5324 matches found
PT-2013-3606
Name of the Vulnerable Software and Affected Versions PHP Radius extension versions prior to 1.2.7 Description The issue is related to a buffer overflow in the radius get vendor attr function, which can be exploited by remote attackers to cause a denial of service crash and potentially execute...
SuSE Update for update openSUSE-SU-2012:1650-1 (update)
Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201216501.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for update openSUSE-SU-2012:1650-1 update Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program i...
RHEL 6 : flash-plugin (RHSA-2013:0254)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2013:0254 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes several...
RedHat Update for nss and nspr RHSA-2013:0214-01
Check for the Version of nss and nspr OpenVAS Vulnerability Test RedHat Update for nss and nspr RHSA-2013:0214-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CRIME vulnerability via the SPDY protocol CVE-2012-4930
The SPDY protocol 3, and earlier, can perform TLS encryption of compressed data without properly obfuscating the length of the unencrypted data. This allows man-in-the-middle attackers to obtain plain text HTTP headers by observing length differences during a series of guesses in which a string i...
java-1.6.0-openjdk security update
1:1.6.0.0-1.50.1.11.5 - Changed permissions of sa-jdi.jar to correct 644 - Resolves: rhbz865045 1:1.6.0.0-1.49.1.11.5 - Updated to IcedTea6 1.11.5 - Resolves rhbzs 856124, 865346, 865348, 865350, 865352, 865354, 865357, 865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514, 86551...
RHEL 5 / 6 : flash-plugin (RHSA-2012:1346)
The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:1346 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes several...
Debian: Security Advisory (DSA-2537-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Vulnerabilities in JW Player Pro
Hello 3APA3A! I want to warn you about security vulnerabilities in JW Player Pro. These are Content Spoofing and Cross-Site Scripting vulnerabilities. In June I've wrote about vulnerabilities in JW Player http://securityvulns.ru/docs28176.html. And these are vulnerabilities in licensed version of...
PT-2012-1339 · Mybb · Mybb
Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.6.1 Description: The issue allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a 1 do search action to "search.php" or 2 do stuff action to "private.php". The vendor disputes this...
Scientific Linux Security Update : pidgin on SL4.x, SL5.x i386/x86_64
A denial-of-service flaw was found in Pidgin's MSN protocol handler. If a remote user was able to send, and the Pidgin user accepted, a carefully-crafted file request, it could result in Pidgin crashing. CVE-2008-2955 A denial-of-service flaw was found in Pidgin's Universal Plug and Play UPnP...
PT-2012-1920 · Moodle · Moodle
Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9.x through 1.9.14 Description: The issue concerns the ip in range function in mnet/lib.php, which incorrectly handles data types. This allows remote attackers to bypass intended IP address restrictions by sending an XMLRPC...
Gentoo Security Advisory GLSA 201203-19 (chromium)
The remote host is missing updates announced in advisory GLSA 201203-19. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the orderedmalloc function in boost/pool/pool.hpp. An attacker can perform memory-related attacks such as buffer overflows via a large memory chunk size value, which causes less memory to be allocated...
PT-2012-2927 · Apache +2 · Apache Http Server +2
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions prior to 2.4.2 Description: The issue is related to insecure handling of the LD LIBRARY PATH environment variable, which allows a local user to potentially gain privileges by executing a Trojan horse DSO in the...
No summary available - BOX (important)
This version upgrade of horde3 to 3.3.13 fixes several issues including a security related flaw, CVE-2012-0909 and adds new features...
Mozilla Products Multiple Vulnerabilities - Dec 11 (MAC OS X)
The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillaprdtsmultvulnmacosxdec11.nasl 7044 2017-09-01 11:50:59Z teissa $ Mozilla Products Multiple Vulnerabilities - Dec 11 MAC OS X Authors: Madhuri D...
Seotoaster SQL injection background login authentication to bypass the defect and repair-vulnerability warning-the black bar safety net
Seotoaster SQL-Injection Admin Login Bypass Author Stefan Schurtz www.badguest.cn [email protected] Affected Software: Successfully tested on Seotoaster v. 1. 9 Developer: http://www.seotoaster.com/ Problem status:repair Defect description ========================== Seotoaster v. 1. 9 containi...
Debian DSA-2350-1 : freetype - missing input sanitising
It was discovered that missing input sanitising in Freetype's processing of CID-keyed fonts could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...