9316 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in SpamTitan 5.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 testaddr or 2 testpass parameter to auth-settings.php; 3 hostname, 4 domainname, or 5 mailserver parameter to setup-relay.php; or 6 subnetmask or...
CVE-2011-5150
Multiple cross-site scripting XSS vulnerabilities in SpamTitan 5.07 and possibly earlier allow remote attackers or authenticated users to inject arbitrary web script or HTML via the 1 ipaddress or 2 domain parameter to setup-network.php, different vectors than CVE-2011-5149. NOTE: the provenance ...
CVE-2011-5150
CVE-2011-5150 describes multiple XSS vulnerabilities in SpamTitan 5.07 and possibly earlier. The issue allows remote attackers or authenticated users to inject arbitrary JavaScript/HTML via the (1) ipaddress or (2) domain parameter to setup-network.php, representing a different vector from CVE-20...
CVE-2011-5150: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in SpamTitan 5.07 and possibly earlier allow remote attackers or authenticated users to inject arbitrary web script or HTML via the 1 ipaddress or 2 domain parameter to setup-network.php, different vectors than CVE-2011-5149. NOTE: the provenance ...
CVE-2011-5149: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in SpamTitan 5.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 testaddr or 2 testpass parameter to auth-settings.php; 3 hostname, 4 domainname, or 5 mailserver parameter to setup-relay.php; or 6 subnetmask or...
linux/x86 - /etc/init.d/apparmor teardown - 53 bytes
Name = John Babio Twitter = 3vi1john /etc/init.d/apparmor teardown const char sc = "\x6a\x0b\x58\x31\xd2\x52\x68\x64\x6f\x77\x6e\x68\x74\x65\x61\x72\x89\xe1" "\x52\x68\x72\x6d\x6f\x72\x68\x61\x70\x70\x61\x68\x74\x2e\x64\x2f\x68\x2f\x69\x6e\x69\x68\x2f"...
Scientific Linux Security Update : xen on SL5.x i386/x86_64 (20120307)
The xen packages contain administration tools and the xend service for managing the kernel-xen kernel for virtualization on Scientific Linux. A heap overflow flaw was found in the way QEMU emulated the e1000 network interface card. A privileged guest user in a virtual machine whose network...
Scientific Linux Security Update : gdm on SL5.x i386/x86_64
CVE-2009-2697 gdm not built with tcpwrappers A flaw was found in the way the gdm package was built. The gdm package was missing TCP wrappers support, which could result in an administrator believing they had access restrictions enabled when they did not. CVE-2009-2697 This update also fixes the...
USN-1507-1: Linux kernel vulnerabilities
A flaw was found in the Linux kernel's KVM Kernel Virtual Machine virtual cpu setup. An unprivileged local user could exploit this flaw to crash the system leading to a denial of service. CVE-2012-1601 An error was found in the Linux kernel's IPv6 netfilter when connection tracking is enabled. A...
Ubuntu 8.04 LTS : linux vulnerabilities (USN-1507-1)
A flaw was found in the Linux kernel's KVM Kernel Virtual Machine virtual cpu setup. An unprivileged local user could exploit this flaw to crash the system leading to a denial of service. CVE-2012-1601 An error was found in the Linux kernel's IPv6 netfilter when connection tracking is enabled. A...
Fedora 16 : thunderbird-13.0-1.fc16 / thunderbird-lightning-1.5-2.fc16 (2012-9037)
What is new : - Filelink: Upload your files to an online storage service and send links to your friends, avoiding bounce back due to large attachments. We have partnered with YouSendIt to bring this feature, but additional partners will be added in the near future. - In partnership with Gandi and...
kernel: kvm: buffer overflow in kvm_set_irq()
Buffer overflow in virt/kvm/irqcomm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of service crash and possibly execute arbitrary code via vectors related to Message Signaled Interrupts MSI, irq routing entries, and an incorrect check by the...
Ubuntu Update for linux-lts-backport-oneiric USN-1455-1
Ubuntu Update for Linux kernel vulnerabilities USN-1455-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14551.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-lts-backport-oneiric USN-1455-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...
MDM Mobile Device Settings Setup
Binary data mdminitialize.nbin...
[SECURITY] Fedora 17 Update: android-tools-20120510gitd98c87c-1.fc17
The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...
phpMyAdmin Replication Setup js/replication.js Database Name XSS
According to its self-identified version number, the phpMyAdmin install hosted on the remote web server is affected by a cross-site scripting vulnerability. The vulnerability is in the replication-setup functionality in js/replication.js in phpMyAdmin 3.4.x before 3.4.10.1, which allows...
PHP < 5.3.13, 5.4.x < 5.4.3 Multiple Vulnerabilities - Active Check
PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.103482"...
DEBIAN-CVE-2012-1190
Cross-site scripting XSS vulnerability in the replication-setup functionality in js/replication.js in phpMyAdmin 3.4.x before 3.4.10.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted database name...
CVE-2012-1190
Cross-site scripting XSS vulnerability in the replication-setup functionality in js/replication.js in phpMyAdmin 3.4.x before 3.4.10.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted database name...
CVE-2012-1190
Cross-site scripting XSS vulnerability in the replication-setup functionality in js/replication.js in phpMyAdmin 3.4.x before 3.4.10.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted database name...