Fedora Update for libyaml FEDORA-2014-4438

Check for the Version of libyaml OpenVAS Vulnerability Test Fedora Update for libyaml FEDORA-2014-4438 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for libyaml FEDORA-2014-4440

Check for the Version of libyaml OpenVAS Vulnerability Test Fedora Update for libyaml FEDORA-2014-4440 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 20 Update: libyaml-0.1.6-1.fc20

YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C...

Important: Red Hat Security Advisory: ruby193-libyaml security update

Updated ruby193-libyaml packages that fix two security issues are now available for Red Hat Enterprise Linux OpenStack Platform 3.0. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give...

PlRPC: Arbitrary code execution

Background The Perl RPC Module is a Perl module that implements IDL-free RPCs. Description PlRPC uses Storable module for serialization and deserialization of untrusted data. Deserialized data can contain objects which can lead to loading of foreign modules, and possible execution of arbitrary...

Fedora Update for xstream FEDORA-2014-2340

Check for the Version of xstream OpenVAS Vulnerability Test Fedora Update for xstream FEDORA-2014-2340 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 19 Update: xstream-1.3.1-5.1.fc19

XStream is a simple library to serialize objects to XML and back again. A high level facade is supplied that simplifies common use cases. Custom objects can be serialized without need for specifying mappings. Speed and low memory footprint are a crucial part of the design, making it suitable for...

[SECURITY] Fedora 20 Update: xstream-1.3.1-9.fc20

XStream is a simple library to serialize objects to XML and back again. A high level facade is supplied that simplifies common use cases. Custom objects can be serialized without need for specifying mappings. Speed and low memory footprint are a crucial part of the design, making it suitable for...

[SECURITY] Fedora 19 Update: libyaml-0.1.4-6.fc19

YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C...

[SECURITY] Fedora 20 Update: libyaml-0.1.4-6.fc20

YAML is a data serialization format designed for human readability and interaction with scripting languages. LibYAML is a YAML parser and emitter written in C...

OpenPNE 'opSecurityUser::getRememberLoginCookie()' PHP代码注入漏洞

BUGTRAQ ID: 65031 CVECAN ID: CVE-2013-5350 OpenPNE是用PHP编写的社交网络服务引擎。 OpenPNE 3.6.13、3.8.9及之前版本/lib/user/opSecurityUser.class.php脚本内定义的 "opSecurityUser::getRememberLoginCookie"方法中，函数 "unserialize" 存在没有正确过滤的用户输入，这可使远程攻击者通过Cookie报文头内的特制序列化对象，利用此漏洞删除任意文件或执行任意PHP代码。 0 openpne openpne 3.8.9 openpne...

CVE-2013-7249

Fat Free CRM before 0.12.1 does not restrict XML serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.xml, a different vulnerability than CVE-2013-7224...

CVE-2013-7224

Fat Free CRM before 0.12.1 does not restrict JSON serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.json...

Cross site request forgery (csrf)

Fat Free CRM before 0.12.1 does not restrict JSON serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.json...

CVE-2013-7224

Fat Free CRM before 0.12.1 is vulnerable due to unrestricted JSON serialization, allowing remote attackers to obtain sensitive information via a direct request (e.g., /users/1.json). This is supported by multiple sources in connected documents. The issue has a confirmed fix; upgrading to 0.12.1 (...

CVE-2013-7249

CVE-2013-7249 affects Fat Free CRM prior to 0.12.1. The issue is an XML serialization restriction flaw that allows remote attackers to obtain sensitive information via a direct request (e.g., /users/1.xml). This is explicitly described as a separate vulnerability from CVE-2013-7224. The available...

CVE-2013-7224

Fat Free CRM before 0.12.1 does not restrict JSON serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.json...

CVE-2013-7249

Fat Free CRM before 0.12.1 does not restrict XML serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.xml, a different vulnerability than CVE-2013-7224...

CVE-2013-7249: Exposure of Sensitive Information to an Unauthorized Actor

Fat Free CRM before 0.12.1 does not restrict XML serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.xml, a different vulnerability than CVE-2013-7224...

CVE-2013-7224: Exposure of Sensitive Information to an Unauthorized Actor

Fat Free CRM before 0.12.1 does not restrict JSON serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.json...