and execute, arbitrary files via directory traversal sequences in the files...

Debian DSA-1851-1 : gst-plugins-bad0.10 - integer overflow

It was discovered that gst-plugins-bad0.10, the GStreamer plugins from the 'bad' set, is prone to an integer overflow when processing a MED file with a crafted song comment or song name. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

Debian DSA-1839-1 : gst-plugins-good0.10 - integer overflow

It has been discovered that gst-plugins-good0.10, the GStreamer plugins from the 'good' set, are prone to an integer overflow, when processing a large PNG file. This could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

Yahoo Messenger YMailAttach ActiveX Control Buffer Overflow (CVE-2006-6603)

Yahoo! Messenger is a instant messaging communicating application developed by Yahoo! Inc. When a user registers a Yahoo! user account, it is bundled with the Yahoo! Mail service, which is a web-based email service. Users can use a web browser to read, send and maintain their email messages. The...

[SECURITY] Fedora 13 Update: pidgin-2.6.6-1.fc13

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

Google to Pay For Bugs Found in Chromium

Google is starting a new program that will pay security researchers a $500 bounty for every security bug they find in Chromium, the open-source codebase behind the Google Chrome browser, as well as for bugs found in Chrome itself. The company said Thursday that the plan is both meant as a reward...

IT-Grundschutz M5.008: Regelmäßiger Sicherheitscheck des Netzes

IT-Grundschutz M5.008: Regelmäßiger Sicherheitscheck des Netzes. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95050 Diese Prüfung bezieht sich auf die 11...

Adobe Acrobat Reader Plugin Crafted URL Double Free (CVE-2007-0046)

Adobe Acrobat is a product for creating, distributing, and viewing PDF documents. Adobe Acrobat Reader is a free application that allows for viewing and printing of PDF documents. Adobe extends the functionality of the PDF specification and their products as new revisions are produced. Most of th...

Mandriva Update for phonon-gstreamer MDVA-2010:034 (phonon-gstreamer)

Check for the Version of phonon-gstreamer OpenVAS Vulnerability Test Mandriva Update for phonon-gstreamer MDVA-2010:034 phonon-gstreamer Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

Mandriva Update for phonon-gstreamer MDVA-2010:034 (phonon-gstreamer)

Check for the Version of phonon-gstreamer OpenVAS Vulnerability Test Mandriva Update for phonon-gstreamer MDVA-2010:034 phonon-gstreamer Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

[SECURITY] Fedora 11 Update: pidgin-2.6.5-1.fc11

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

CentOS 5 : gstreamer-plugins-base (CESA-2009:0352)

Updated gstreamer-plugins-base packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GStreamer is a streaming media framework based on graphs of filters which operat...

WordPress Plugin Events - SQL Injection

WordPress Plugin Events - SQL Injection +===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PHPope 1.0.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSconfigdirplugins parameter to plugins/address/admin/index.php, 2 GLOBALSconfigdirfunctions parameter to plugins/im/compose.php, and 3...

CVE-2009-4472: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in PHPope 1.0.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSconfigdirplugins parameter to plugins/address/admin/index.php, 2 GLOBALSconfigdirfunctions parameter to plugins/im/compose.php, and 3...

CVE-2009-4300: Exposure of Sensitive Information to an Unauthorized Actor

Multiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 store the MD5 hashes for passwords in the user table, even when the cached hashes are not used by the plugin, which might make it easier for attackers to obtain credentials via unspecified vectors...

Fedora 11 : moodle-1.9.7-1.fc11 (2009-13080)

Moodle upstream has released latest stable versions 1.9.7 and 1.8.11, fixing multiple security issues. The list for 1.9.7 release: -------------------------- Security issues MSA-09-0022 - Multiple CSRF problems fixed MSA-09-0023 - Fixed user account disclosure in LAMS module MSA-09-0024 - Fixed...

Fedora 12 : moodle-1.9.7-1.fc12 (2009-13065)

Moodle upstream has released latest stable versions 1.9.7 and 1.8.11, fixing multiple security issues. The list for 1.9.7 release: -------------------------- Security issues MSA-09-0022 - Multiple CSRF problems fixed MSA-09-0023 - Fixed user account disclosure in LAMS module MSA-09-0024 - Fixed...

Fedora 10 : moodle-1.9.7-1.fc10 (2009-13040)

Moodle upstream has released latest stable versions 1.9.7 and 1.8.11, fixing multiple security issues. The list for 1.9.7 release: -------------------------- Security issues MSA-09-0022 - Multiple CSRF problems fixed MSA-09-0023 - Fixed user account disclosure in LAMS module MSA-09-0024 - Fixed...