1299 matches found
Debian: Security Advisory (DLA-2579-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2579-1 : spip security update
It was discovered that SPIP, a website engine for publishing, would allow a malicious user to perform cross-site scripting attacks, access sensitive information, or execute arbitrary code. For Debian 9 stretch, this problem has been fixed in version 3.1.4-4deb9u4+deb9u1. We recommend that you...
[SECURITY] [DLA 2579-1] spip security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2579-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 02, 2021 https://wiki.debian.org/LTS -...
DLA-2579-1 spip - security update
Bulletin has no description...
Debian DSA-4853-1 : spip - security update
It was discovered that SPIP, a website engine for publishing, would allow a malicious user to perform cross-site scripting attacks, access sensitive information, or execute arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
Debian: Security Advisory (DSA-4853-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 4853-1] spip security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4853-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 16, 2021 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4853-1] spip security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4853-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 16, 2021 https://www.debian.org/security/faq -...
DSA-4853-1 spip - security update
Bulletin has no description...
Debian: Security Advisory (DLA-2505-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2505-1 : spip security update
It was found that spip, a website engine for publishing, did not correctly validate its input couleur, display, displaynavigation, displayoutils, imessage, and spipecran allowing authenticated users to execute arbitrary code. For Debian 9 stretch, this problem has been fixed in version...
[SECURITY] [DLA 2505-1] spip security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-2505-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA December 23, 2020 https://wiki.debian.org/LTS -...
DLA-2505-1 spip - security update
Bulletin has no description...
Arbitrary Code Execution
SPIP is vulnerable to arbitrary code execution. Authenticated attacker could execute arbitrary code on the host server due to mishandled varmemotri...
Improper Validation
spip is vulnerable to improper validation error. This would allow an attacker to execute malicious code...
Debian DSA-4798-1 : spip - security update
It was discovered that SPIP, a website engine for publishing, did not correctly validate its input. This would allow authenticated users to execute arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...
Debian: Security Advisory (DSA-4798-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 4798-1] spip security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4798-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 25, 2020 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4798-1] spip security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4798-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 25, 2020 https://www.debian.org/security/faq -...
PT-2022-19327
Name of the Vulnerable Software and Affected Versions Spip versions prior to 3.2.8 Description A PHP injection issue allows attackers to execute arbitrary PHP code via the oups parameter at the "/ecrire" API endpoint. Recommendations For versions prior to 3.2.8, update to version 3.2.8 or later t...