DSA-1569-1 cacti - multiple vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 1564-1] New wordpress packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1564-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 01, 2008 http://www.debian.org/security/faq -...

Debian DSA-1560-1 : kronolith2 - insufficient input sanitising

'The-0utl4w' discovered that the Kronolith, calendar component for the Horde Framework, didn't properly sanitise URL input, leading to a cross-site scripting vulnerability in the add event screen. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Debian DSA-1559-1 : phpgedview - insufficient input sanitising

It was discovered that phpGedView, an application to provide online access to genealogical data, performed insufficient input sanitising on some parameters, making it vulnerable to cross site scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

Debian DSA-1557-1 : phpmyadmin - insufficient input sanitising

Several remote vulnerabilities have been discovered in phpMyAdmin, an application to administrate MySQL over the WWW. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1924 Attackers with CREATE table permissions were allowed to read arbitrary files...

[SECURITY] [DSA 1560-1] New kronolith2 packages fix cross site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1560-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 28, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1559-1] New phpgedview packages fix cross site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-1559-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 27, 2008 http://www.debian.org/security/faq -...

DSA-1559-1 phpgedview - cross site scripting

Bulletin has no description...

[SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1557-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 24, 2008 http://www.debian.org/security/faq -...

Debian DSA-1554-2 : roundup - insufficient input sanitising

Roundup, an issue tracking system, fails to properly escape HTML input, allowing an attacker to inject client-side code typically JavaScript into a document that may be viewed in the victim's browser. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

[SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1557-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 24, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1554-1] New roundup packages fix cross-site scripting vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1554-1 [email protected] http://www.debian.org/security/ Noah Meyerhans April 22, 2008 http://www.debian.org/security/faq -...

Debian DSA-1552-1 : mplayer - missing input sanitising

It was discovered that the MPlayer movie player performs insufficient input sanitising on SDP session data, leading to potential execution of arbitrary code through a malformed multimedia stream. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

[SECURITY] [DSA 1552-1] New mplayer packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1552-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 19, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1552-1] New mplayer packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1552-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 19, 2008 http://www.debian.org/security/faq -...

DSA-1552-1 mplayer - arbitrary code execution

Bulletin has no description...

Debian DSA-1527-1 : debian-goodies - insufficient input sanitising

Thomas de Grenier de Latour discovered that the checkrestart tool in the debian-goodies suite of utilities, allowed local users to gain privileges via shell metacharacters in the name of the executable file for a running process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

Debian DSA-1528-1 : serendipity - insufficient input sanitising

Peter Huwe and Hanno Bock discovered that Serendipity, a weblog manager, did not properly sanitise input to several scripts which allowed cross site scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

[SECURITY] [DSA 1527-1] New debian-goodies packages fix privilege escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1527-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 24, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1527-1] New debian-goodies packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1527-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 24, 2008 http://www.debian.org/security/faq -...