6964 matches found
CVE-2009-1343
CVE-2009-1343 describes a cross-site scripting (XSS) vulnerability in the Drupal Print module (also known as Printer, e-mail and PDF versions). The flaw affects 5.x releases before 5.x-4.5 and 6.x releases before 6.x-1.5, where an attacker can inject arbitrary script or HTML via content titles. T...
Mandriva Update for gtk+2.0 MDKA-2007:100 (gtk+2.0)
Check for the Version of gtk+2.0 OpenVAS Vulnerability Test Mandriva Update for gtk+2.0 MDKA-2007:100 gtk+2.0 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Mandriva Update for gtk+2.0 MDKA-2007:100 (gtk+2.0)
Check for the Version of gtk+2.0 OpenVAS Vulnerability Test Mandriva Update for gtk+2.0 MDKA-2007:100 gtk+2.0 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Ubuntu Update for php5 vulnerabilities USN-424-1
Ubuntu Update for Linux kernel vulnerabilities USN-424-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4241.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for php5 vulnerabilities USN-424-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Fedora Update for mousepad FEDORA-2007-4368
Check for the Version of mousepad OpenVAS Vulnerability Test Fedora Update for mousepad FEDORA-2007-4368 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CentOS Update for samba CESA-2008:0288-01 centos2 i386
Check for the Version of samba OpenVAS Vulnerability Test CentOS Update for samba CESA-2008:0288-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Design/Logic Flaw
IBM WebSphere Partner Gateway WPG 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet aka RNIF document to a backend application, related to 1 "altered service content" and 2 "digital...
CVE-2009-0440
IBM WebSphere Partner Gateway WPG 6.0.0 through 6.0.0.7 does not properly handle failures of signature verification, which might allow remote authenticated users to submit a crafted RosettaNet aka RNIF document to a backend application, related to 1 "altered service content" and 2 "digital...
netatalk shell characters vulnerabilities
Shell characters vulnerability on PostScript print jobs processing...
SuSE Update for cups SUSE-SA:2008:015
Check for the Version of cups OpenVAS Vulnerability Test $Id: gbsuse2008015.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for cups SUSE-SA:2008:015 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...
IE Print Table of Links Cross-Zone Scripting
No description provided by source. html body 点击选项，选中打印链表列表，点打印 a href=”http://www.bl.com?zzz=dsasad script defer var ForWriting = 2; var strFile = ‘c:\test2.js’; var objFSO = new ActiveXObject’Scripting.FileSystemObject’; var objStream = objFSO.OpenTextFilestrFile,ForWriting,true,false;...
Samba注册表共享名非授权访问漏洞
BUGTRAQ ID: 33118 CVECAN ID: CVE-2009-0022 Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 启用了注册表共享的Samba没有正确地验证共享名，通过认证的攻击者可以通过使用较老版本的smbclient并指定空字符串为共享名（如smbclient //server/ -U user%pass）来访问root文件系统。 Samba 3.2.0 - 3.2.6 临时解决方法： 通过registry shares = no禁用注册表共享。 厂商补丁： Samba -----...
Command injection
The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title...
CVE-2008-5718
The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title...
DEBIAN-CVE-2008-5718
The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title...
CVE-2008-5718
The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title...
PT-2008-6770 · Netatalk +1 · Netatalk +1
Name of the Vulnerable Software and Affected Versions: Netatalk versions prior to 2.0.4-beta2 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a print request. This can be achieved by using certain variables in a pipe command for the print...
Gentoo Security Advisory GLSA 200812-11 (cups)
The remote host is missing updates announced in advisory GLSA 200812-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CUPS: Multiple vulnerabilities
Background CUPS is the Common Unix Printing System. Description Several buffer overflows were found in: The readrle16 function in imagetops CVE-2008-3639, found by regenrecht, reported via ZDI The WriteProlog function in texttops CVE-2008-3640, found by regenrecht, reported via ZDI The...