PT-2011-4736 · Cover · Cover

Name of the Vulnerable Software and Affected Versions: Cover WP theme versions prior to 1.6.6 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can lead to the execution of malicious code on the client-side...

PT-2012-1105 · Modplug +1 · Libmodplug +1

Name of the Vulnerable Software and Affected Versions: libmodplug versions prior to 0.8.8.4 Description: The issue is related to an off-by-one error in the CSoundFile::ReadAMS function, which can be exploited by remote attackers using a crafted AMS file with a large number of samples. This could...

Mozilla Firefox vulnerable to cross-site scripting

Overview Mozilla Firefox contains a cross-site scripting vulnerability. Mozilla Firefox contains a vulnerability in the rendering of Cascading Style Sheets CSS, which may result in cross-site scripting. Takeshi Terada of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA...

Google Search Appliance vulnerable to cross-site scripting

Overview Google Search Appliance provided by Google contains a cross-site scripting vulnerability. Google Search Appliance from Google is a product that provides searching services for an intranet service or a website. Google Search Appliance contains a cross-site scripting vulnerability. Yosuke...

postfix security update

2:2.6.6-2.1 - fix CVE-2011-0411 682978...

PT-2010-1042 · Linux +1 · Linux-Pam +1

Name of the Vulnerable Software and Affected Versions: Linux-PAM versions prior to 1.1.2 Red Hat Enterprise Linux pam-devel version 1.1.1 Red Hat Enterprise Linux pam-debuginfo version 1.1.1 Red Hat Enterprise Linux pam version 1.1.1 Description: The issue concerns multiple vulnerabilities in the...

freetype security update

2.1.4-18.el3 - Modify freetype-2.1.4-CVE-2010-3054.patch - Resolves: 638139 2.1.4-17.el3 - Add freetype-2.1.4-CVE-2010-2806.patch Protect against negative stringsize. Fix comparison. - Add freetype-2.1.4-CVE-2010-3311.patch Don't seek behind end of stream. - Add freetype-2.1.4-CVE-2010-3054.patch...

Mozilla Firefox Unspecified Vulnerability (Mar 2010) - Linux

mozilla Firefox is prone to an unspecified vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

P forum vulnerable to directory traversal

Overview P forum from Rocomotion contains a directory traversal vulnerability. P forum from Rocomotion is a bulletin board software. P forum contains a directory traversal vulnerability. Shuya Ueki reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

PT-2009-5895 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.31.4 Description: The issue allows local users to cause a denial of service, resulting in a system hang. This occurs when an abstract-namespace AF UNIX listening socket is created, a shutdown operation is...

PT-2009-5283 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo versions prior to 2.0.3 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the items number parameter in the comments.php file. Recommendations: For versions prior to 2.0.3, update to...

Update of jcaptcha

Update version of jcaptcha that we use...

PT-2009-1016 · Xmlsoft +2 · Libxml +3

Name of the Vulnerable Software and Affected Versions: libxml2 versions 2.5.10 through 2.6.32 libxml version 1.8.17 Description: The issue allows context-dependent attackers to cause a denial of service, resulting in an application crash, via crafted Notation or Enumeration attribute types in an...

openSUSE Security Update : gvim (gvim-561)

The VI Improved editor vim was updated to version 7.2.108 to fix various security problems and other bugs. CVE-2008-4677: The netrw plugin sent credentials to all servers. CVE-2009-0316: The python support used a search path including the current directory, allowing code injection when python cod...

Movable Type access restriction bypass vulnerability

Overview Movable Type contains an access restriction bypass vulnerability. Movable Type, a web log system from Six Apart KK, contains a vulnerability that allows a remote attacker to bypass access restrictions. A successful attack requires mt-wizard.cgi not to be deleted after initial setup. For...

HP Systems Insight Manager Unauthorized Access Vulnerability (Linux)

This host is running HP Systems Insight Manager SIM and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbhpsimunauthaccessvulnlin.nasl 4218 2016-10-05 14:20:48Z teissa $ HP Systems Insight Manager Unauthorized Access Vulnerability Linux Authors: Chandan S Copyright:...

php security and bug fix update

4.3.9-3.22.12 - set higher memorylimit in /usr/bin/pear 263501 4.3.9-3.22.11 - update to PEAR 1.4.9, matching RHEL-5 263501 bundle XMLRPC-1.5.0, ConsoleGetopt-1.2, ArchiveTar-1.3.1 fix paths in default pear.conf, installed PEAR registry replace /usr/bin/pear et al with simpler wrapper scripts...

projectpier-xssxsrf.txt

====================================================================== ProjectPier Impact: Cross Site Scripting Cross Site Request Forgery Status: patch available ------------------------------ Affected software description: ------------------------------ Application: ProjectPier Version: = 0.80...

PT-2008-2278

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions prior to 8.1.2 Description The issue concerns multiple unspecified vulnerabilities in Adobe Reader and Acrobat. The impact and attack vectors of these vulnerabilities are unknown. Recommendations For versions...

PT-2006-5462 · Phpopenchat · Phpopenchat

Name of the Vulnerable Software and Affected Versions: phpopenchat versions prior to 3.0.2 Description: The issue allows remote attackers to execute arbitrary PHP code via the sourcedir parameter in the contrib/yabbse/poc.php file. A dispute regarding this issue was raised by a third-party...