Fedora 12 : moin-1.8.7-1.fc12 (2010-1712)

Fixed major security issues in miscellaneous parts of moin - http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES - http://secunia.com/advisories/38444/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

HP OpenView Network Node Manager snmpviewer.exe CGI Stack Buffer Overflow

Added: 07/01/2010 CVE: CVE-2010-1552 BID: 40068 OSVDB: 64975 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A stack buffer overflow vulnerability in HP Openview NNM allows remote attackers to execute arbitrary commands by sending...

Fedora 11 : dokuwiki-0-0.4.20091225.c.fc11 (2010-0770)

Fix CSRF bug Secunia advisory SA38205, dokuwiki bug 1853 http://secunia.com/advisories/38205/3/ - Fix Security ACL bypass bug Secunia advisory SA38183, dokuwiki bug 1847 http://secunia.com/advisories/38183/3/ - Upgrade to the latest upstream - Fix bugzilla bug 556494 Note that Tenable Network...

Fedora 11 : moin-1.8.7-1.fc11 (2010-1743)

Fixed major security issues in miscellaneous parts of moin - http://hg.moinmo.in/moin/1.8/raw-file/1.8.7/docs/CHANGES - http://secunia.com/advisories/38444/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Secunia Research: TaskFreak "tznMessage" Cross-Site Scripting Vulnerability

====================================================================== Secunia Research 29/06/2010 - TaskFreak "tznMessage" Cross-Site Scripting Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: TaskFreak "password" SQL Injection Vulnerability

====================================================================== Secunia Research 29/06/2010 - TaskFreak "password" SQL Injection Vulnerability - ====================================================================== Table of Contents Affected...

Wireshark ASN.1 BER Dissector Buffer Overflow Vulnerability - Windows

Wireshark is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...

Symantec AppStream / Workspace Streaming Remote Code Execution (SYM10-008)

The version of Symantec AppStream or Symantec Workspace Streaming running on the remote host has a remote code execution vulnerability. The client does not properly authenticate to the server before downloading available files. A remote attacker could exploit this by setting up a rogue Workspace...

Adobe Reader authplay.dll newfunction Memory Corruption

Added: 06/17/2010 CVE: CVE-2010-1297 BID: 40586 OSVDB: 65141 Background Adobe Reader is free software for viewing PDF documents. Problem A memory corruption vulnerability in authplay.dll provided with Adobe Reader 9.3.2 and earlier 9.x versions allows command execution when a user opens a special...

Adobe Reader authplay.dll newfunction Memory Corruption

Added: 06/17/2010 CVE: CVE-2010-1297 BID: 40586 OSVDB: 65141 Background Adobe Reader is free software for viewing PDF documents. Problem A memory corruption vulnerability in authplay.dll provided with Adobe Reader 9.3.2 and earlier 9.x versions allows command execution when a user opens a special...

SQL Injection Vulnerability in TomatoCMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in TomatoCMS which could be exploited to execute arbitrary SQL commands in applications database. 1 SQL injection vulnerability in TomatoCMS An input validation error exists in the "q" parameter in /news/search. A remote...

WMSCMS Cross Site Scripting / SQL Injection

Title: XSS, SQL injection vulnerability in WmsCMS EDB-ID: CVE: OSVDB-ID: Author: Ariko-Security Published: 2010-06-05 ============ Ariko-Security - Advisory 1/6/2010 ============= XSS, SQL injection vulnerability in WMSCMS 2007 Secunia Advisory SA25583 only XSS 3 params Vendor's Description of...

FileCopa FTP Server Directory Traversal Vulnerability

This host is running FileCopa FTP Server and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbfilecopadirectorytraversalvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ FileCopa FTP Server Directory Traversal Vulnerability Authors: Veerendra GG Copyright: Copyright c...

Orbit Downloader metalink 'name' Directory Traversal Vulnerability

Orbit Downloader is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

horde-base -- XSS and CSRF vulnerabilities

The Horde team reports: Thanks to Naumann IT Security Consulting for reporting the XSS vulnerability. Thanks to Secunia for releasing an advisory for the new CSRF protection in the preference interface The major changes compared to Horde version 3.3.8 are: Fixed XSS vulnerability in...

Mathematica Arbitrary File Overwriting Vulnerability - Linux

Mathematica is prone to arbitrary file overwriting vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TomatoCMS Script Insertion Vulnerabilities

1 Affected Software TomatoCMS version 2.0.4. NOTE: Other versions may also be affected. ====================================================================== 2 Severity Rating: Less critical Impact: Cross Site Scripting Where: From remote...

Secunia Research: Ziproxy Two Integer Overflow Vulnerabilities

====================================================================== Secunia Research 24/05/2010 - Ziproxy Two Integer Overflow Vulnerabilities - ====================================================================== Table of Contents Affected...

SyncBack Profile File Remote Buffer Overflow

The remote Windows host contains a version of SyncBack that is earlier than 3.2.21. Such versions are prone to a remote buffer overflow attack. An attacker may exploit this issue to execute arbitrary code in the context of the vulnerable application by tricking the user into importing a malicious...

openMairie openPresse 'dsn[phptype]' Local File Inclusion Vulnerability

This host is running openMairie openPresse and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbopenmairieopenpresselfivuln.nasl 5323 2017-02-17 08:49:23Z teissa $ openMairie openPresse 'dsnphptype' Local File Inclusion Vulnerability Authors: Madhuri D Copyright:...