623 matches found
Debian DSA-1938-1 : php-mail - programming error
It was discovered that php-mail, a PHP PEAR module for sending email, has insufficient input sanitising, which might be used to obtain sensitive data from the system that uses php-mail. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...
Debian DSA-1829-1 : sork-passwd-h3 - insufficient input sanitising
It was discovered that sork-passwd-h3, a Horde3 module for users to change their password, is prone to a cross-site scripting attack via the backend parameter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...
Debian DSA-1947-1 : shibboleth-sp, shibboleth-sp2, opensaml2 - missing input sanitising
Matt Elder discovered that Shibboleth, a federated web single sign-on system is vulnerable to script injection through redirection URLs. More details can be found in the Shibboleth advisory at http://shibboleth.internet2.edu/secadv/secadv20091104.txt. %NASLMINLEVEL 70300 C Tenable Network Securit...
Debian DSA-1954-1 : cacti - insufficient input sanitising
Several vulnerabilities have been found in cacti, a frontend to rrdtool for monitoring systems and services. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3112, CVE-2007-3113 It was discovered that cacti is prone to a denial of service via the...
Debian DSA-1951-1 : firefox-sage - insufficient input sanitising
It was discovered that firefox-sage, a lightweight RSS and Atom feed reader for Firefox, does not sanitise the RSS feed information correctly, which makes it prone to a cross-site scripting and a cross-domain scripting attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
Debian DSA-1966-1 : horde3 - insufficient input sanitising
Several vulnerabilities have been found in horde3, the horde web application framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3237 It has been discovered that horde3 is prone to cross-site scripting attacks via crafted number preferences o...
Debian DSA-1887-1 : rails - missing input sanitising
Brian Mastenbrook discovered that rails, the MVC ruby based framework geared for web application development, is prone to cross-site scripting attacks via malformed strings in the form helper. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
Debian DSA-1827-1 : ipplan - insufficient input sanitising
It was discovered that ipplan, a web-based IP address manager and tracker, does not sufficiently escape certain input parameters, which allows remote attackers to conduct cross-site scripting attacks. The oldstable distribution etch does not contain ipplan. %NASLMINLEVEL 70300 C Tenable Network...
phpNagios 'conf[lang]' Parameter Local File Inclusion Vulnerability
The host is running phpNagios and is prone to local file include Vulnerabilities. OpenVAS Vulnerability Test $Id: gbphpnagioslfivuln.nasl 5373 2017-02-20 16:27:48Z teissa $ phpNagios 'conflang' Parameter Local File Inclusion Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...
[SECURITY] [DSA 1966-1] New horde3 packages fix cross-site scripting
------------------------------------------------------------------------ Debian Security Advisory DSA-1966-1 [email protected] http://www.debian.org/security/ Steffen Joeris January 07, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA-1965-1] New phpldapadmin packages fix remote file inclusion
------------------------------------------------------------------------ Debian Security Advisory DSA-1965 [email protected] http://www.debian.org/security/ Giuseppe Iuculano January 06, 2010 http://www.debian.org/security/faq -...
New cacti packages fix insufficient input sanitising
No description provided by source. - ------------------------------------------------------------------------ Debian Security Advisory DSA-1954-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 16, 2009 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1954-1] New cacti packages fix insufficient input sanitising
------------------------------------------------------------------------ Debian Security Advisory DSA-1954-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 16, 2009 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1954-1] New cacti packages fix insufficient input sanitising
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1954-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 16, 2009 http://www.debian.org/security/faq -...
DSA-1954-1 cacti - insufficient input sanitising
Bulletin has no description...
[SECURITY] [DSA 1951-1] New firefox-sage packages fix insufficient input sanitizing
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1951-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 15, 2009 http://www.debian.org/security/faq -...
DSA-1949-1 php-net-ping - arbitrary code execution
Bulletin has no description...
[SECURITY] [DSA 1937-1] New gforge packages fix cross-site scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1937-1 [email protected] http://www.debian.org/security/ Steffen Joeris November 21, 2009 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 1938-1 (php-mail)
The remote host is missing an update to php-mail announced via advisory DSA 1938-1. OpenVAS Vulnerability Test $Id: deb19381.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1938-1 php-mail Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...