Low: Red Hat Security Advisory: Red Hat Storage 2.0 security, bug fix, and enhancement update #6

Updated Red Hat Storage 2.0 packages that fix multiple security issues, various bugs, and add one enhancement are now available. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CentOS Update for 389-ds-base CESA-2013:0628 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2013-0209

lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct eval injection and SQL injection attacks via crafted parameters, as demonstrated by an eval injecti...

vBulletin 3.5.2 - Cross-Site Scripting

Title: vBulletin Version 3.5.2 - Introduction XSS scripting Author: Discovered by ROOTEGY Version: vBulletin Version 3.5.2 =============================================== WWW.sec-war.com =============================================== 3.5.2 - Introduction XSS scripting The vulnerability is in the...

Fedora 10 : drupal-6.11-1.fc10 (2009-4175)

6.11, Fix for SA-CORE-2009-005. See http://drupal.org/node/449078 for more information. Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. Note that Tenable Network Securi...

Fedora 10 : drupal-6.7-1.fc10 (2008-11237)

New upstream release with security fixes: SA-2008-073 - http://drupal.org/node/345441 Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. Note that Tenable Network Security...

Fedora 8 : drupal-5.13-1.fc8 (2008-11196)

New upstream release with security fixes: SA-2008-073 - http://drupal.org/node/345441 Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. Note that Tenable Network Security...

Fedora 9 : drupal-6.5-1.fc9 (2008-8852)

Update to 6.5, security fixes: SA-2008-047 http://drupal.org/node/318706 - File upload access bypass unprivileged file attach - Access rules bypass - BlogAPI access bypass Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to...

Fedora 8 : drupal-5.9-1.fc8 (2008-6916)

Update to 5.9, security fixes: SA-2008-046 - http://drupal.org/node/286417 CVE-2008-3222 - session fixation issue, that was first reported to be fixed via SA-2008-044 in drupal 5.8, but the patch for it was not included in the 5.8 tarball. Remember to log in to your site as the admin user before...

Fedora 7 : drupal-5.6-1.fc7 (2008-0469)

Update to 5.6, security fixes : DRUPAL-SA-2008-005 DRUPAL-SA-2008-006 DRUPAL-SA-2008-007 Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. Note that Tenable Network...

X7 Chat 2.0.4 - old_prefix Blind SQL Injection

X7 Chat 2.0.4 - oldprefix Blind SQL Injection !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; i...

ibillpm.pl

The 'ibillpm.pl' CGI is installed. Some versions of this CGI use a weak password management system that can be brute-forced. No flaw was tested. Your script might be a safe version. Solutions : upgrade the script if possible. If not: 1 Move the script elsewhere security through obscurity 2 Reques...

Unintentionally logging credit card transactions

Solar Designer of the Openwall Project reported a security vulnerability in the contributed authorizenet module which is part of the ecommerce package. Credit card information was being stored in a system log file. The system should not be saving this information. Versions affected Please check t...