SuSE 10 Security Update : MySQL (ZYPP Patch Number 5618)

Empty bit-strings in a query could crash the MySQL server. CVE-2008-3963 Due to another flaw users could access tables of other users. CVE-2008-4097 / CVE-2008-4098 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...

CVE-2007-6432

Adobe PageMaker 7.0.1/7.0.2 is affected by a stack-based buffer overflow in AldFs32.dll when parsing PMD files, enabling arbitrary code execution via a crafted PMD file. The issue is described as a remote code execution vulnerability with user-assisted access (the attacker must entice the user to...

apcupsd < 3.8.6 / 3.10.x < 3.10.5 Multiple Vulnerabilities

apcupsd is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2003 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apc:apcupsd"; ifdescription...

WordNet: Execution of arbitrary code

Background WordNet is a large lexical database of English. Description Jukka Ruohonen initially reported a boundary error within the searchwn function in src/wn.c. A thorough investigation by the oCERT team revealed several other vulnerabilities in WordNet: Jukka Ruohonen and Rob Holland oCERT...

Gentoo Security Advisory GLSA 200701-24 (vlc)

The remote host is missing updates announced in advisory GLSA 200701-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200701-18 (xine-ui)

The remote host is missing updates announced in advisory GLSA 200701-18. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200701-24 (vlc)

The remote host is missing updates announced in advisory GLSA 200701-24. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200701-18 (xine-ui)

The remote host is missing updates announced in advisory GLSA 200701-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

[SECURITY] Fedora 8 Update: libHX-1.23-1.fc8

A library for: - rbtree with key-value pair extension - deques double-ended queues Stacks LIFO / Queues FIFOs - platform independent opendir-style directory access - platform independent dlopen-style shared library access - auto-storage strings with direct access - command line option argv parser...

Ubuntu 7.10 / 8.04 LTS : yelp vulnerability (USN-638-1)

Aaron Grattafiori discovered that the Gnome Help Viewer did not handle format strings correctly when displaying certain error messages. If a user were tricked into opening a specially crafted URI, a remote attacker could execute arbitrary code with user privileges. Note that Tenable Network...

USN-638-1: Yelp vulnerability

Aaron Grattafiori discovered that the Gnome Help Viewer did not handle format strings correctly when displaying certain error messages. If a user were tricked into opening a specially crafted URI, a remote attacker could execute arbitrary code with user privileges...

Python <= 2.5.2 Multiple Vulnerabilities - Windows

Python is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python"; ifdescription...

Python < 2.5.2 Multiple Vulnerabilities - Linux

Python is prone to multiple vulnerabilities. This VT has been deprecated and replaced by various Local Security Checks LSC. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Python Multiple Vulnerabilities (Windows)

The host is installed with Python, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodpythonmultvulnwin900105.nasl 7174 2017-09-18 11:48:08Z asteins $ Description: Python Multiple Vulnerabilities Windows Authors: Sharath S Copyright: Copyright C 2008 SecPod,...

Python Multiple Vulnerabilities (Linux)

The host is installed Python, which is prone to multiple vulnerabilities. This NVT has been replaced by NVT gbCESA-20091176pythoncentos5i386.nasl OID:1.3.6.1.4.1.25623.1.0.880881, gbCESA-20091178pythoncentos3i386.nasl OID:1.3.6.1.4.1.25623.1.0.880715. OpenVAS Vulnerability Test $Id:...

FAR-PHP 1.0 - index.php Local File Inclusion

FAR-PHP 1.0 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/30781/info FAR-PHP is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to view...

PHPizabi 0.848b C1 HP3 - &#039;id&#039; Local File Inclusion

source: https://www.securityfocus.com/bid/30707/info PHPizabi is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to view local files within the context of t...

PSF-2008-6 Multiple integer overflows (Apple)

Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service crash or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicoderesize...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Drupal 5.x before 5.8 and 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of "translated strings."...

CVE-2008-3220

Cross-site request forgery CSRF vulnerability in Drupal 5.x before 5.8 and 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of "translated strings."...