Debian DSA-2159-1 : vlc - missing input sanitising

Dan Rosenberg discovered that insufficient input validation in VLC's processing of Matroska/WebM containers could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Securit...

DSA-2159-1 vlc - missing input sanitising

Bulletin has no description...

[SECURITY] [DSA 2097-2] New phpmyadmin packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2097-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst September 11, 2010 http://www.debian.org/security/faq -...

Debian DSA-2097-1 : phpmyadmin - insufficient input sanitising

Several remote vulnerabilities have been discovered in phpMyAdmin, a tool to administer MySQL over the web. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-3055 The configuration setup script does not properly sanitise its output file, which allows...

[SECURITY] [DSA 2073-1] New mlmmj packages fix directory traversal

------------------------------------------------------------------------ Debian Security Advisory DSA-2073-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 20, 2010 http://www.debian.org/security/faq -...

DSA-2067-1 mahara - several vulnerabilities

Bulletin has no description...

Debian DSA-2039-1 : cacti - missing input sanitising

It was discovered that Cacti, a frontend to rrdtool for monitoring systems and services missed input sanitising, making a SQL injection attack possible. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

[SECURITY] [DSA 2039-1] New cacti packages fix missing input sanitising

------------------------------------------------------------------------ Debian Security Advisory DSA-2039-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 23, 2010 http://www.debian.org/security/faq -...

DSA-2039-1 cacti - missing input sanitising

Bulletin has no description...

Debian DSA-2024-1 : moin - insufficient input sanitising

Jamie Strandboge discovered that moin, a python clone of WikiWiki, does not sufficiently sanitize the page name in 'Despam' action, allowing remote attackers to perform cross-site scripting XSS attacks. In addition, this update fixes a minor issue in the 'textcha' protection, it could be triviall...

[SECURITY] [DSA 2024-1] New moin packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-2024-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 31, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2024-1] New moin packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-2024-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 31, 2010 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2004-1 (samba)

The remote host is missing an update to samba announced via advisory DSA 2004-1. OpenVAS Vulnerability Test $Id: deb20041.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2004-1 samba Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

DSA-2013-1 egroupware - several vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 2009-1] New tdiary packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-2009-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 09, 2010 http://www.debian.org/security/faq -...

Debian DSA-1937-1 : gforge - insufficient input sanitising

It was discovered that gforge, collaborative development tool, is prone to a cross-site scripting attack via the helpname parameter. Beside fixing this issue, the update also introduces some additional input sanitising. However, there are no known attack vectors. %NASLMINLEVEL 70300 C Tenable...

Debian DSA-1836-1 : fckeditor - missing input sanitising

Vinny Guido discovered that multiple input sanitising vulnerabilities in Fckeditor, a rich text web editor component, may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Debian DSA-1965-1 : phpldapadmin - missing input sanitising

It was discovered that phpLDAPadmin, a web-based interface for administering LDAP servers, doesn't sanitize an internal variable, which allows remote attackers to include and execute arbitrary local files. The oldstable distribution etch is not affected by this problem. %NASLMINLEVEL 70300 C...

Debian DSA-1875-1 : ikiwiki - missing input sanitising

Josh Triplett discovered that the blacklist for potentially harmful TeX code of the teximg module of the Ikiwiki wiki compiler was incomplete, resulting in information disclosure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DSA-1949-1 : php-net-ping - programming error

It was discovered that php-net-ping, a PHP PEAR module to execute ping independently of the Operating System, performs insufficient input sanitising, which might be used to inject arguments no CVE yet or execute arbitrary commands CVE-2009-4024 on a system that uses php-net-ping. %NASLMINLEVEL...