FreeBSD : typo3 -- XSS and information disclosure (cc47fafe-f823-11dd-94d9-0030843d3802)

Secunia reports : Some vulnerabilities have been reported in Typo3, which can be exploited by malicious people to conduct cross-site scripting attacks and disclose sensitive information. Input passed via unspecified fields to the backend user interface is not properly sanitised before being...

Sun OpenSSO / Java System Access Manager Login Module User Account Enumeration Weakness

The remote host is running Sun OpenSSO, or Sun Java System Access Manager as it was previously known, an enterprise-class product that provides web access management, federation, and web services security. The version of the Login module included with Sun OpenSSO / Sun Java System Access Manager ...

Secunia Research: Free Download Manager Remote Control Server Buffer Overflow

====================================================================== Secunia Research 02/02/2009 - Free Download Manager Remote Control Server Buffer Overflow - ====================================================================== Table of Contents Affected...

FreeBSD : moinmoin -- multiple XSS vulnerabilities (6a523dba-eeab-11dd-ab4f-0030843d3802)

Secunia reports : Input passed to multiple parameters in action/AttachFile.py is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in the context of an affected site. Certain input passed to...

Secunia Research: AXIS Camera Control "image_pan_tilt" Property Buffer Overflow

====================================================================== Secunia Research 23/01/2009 - AXIS Camera Control "imagepantilt" Property Buffer Overflow - ====================================================================== Table of Contents Affected...

tor -- unspecified memory corruption vulnerability

Secunia reports: A vulnerability with an unknown impact has been reported in Tor. The vulnerability is caused due to an unspecified error and can be exploited to trigger a heap corruption. No further information is currently available...

gstreamer-plugins-good -- multiple memory overflows

Secunia reports: Tobias Klein has reported some vulnerabilities in GStreamer Good Plug-ins, which can potentially be exploited by malicious people to compromise a vulnerable system. A boundary error occurs within the "qtdemuxparsesamples" function in gst/gtdemux/qtdemux.c when performing QuickTim...

moinmoin -- multiple cross site scripting vulnerabilities

Secunia reports: Some vulnerabilities have been reported in MoinMoin, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed to multiple parameters in action/AttachFile.py is not properly sanitised before being returned to the user. This can be exploited ...

[Full-disclosure] Secunia Research: OpenSG Radiance RGBE Buffer Overflow Vulnerability

====================================================================== Secunia Research 20/01/2009 - OpenSG Radiance RGBE Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

[Full-disclosure] Secunia Research: Trend Micro Network Security Component Vulnerabilities

====================================================================== Secunia Research 20/01/2009 - Trend Micro Network Security Component Vulnerabilities - ====================================================================== Table of Contents Affected...

[Full-disclosure] Secunia Research: Trend Micro NSC Firewall Configuration Vulnerability

====================================================================== Secunia Research 20/01/2009 - Trend Micro Network Security Component - - Firewall Configuration Vulnerability - ====================================================================== Table of Contents Affected...

FreeBSD : optipng -- arbitrary code execution via crafted BMP image (2bc960c4-e665-11dd-afcd-00e0815b8da8)

Secunia reports : A vulnerability has been reported in OptiPNG, which potentially can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error in the BMP reader and can be exploited to cause a buffer overflow by tricking a user into...

[Full-disclosure] Secunia Research: EasyHDR Pro Radiance RGBE Buffer Overflow

====================================================================== Secunia Research 20/01/2009 - EasyHDR Pro Radiance RGBE Buffer Overflow - ====================================================================== Table of Contents Affected...

FreeBSD Ports: nagios

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD : cgiwrap -- XSS Vulnerability (bc6a7e79-e111-11dd-afcd-00e0815b8da8)

Secunia reports : A vulnerability has been reported in CGIWrap, which can be exploited by malicious people to conduct cross-site scripting attacks. The vulnerability is caused due to the application generating error messages without specifying a charset. This can be exploited to execute arbitrary...

Opera file URI buffer overflow

Added: 01/13/2009 CVE: CVE-2008-5178 BID: 32323 OSVDB: 49882 Background Opera is a web browser which is available for multiple platforms. Problem A buffer overflow vulnerability allows command execution when a user opens a long, specially crafted file:// URI. Resolution Upgrade to Opera 9.63 or...

FreeBSD Ports: pdfjam

The remote host is missing an update to the system as announced in the referenced advisory. VID a02c9595-e018-11dd-a765-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID a02c9595-e018-11dd-a765-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Secunia Research: DevIL "iGetHdrHeader()" Buffer Overflow Vulnerabilities

====================================================================== Secunia Research 13/01/2009 DevIL "iGetHdrHeader" Buffer Overflow Vulnerabilities ====================================================================== Table of Contents Affected...

Opera file URI buffer overflow

Added: 01/13/2009 CVE: CVE-2008-5178 BID: 32323 OSVDB: 49882 Background Opera is a web browser which is available for multiple platforms. Problem A buffer overflow vulnerability allows command execution when a user opens a long, specially crafted file:// URI. Resolution Upgrade to Opera 9.63 or...

amarok -- multiple vulnerabilities

Secunia reports: Tobias Klein has reported some vulnerabilities in Amarok, which potentially can be exploited by malicious people to compromise a user's system. Two integer overflow errors exist within the "Audible::Tag::readTag" function in src/metadata/audible/audibletag.cpp. These can be...