ikiwiki Teximg Plugin TeX Command Arbitrary File Disclosure Vulnerability

ikiwiki is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-1849-1 xml-security-c - signature forgery

Bulletin has no description...

Debian Security Advisory DSA 1829-1 (sork-passwd-h3)

The remote host is missing an update to sork-passwd-h3 announced via advisory DSA 1829-1. OpenVAS Vulnerability Test $Id: deb18291.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1829-1 sork-passwd-h3 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

DSA-1351-1 bochs - buffer overflow

Bulletin has no description...

DSA-1327-1 gsambad - insecure temporary files

Bulletin has no description...

DSA-883-1 thttpd - insecure temporary file

Bulletin has no description...

Debian DSA-683-1 : postgresql - buffer overflows

Several buffer overflows have been discovered in PL/PgSQL as part of the PostgreSQL engine which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Debian DSA-680-1 : htdig - unsanitised input

Michael Krax discovered a cross site scripting vulnerability in ht://dig, a web search system for an intranet or small internet. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-680. The te...

[SECURITY] [DSA 667-1] New PostgreSQL packages fix arbitrary library loading

-------------------------------------------------------------------------- Debian Security Advisory DSA 667-1 [email protected] http://www.debian.org/security/ Martin Schulze February 4th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 661-1] New f2c packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 661-1 [email protected] http://www.debian.org/security/ Martin Schulze January 27th, 2005 http://www.debian.org/security/faq -...

DSA-598-1 yardradius - buffer overflow

Bulletin has no description...

WeOnlyDo! COM Ftp DELUXE ActiveX Control Buffer Overflow Vulnerability

AUTHOR Komrade [email protected] http://unsecure.altervista.org DATE 22/11/2004 PRODUCT WodFtpDLX is an ActiveX component that supports encrypted and non-encrypted FTP access to the servers for transferring files. It can be used in various programs, scripts, web applications to connect to F...

DSA-586-1 ruby - infinite loop

Bulletin has no description...

[SA13040] Caudium HTTP Request Processing Denial of Service

TITLE: Caudium HTTP Request Processing Denial of Service SECUNIA ADVISORY ID: SA13040 VERIFY ADVISORY: http://secunia.com/advisories/13040/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Caudium 1.x http://secunia.com/product/4196/ DESCRIPTION: A vulnerability has been...

DSA-574-1 cabextract - missing directory sanitising

Bulletin has no description...

Debian DSA-191-1 : squirrelmail - XSS

Several cross site scripting vulnerabilities have been found in squirrelmail, a feature-rich webmail package written in PHP4. The Common Vulnerabilities and Exposures CVE project identified the following vulnerabilities : - CAN-2002-1131: User input is not always sanitized so execution of arbitra...

Debian DSA-210-1 : lynx - CRLF injection

lynx a text-only web browser did not properly check for illegal characters in all places, including processing of command line options, which could be used to insert extra HTTP headers in a request. For Debian GNU/Linux 2.2/potato this has been fixed in version 2.8.3-1.1 of the lynx package and...

Debian DSA-154-1 : fam - privilege escalation

A flawwas discovered in FAM's group handling. In the effect users are unable to read FAM directories they have group read and execute permissions on. However, also unprivileged users can potentially learn names of files that only users in root's group should be able to view. This problem been fix...

Debian DSA-541-1 : icecast-server - missing escape

Markus Worle discovered a cross site scripting problem in status-display list.cgi of the icecast internal webserver, an MPEG layer III streaming server. The UserAgent variable is not properly htmlescaped so that an attacker could cause the client to execute arbitrary Java script commands...

Debian DSA-192-1 : html2ps - arbitrary code execution

The SuSE Security Team found a vulnerability in html2ps, an HTML to PostScript converter, that opened files based on unsanitized input insecurely. This problem can be exploited when html2ps is installed as filter within lprng and the attacker has previously gained access to the lp account. These...