1885 matches found
Debian DSA-1640-1 : python-django - several vulnerabilities
Simon Willison discovered that in Django, a Python web framework, the feature to retain HTTP POST data during user reauthentication allowed a remote attacker to perform unauthorized modification of data through cross site request forgery. This is possible regardless of the Django plugin to preven...
Trend Micro OfficeScan 'cgiRecvFile.exe' Buffer Overflow
Binary data 4684.prm...
MyBB < 1.4.1 Multiple Vulnerabilities
Binary data 4655.prm...
Kayako SupportSuite < 3.30.01 Multiple Vulnerabilities
Binary data 4637.prm...
PHP Live! Helper < 2.1.0 Multiple Vulnerabilities
Binary data 4627.prm...
PHP 4.x < 4.4.9 Multiple Vulnerabilities
Binary data 4620.prm...
FreeBSD : drupal -- multiple vulnerabilities (ecedde1c-5128-11dd-a4e1-0030843d3802)
The Drupal Project reports : Free tagging taxonomy terms can be used to insert arbitrary script and HTML code cross site scripting or XSS on node preview pages. A successful exploit requires that the victim selects a term containing script code and chooses to preview the node. This issue affects...
FreeBSD : png -- unknown chunk processing uninitialized memory access (57c705d6-12ae-11dd-bab7-0016179b2dd5)
Secunia reports : Tavis Ormandy has reported a vulnerability in libpng, which can be exploited by malicious people to cause a Denial of Service, disclose potentially sensitive information, or potentially compromise an application using the library. The vulnerability is caused due to the improper...
GLSA-200804-25 : VLC: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200804-25 VLC: User-assisted execution of arbitrary code Multiple vulnerabilities were found in VLC: Luigi Auriemma discovered that the stack-based buffer overflow when reading subtitles, which has been reported as CVE-2007-6681 i...
Opera < 9.27 Multiple Vulnerabilities
Binary data 4457.prm...
Apache < 2.0.63 Multiple XSS Vulnerabilities
According to its banner, the version of Apache 2.0.x running on the remote host is prior to 2.0.63. It is, therefore, affected by multiple cross-site scripting vulnerabilities : - A cross-site scripting issue involving modimap. CVE-2007-5000 - A cross-site scripting issue involving 413 error page...
GLSA-200803-08 : Win32 binary codecs: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200803-08 Win32 binary codecs: Multiple vulnerabilities Multiple buffer overflow, heap overflow, and integer overflow vulnerabilities were discovered in the Quicktime plugin when processing MOV, FLC, SGI, H.264 and FPX files. Impa...
Debian DSA-1496-1 : mplayer - buffer overflows
Several buffer overflows have been discovered in the MPlayer movie player, which might lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0485 Felipe Manzano and Anibal Sacco discovered a buffer overflow in the...
SQLiteManager confirm.php spaw_root Parameter Remote File Inclusion
The remote host is running SQLiteManager, a web-based application for managing SQLite databases. The version of SQLiteManager installed on the remote host fails to sanitize user-supplied input to the 'spawroot' parameter of the 'spaw/dialogs/confirm.php' script before using it to include PHP code...
Debian Security Advisory DSA 778-1 (mantis)
The remote host is missing an update to mantis announced via advisory DSA 778-1. Two security related problems have been discovered in Mantis, a web-based bug tracking system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-2556 A remote attacker could...
Debian DSA-1451-1 : mysql-dfsg-5.0 - several vulnerabilities
Several local/remote vulnerabilities have been discovered in the MySQL database server. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3781 It was discovered that the privilege validation for the source table of CREATE TABLE LIKE statements was...
Debian DSA-1447-1 : tomcat5.5 - several vulnerabilities
Several remote vulnerabilities have been discovered in the Tomcat servlet and JSP engine. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3382 It was discovered that single quotes ' in cookies were treated as a delimiter, which could lead to an...
Site@School slideshow_full.php album_name Parameter SQL Injection
The remote host is running Site@School, an open source, PHP-based, content management system intended for primary schools. The version of this software installed on the remote host fails to sanitize user-supplied input to the 'albumname' parameter of the 'starnet/addons/slideshowfull.php' script...
Ubuntu 6.10 / 7.04 / 7.10 : firefox regression (USN-546-2)
USN-546-1 fixed vulnerabilities in Firefox. The upstream update included a faulty patch which caused the drawImage method of the canvas element to fail. This update fixes the problem. We apologize for the inconvenience. It was discovered that Firefox incorrectly associated redirected sites as the...