CVE-2008-1487

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via 1 ftp/index.php, 2 viewer.php, 3 functions/other.php, 4 include/leftmenu.class.php, and 5 plugins/stats/statsview.php...

CVE-2008-1487: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via 1 ftp/index.php, 2 viewer.php, 3 functions/other.php, 4 include/leftmenu.class.php, and 5 plugins/stats/statsview.php...

symfony 1.0.12 is (finally) out !

After two months and more than 30 tickets closed, the 1.0.12 comes with spring. As it fixes an important security issue and windows plugins problems, we do strongly advise you to update your projects. Here is the changelog : r8019: sfWebRequest handles multi-dimensional file input fields backport...

CVE-2008-1344: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attackers to execute arbitrary SQL commands via the 1 year parameter in a dayview action to plugins/calendar/calendarbackend.php and the 2 page parameter to ajaxpbackend.php...

[SECURITY] Fedora 8 Update: dovecot-1.0.13-6.fc8

Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail in either of maildir or mbox formats. The SQL drivers and authentication plugins are in their subpackages...

Solaris 10 (sparc) : 137000-08 (deprecated)

SunOS 5.10: PostgreSQL 8.2 documentation patch. Date this patch was last updated by Sun : Jun/09/11 This plugin has been deprecated and either replaced with individual 137000 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Debian Security Advisory DSA 1495-2 (nagios-plugins)

The remote host is missing an update to nagios-plugins announced via advisory DSA 1495-2. OpenVAS Vulnerability Test $Id: deb14952.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1495-2 nagios-plugins Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...

Debian: Security Advisory (DSA-1495-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libmodplug 's3m' Remote Buffer Overflow Vulnerability

No description provided by source. /The libmodplug library is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running ...

[SECURITY] [DSA 1495-2] New nagios-plugins packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1495-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 17, 2008 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-1495-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1495-1 : nagios-plugins - buffer overflows

Several local/remote vulnerabilities have been discovered in two of the plugins for the Nagios network monitoring and management system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5198 A buffer overflow has been discovered in the parser for HTT...

CVE-2003-1542: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in plugins/file.php in phpWebFileManager before 0.4.4 allows remote attackers to read arbitrary files via a .. dot dot in the fmpath parameter...

[SECURITY] [DSA 1495-1] New nagios-plugins packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1495-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 12, 2008 http://www.debian.org/security/faq -...

DSA-1495-1 nagios-plugins - several

Bulletin has no description...

Debian Security Advisory DSA 1156-1 (kdebase)

The remote host is missing an update to kdebase announced via advisory DSA 1156-1. Ludwig Nussel discovered that kdm, the X display manager for KDE, handles access to the session type configuration file insecurely, which may lead to the disclosure of arbitrary files through a symlink attack...

[SECURITY] Fedora 8 Update: xfce-mcs-plugins-4.4.2-1.fc8

This package inlcudes a set of plugins for the multi channel settings manager...

[SECURITY] Fedora 7 Update: xfce-mcs-plugins-4.4.2-1.fc7

This package inlcudes a set of plugins for the multi channel settings manager...

SuSE 10 Security Update : nagios plugins (ZYPP Patch Number 4624)

fix possible buffer overflow during HTTP Location header parsing in checkhttp CVE-2007-5198 fix possible buffer overflow during snmpget parsing in checksnmp. CVE-2007-5623 if !definedfunc"nasllevel" || nasllevel = 70000 && nasllevel = 70200 && nasllevel = 80000 && nasllevel 80502 exit0; C Tenable...

CVE-2007-6202: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in plugins/search/search.php in Neocrome Seditio CMS 121 and earlier allows remote attackers to execute arbitrary SQL commands via the pagsub parameter to plug.php...