Slackware Advisory SSA:2011-122-02 mozilla-thunderbird

The remote host is missing an update as announced via advisory SSA:2011-122-02. OpenVAS Vulnerability Test $Id: esoftslkssa201112202.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2011-122-02 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

RedHat Update for scsi-target-utils RHSA-2011:0332-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian DSA-2408-1 : php5 - several vulnerabilities

Several vulnerabilities have been discovered in PHP, the web scripting language. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2011-1072 It was discovered that insecure handling of temporary files in the PEAR installer could lead to denial of service. -...

Fedora 15 : zabbix-1.8.7-2.fc15 (2011-12485)

move the zabbix user home directory to the common zabbix package - fix https://support.zabbix.com/browse/ZBX-4099 - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream changelog at http://www.zabbix.com/rn1.8.7.php - update to 1.8.7 - upstream...

SuSE 10 Security Update : coreutils (ZYPP Patch Number 7655)

This update of coreutils fixes the following security issue : - 697897: coreutils: when running 'su -c' to execute commands as different user the target user could inject command back into the calling users terminal via the TIOCSTI ioctl. This update also fixes the following non-security issues :...

CentOS 5 : avahi (CESA-2009:0013)

Updated avahi packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for...

RedHat Update for autofs5 RHSA-2007:1177-01

Check for the Version of autofs5 OpenVAS Vulnerability Test RedHat Update for autofs5 RHSA-2007:1177-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for kernel RHSA-2008:0607-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2008:0607-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Unfixed XSS vulnerability at www.elencoforum.com

Security researcher murdercode, has submitted on 12/01/2008 a cross-site-scripting XSS vulnerability affecting www.elencoforum.com, which at the time of submission ranked 1417615 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It is...

Pan .nzb文件解析堆溢出漏洞

BUGTRAQ ID: 29421 CVECAN ID: CVE-2008-2363 Pan是为GNOME设计的Usenet新闻阅读器。 Pan在解析.nzb文件时存在堆溢出漏洞，如果用户受骗读取了恶意的.nzb文件的话，就可以触发这个溢出，但最可能导致的是出现断言错误或分段错误。 Pan Pan 0.132 Pan Pan 0.131 Pan Pan 0.130 Pan Pan 0.129 Pan Pan 0.128 Pan --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Unfixed XSS vulnerability at www.dica33.it

Security researcher LadyViolet, has submitted on 05/11/2008 a cross-site-scripting XSS vulnerability affecting www.dica33.it, which at the time of submission ranked 46006 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is current...

Unfixed XSS vulnerability at www.c00lstuff.com

Security researcher tenest, has submitted on 29/01/2008 a cross-site-scripting XSS vulnerability affecting www.c00lstuff.com, which at the time of submission ranked 41801 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/02/2008. It is current...

Unfixed XSS vulnerability at www.ianrpubs.unl.edu

Security researcher SolarFlare, has submitted on 17/01/2008 a cross-site-scripting XSS vulnerability affecting www.ianrpubs.unl.edu, which at the time of submission ranked 13345 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/01/2008. It is...

Fedora 7 : subversion-1.4.4-1.fc7 (2007-2635)

This update includes the Subversion 1.4.4 release, including a number of bug fixes and a fix for a minor security issue. An issue was discovered in the implementation of access control for revision properties in the path-based authorization code. In a repository using path-based access control, i...

openSUSE 10 Security Update : mailman (mailman-2170)

This update of mailman fixes the following security issues : - A malicious user could visit a specially crafted URI and inject an apparent log message into Mailman's error log which might induce an unsuspecting administrator to visit a phishing site. This has been blocked. Thanks to Moritz Nauman...

Unfixed XSS vulnerability at www.madhalaster.com

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.madhalaster.com, which at the time of submission ranked 2697917 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...

MattWrighttextcounter.pl远程执行命令漏洞

textcounter.pl是一个由Matt Wright编写的基于Web的记数器脚本，使用比较广泛。 某些早期版本的textcounter.pl脚本实现上存在输入验证漏洞，远程攻击者可以利用此漏洞以httpd进程的权限在主机上执行任意系统命令。问题在于程序脚本没有过滤用户输入中包含的一些特殊字符，远程攻击者可以向$DOCUMENTURI环境变量注入指定的值，脚本在处理的时候就会以Web守护程序的权限（root或nobody）在主机上执行攻击者指定的任意命令。 Matt Wright TextCounter1.2...

CentOS 4 : dbus (CESA-2005:102)

Updated dbus packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. D-BUS is a system for sending messages between applications. It is used both for the systemwide message...

Slackware 8.1 / 9.0 / 9.1 / current : PHP local security issue (SSA:2004-154-02)

New PHP packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix a security issue. These fix a problem in previous Slackware php packages where linking PHP against a static library in an insecure path under /tmp could allow a local attacker to place shared libraries at this locatio...

2019-01 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB4480957)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...