40 matches found
MGASA-2023-0310 Updated libsndfile packages fix a security vulnerability
Add upstream patch to fix CVE-2022-33065...
CVE-2023-37910 org.xwiki.platform:xwiki-platform-attachment-api vulnerable to Missing Authorization on Attachment Move
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting with the introduction of attachment move support in version 14.0-rc-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, an attacker with edit access on any document can be the use...
CVE-2022-4558 Alinto SOGo Folder/Mail NSString+Utilities.m cross site scripting
A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack...
vautostock.co.uk Cross Site Scripting vulnerability OBB-2741334
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-29189 Buffer for inbound DTLS fragments has no limit
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Prior to version 2.1.4, a buffer that was used for inbound network traffic had no upper limit. Pion DTLS would buffer all network traffic from the remote user until the handshake completes or timed out. An attacker could explo...
Updated xterm packages fix security vulnerability
xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in setsixel in graphicssixel.c via crafted text. CVE-2022-24130...
ironhouse.nonstopfitness.at Cross Site Scripting vulnerability OBB-1293906
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
OPENSUSE-SU-2018:0953-1 Security update for pdns-recursor
This update for pdns-recursor fixes the following issues: - update to 4.1.2 - New Features - 6344: Add FFI version of gettag. - Improvements - 6298, 6303, 6268, 6290: Add the option to set the AXFR timeout for RPZs. - 6172: IXFR: correct behavior of dealing with DNS Name with multiple records and...
healthyconnectionsoh.com XSS vulnerability
Vulnerable URL: http://www.healthyconnectionsoh.com/wp-content/plugins/wp-simpleviewer/svcore/full.html?bg="222222=http://www.healthyconnectionsoh.com/wp-content/plugins/wp-simpleviewer/config.php?galleryid=1=http://www.healthyconnectionsoh.com/=true=true=false=true=true=true=fff=fff=true=-1=Phot...
couponsock.com XSS vulnerability
Vulnerable URL: http://www.couponsock.com/search/?q=OPENBUGBOUNTY"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 41768 VIP website status:| Yes Coordinated Disclosure Timeline...
hs.pleasantvilleschools.com XSS vulnerability
Vulnerable URL: http://hs.pleasantvilleschools.com/apps/pages/index.jsp?udir=Global%20History%20and%20Geography%20review%20Sheets%22--!%3E%3CSvg/Onload=confirm%27OPENBUGBOUNTY%27%3E%22ID==uID=135135ID=93885=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017...
quad-hifi.co.uk XSS vulnerability
Vulnerable URL: http://www.quad-hifi.co.uk/product.php/"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 851414 VIP website status:| No Check quad-hifi.co.uk SSL connection:|...
elliottfh.com XSS vulnerability
Vulnerable URL: http://www.elliottfh.com/runtime.php?NavigatorId=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...
MGASA-2015-0338 Updated lighttpd packages fix CVE-2015-3200 & other bugs
Updated lighttpd packages fix security vulnerability: modauth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a basic HTTP authentication string without a colon character, as demonstrated by a string containing a NULL and new line character CVE-2015-3200. The...
CVE-2015-8147
...
CentOS Update for ruby CESA-2013:0129 centos5
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
HP-UX PHCO_21993 : HPSBUX0011-130 Sec. Vulnerability in auto_parms (rev.2)
s700800 11.00 autoparms/setparms : Security vulnerability in autoparms and setparms. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO21993. The text itself is copyright C Hewlett-Packard Development Company...
Fedora Core 3 : samba-3.0.10-1.fc3 (2004-562)
Fri Dec 17 2004 Jay Fenlason 3.0.10-1.fc3 - New upstream release that closes CVE-2004-1154 bz142544 - Include the -64bit patch from Nalin. This closes bz142873 - Update the -logfiles patch to work with 3.0.10 - Create /var/run/winbindd and make it part of the -common rpm to close bz142242 Note...
[SECURITY] [DSA 151-1] New xinetd packages fix local denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 151-1 [email protected] http://www.debian.org/security/ Martin Schulze August 13th, 2002 - -------------------------------------------------------------------------- Package : xinetd...
(SSRT0738) OpenVMS Security Mandatory Update, OVMSMUP03
NO RESTRICTION FOR DISTRIBUTION PROVIDED THE ADVISORY REMAINS INTACT TITLE: SSRT0738 OpenVMS Security Mandatory Update, OVMSMUP03 SOURCE: Compaq Computer Corporation Software Security Response Team COMPONENT IMPACT: DECwindows Motif Server X-REF: None October 30, 2001 "Compaq is broadly...