12 matches found
Debian: Security Advisory (DSA-1275-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 910-1 (zope2.7)
The remote host is missing an update to zope2.7 announced via advisory DSA 910-1. A vulnerability has been discovered in zope 2.7, as Open Source web application server, that allows remote attackers to insert arbitrary files via include directives in reStructuredText functionality. The old stable...
Debian: Security Advisory (DSA-910-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-1113)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1275-1 (zope2.7)
The remote host is missing an update to zope2.7 announced via advisory DSA 1275-1. A cross-site scripting vulnerability in zope, a web application server, could allow an attacker to inject arbitrary HTML and/or JavaScript into the victim's web browser. This code would run within the security...
Debian Security Advisory DSA 1113-1 (zope2.7)
The remote host is missing an update to zope2.7 announced via advisory DSA 1113-1. It was discovered that the Zope web application server allows read access to arbitrary pages on the server, if a user has the privilege to edit restructured text pages. OpenVAS Vulnerability Test $Id: deb11131.nasl...
Debian DSA-1275-1 : zope2.7 - XSS
A cross-site scripting vulnerability in zope, a web application server, could allow an attacker to inject arbitrary HTML and/or JavaScript into the victim's web browser. This code would run within the security context of the web browser, potentially allowing the attacker to access private data su...
[SECURITY] [DSA 1275-1] New zope2.7 packages fix cross-site scripting flaw
------------------------------------------------------------------------ Debian Security Advisory DSA-1275-1 [email protected] http://www.debian.org/security/ Noah Meyerhans April 02, 2007 - ------------------------------------------------------------------------ Package : zope2.7 Vulnerability...
Debian DSA-1113-1 : zope2.7 - programming error
It was discovered that the Zope web application server allows read access to arbitrary pages on the server, if a user has the privilege to edit 'restructured text' pages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...
Debian DSA-1176-1 : zope2.7 - programming error
It was discovered that the Zope web application server does not disable the csvtable directive in web pages containing ReST markup, allowing the exposure of files readable by the Zope server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...
[SECURITY] [DSA 910-1] New zope2.7 packages fix arbitrary file inclusion
-------------------------------------------------------------------------- Debian Security Advisory DSA 910-1 [email protected] http://www.debian.org/security/ Martin Schulze November 24th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 910-1] New zope2.7 packages fix arbitrary file inclusion
-------------------------------------------------------------------------- Debian Security Advisory DSA 910-1 [email protected] http://www.debian.org/security/ Martin Schulze November 24th, 2005 http://www.debian.org/security/faq -...