905 matches found
[SECURITY] Fedora 14 Update: cgit-0.8.2.1-4.fc14
This is an attempt to create a fast web interface for the git scm, using a builtin cache to decrease server io-pressure...
Code injection
Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft and JDEdwards Suite SCM 8.9 Bundle 37, SCM 9.0 Bundle 30, and SCM 9.1 Bundle 4 allows local users to affect confidentiality, integrity, and availability via unknown vectors...
CVE-2010-2380
Unspecified vulnerability in the PeopleSoft Enterprise FSCM component in Oracle PeopleSoft and JDEdwards Suite SCM 8.9 Bundle 37, SCM 9.0 Bundle 30, and SCM 9.1 Bundle 4 allows local users to affect confidentiality, integrity, and availability via unknown vectors...
CVE-2010-2380
CVE-2010-2380 affects PeopleSoft Enterprise FSCM within Oracle PeopleSoft/JD Edwards Suite SCM: SCM 8.9 Bundle #37, SCM 9.0 Bundle #30, and SCM 9.1 Bundle #4. The vulnerability is described as local, with impact to confidentiality, integrity, and availability, but vectors and root cause are unspe...
CVE-2010-2307: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow remote attackers to read arbitrary files via 1 "//" multiple leading slash, 2 ../ dot dot sequences, and encoded dot dot sequences in a URL...
Motorola Surfboard Cable Modem - Directory Traversal
Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal Date: 2010.06.03 Author: S2 Crew Hungary Software Link: - Version: Model name: SBV6120E, Firmware Name: SBV6X2X-1.0.0.5-SCM-02-SHPC Tested on: ^ CVE: - Code : The following urls get back the /etc/passwd file from the modem:...
Silverstripe <= v2.3.4: two XSS vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Silverstripe CMS, http://silverstripe.org/, version 2.3.4 and lower and its unreleased 2.4 branch, is vulnerable to two Cross Site Scripting issues. 1. The comment posting mechanism of Silverstripe 'PostCommentForm' fails to properly sanitize the...
Silverstripe CMS 2.3.4 Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Silverstripe CMS, , version 2.3.4 and lower and its unreleased 2.4 branch, is vulnerable to two Cross Site Scripting issues. 1. The comment posting mechanism of Silverstripe 'PostCommentForm' fails to properly sanitize the 'CommenterURL' parameter...
Mandriva Update for kernel MDVSA-2008:234 (kernel)
Check for the Version of kernel OpenVAS Vulnerability Test Mandriva Update for kernel MDVSA-2008:234 kernel Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
kernel: Unix sockets kernel panic
The scmdestroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service panic via vectors related to sending an SCMRIGHTS message through a UNIX...
kernel: Unix sockets kernel panic
The scmdestroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service panic via vectors related to sending an SCMRIGHTS message through a UNIX...
kernel: Unix sockets kernel panic
The scmdestroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service panic via vectors related to sending an SCMRIGHTS message through a UNIX...
FreeBSD Ports: git
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
kernel: Unix sockets kernel panic
The scmdestroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service panic via vectors related to sending an SCMRIGHTS message through a UNIX...
CA eTrust SCM Multiple HTTP Gateway Service Vulnerabilities
CA eTrust Secure Content Manager is prone to arbitrary code execution and denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
eTrust SCM SMTP Version Detection
Binary data 4492.prm...
CA eTrust SCM Plaintext Login Detection
Binary data 4484.prm...
eTrust SCM SMTP Version Detection
Binary data 4485.prm...
Debian: Security Advisory (DSA-1070-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
