SuSE Update for kernel-rt SUSE-SA:2008:013

Check for the Version of kernel-rt OpenVAS Vulnerability Test $Id: gbsuse2008013.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for kernel-rt SUSE-SA:2008:013 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise MRG 1.0. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

Design/Logic Flaw

Unspecified vulnerability in Best Practical Solutions RT 3.0.0 through 3.6.6 allows remote authenticated users to cause a denial of service CPU or memory consumption via unspecified vectors related to the Devel::StackTrace module for Perl...

CVE-2008-3502

CVE-2008-3502 affects Best Practical Solutions RT versions 3.0.0 through 3.6.6. The vulnerability is described as an unspecified issue related to the Perl Devel::StackTrace module that allows remote authenticated users to cause a denial of service via unspecified vectors, potentially consuming CP...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably other configuration settings as administrators via unspecified vectors...

CVE-2008-0524

Cross-site request forgery CSRF vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably other configuration settings as administrators via unspecified vectors...

CVE-2008-0524

CVE-2008-0524 is a CSRF flaw in the web management interface of multiple Yamaha RT series routers. The vulnerability allows an attacker to change password and potentially other configuration settings by convincing an administrator, via unspecified vectors, to visit a malicious site while authenti...

Marshal MailMarshal TAR Unpacking Vulnerability

Marshal MailMarshal TAR Unpacking Vulnerability Overview -------- Vendor: Marshal www.marshal.com Product: MailMarshal = 6.2.1.3253 Vulnerability: Remote file overwrite, Remote execution Risk: HIGH Description ----------- During a security audit for a customer we have discovered a serios...

CVE-2005-4669

SQL injection vulnerability in RT Internet Solutions RTIS WebAdmin allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

CVE-2005-4669

The CVE-2005-4669 entry concerns RT Internet Solutions (RTIS) WebAdmin with a SQL injection vulnerability in the login fields (username and password). Affected component is the WebAdmin interface; root cause is improper handling of input in the authentication form, enabling arbitrary SQL executio...

Helix Player / Real Player format string bug

Format string bugs on .rt / .rp files parsing...

CVE-2005-2710

Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the 1 image handle or 2 timeformat attribute in a RealPix .rp or RealText .rt file...

CVE-2002-2116

The provided documents describe CVE-2002-2116 affecting Netgear RM-356 and RT-338 series SOHO routers. The vulnerability is a remote denial of service triggered by a UDP port scan, demonstrated via nmap. Affected components are related to the router’s handling of UDP traffic, with the root cause ...

CVE-2004-1076

Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file...

CVE-2003-0273

The CVE-2003-0273 entry describes a cross-site scripting (XSS) vulnerability in the web interface of Request Tracker (RT) versions 1.0 through 1.0.7, allowing remote attackers to execute script via message bodies. CVSS v2 base metrics indicate a Medium impact with Partial confidentiality, integri...

Bestpractical RT crossite scripting

No description provided...

RT 1.0.7 vulnerable to Cross Site Scripting attacks

All versions of RT 1.0, up to and including RT 1.0.7 are vulnerable to a cross site scripting attack with content included in message bodies. If you use RT 1.0 to handle mail from unknown or possibly malicious users, an attacker could exploit this hole to perform actions within RT as any staff us...

CVE-2023-47005

Concrete details link a vulnerability to ASUS RT-AX57 (PT-2023-7096): version 3.0.0.4 386 52041 is affected. The issue arises from insufficient input validation in the sub ln 2C318 function of the router’s microprogram, enabling a remote attacker to execute arbitrary code by crafting a request to...

CVE-2023-47007

The CVE-2023-47007 entry is linked to Asus RT-AX57 firmware, vulnerable in the sub 391B8 function due to insufficient input validation. A remote attacker could execute arbitrary code via a crafted request to the lan ifname field (ASUS RT-AX57, version 3.0.0.4 386 52041). Mitigation guidance in th...

CVE-2023-47008

Product: ASUS RT-AX57 router (firmware 3.0.0.4 386 52041). Vulnerability: Insufficient input validation in the sub 4CCE4 function of the firmware; allows a remote attacker to execute arbitrary code via a crafted request to the ifname field. Impact: Remote code execution possible on affected devic...