Scientific Linux Security Update : cups on SL5.x, SL6.x i386/x86_64 (20130228)

It was discovered that CUPS administrative users members of the SystemGroups groups who are permitted to perform CUPS configuration changes via the CUPS web interface could manipulate the CUPS configuration to gain unintended privileges. Such users could read or write arbitrary files with the...

MySQL 5.1/5.5 (Windows) - 'MySQLJackpot' Remote Command Execution

FARLiGHT ELiTE HACKERS LEGACY R3L3ASE Attached is the MySQL Windows Remote Exploit post-auth, udf technique including the previously released mass scanner. The exploit is mirrored at the farlight website http://www.farlight.org. Oracle MySQL on Windows Remote SYSTEM Level Exploit zeroday All owne...

VMSA-2012-0001 VMware ESXi and ESX updates to third party library and ESX Service Console

The remote ESXi is missing one or more security related Updates from VMSA-2012-0001. Summary VMware ESXi and ESX updates to third party library and ESX Service Console address several security issues. Relevant releases: ESXi 4.1 without patch ESXi410-201201401-SG ESXi 5.0 without patch...

NTR ActiveX Control < 2.0.4.8 Multiple Vulnerabilities

At least one version of the NTR ActiveX control installed on the remote Windows host is earlier than 2.0.4.8. As such, it reportedly is affected by the following vulnerabilities : - Four stack-based buffer overflows exist involving the 'bstrUrl' parameter of the 'StartModule' method, the...

CGI Generic XSS (persistent, 2nd pass)

The remote web server hosts one or more CGI scripts that fail to adequately sanitize request strings containing malicious JavaScript. By leveraging this issue, an attacker may be able to cause arbitrary HTML and script code to be executed in a user's browser within the security context of the...

Flash Player APSB09-01 Multiple Vulnerabilities

Binary data 4937.prm...

TWiki Privilege Escalation

Binary data 3657.prm...

ClamAV < 0.86.3 Content-parsing Multiple Overflows (deprecated)

Binary data 3229.prm...

Outlook Express NNTP LIST Command Remote Overflow

Binary data 3013.prm...

Mandrake Linux Security Advisory : sane (MDKSA-2003:099)

Several vulnerabilities were discovered in the saned daemon, a part of the sane package, which allows for a scanner to be used remotely. The IP address of the remote host is only checked after the first communication occurs, which causes the saned.conf restrictions to be ignored for the first...

Moderate: Red Hat Security Advisory: sane-backends security update

Updated SANE packages that resolve a number of vulnerabilities with the saned daemon are now available. SANE is a package for using document scanners. Sane includes a daemon program called saned that enables a single machine connected to a scanner to be used remotely. This program contains severa...