Secunia Security Advisory - Qabandi has reported a vulnerability in Pc4 Uploader, which can be exploited by malicious people to conduct SQL injection attacks.
c8429601261ff17b0919342e09bcd2262ba766242c59a3222525273c048c0a27Secunia Security Advisory - A vulnerability has been reported in Creative CMS, which can be exploited by malicious people to conduct SQL injection attacks.
ba809d94055a28b672b122c789b1faf9440140a9fe9e3f50c331660da2db0c21Secunia Security Advisory - A vulnerability has been reported in NSD, which can be exploited by malicious people to cause a DoS (Denial of Service) or to potentially compromise a vulnerable system.
86c1cfcaa92f42d22a3d1ad936513f21d482a083b1192957462d4f0f478acdecSecunia Security Advisory - A vulnerability has been reported in various Ascad Networks products, which can be exploited by malicious people to bypass certain security restrictions.
688495f47ea905c468c5ad8a8f97912e04ee234ad2a7a23dad75ba6551fcf045Secunia Security Advisory - girex has discovered some vulnerabilities in Coppermine Photo Gallery, which can be exploited by malicious people to conduct SQL injection attacks, disclose sensitive information, or potentially compromise a vulnerable system.
7269c461d9af478fd62f6bed734299b6eb7249baf25637ebd82f30559387e6cdSecunia Security Advisory - Nortel has acknowledged some vulnerabilities in Nortel Media Processing Server, which can be exploited by malicious, local users to gain escalated privileges or by malicious people to compromise a user's system.
64bc7cb8e245b24e7462ff9719c1dd168bcaff15a664fef22dba5009a572cbc1Secunia Security Advisory - A vulnerability has been reported in MyPic, which can be exploited by malicious people to disclose certain system information.
14f19267fd8c579fd5aa2bbeaffce54b617351b94035876bfa7efa3de974e331Secunia Security Advisory - Red Hat has issued an update for java-1.5.0-ibm. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, cause a DoS (Denial of Service), or potentially compromise a user's system.
de51eefb77413cb3352d297e7a49764495479e96eb82514ce830e9aa36cb2239Secunia Security Advisory - Fedora has issued an update for ipsec-tools. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service).
a6a93eaed1cdc126b9ead419c87b0c12741ba561a79c10e847bfeeb77a6e5254Secunia Security Advisory - Red Hat has issued an update for ipsec-tools. This fixes a vulnerability, which can be exploited by malicious people to cause a DoS (Denial of Service).
b5512e4d3dc0cd90f9fe3ee973ef4a44b03cec9a6db1f5b08449f768af732409Secunia Security Advisory - TiGeR-Dz has reported a vulnerability in Template Monster Clone, which can be exploited by malicious people to bypass certain security restrictions.
c0e6288c89eafbe3e332766223582be97e1564d7f12921a42814c7c97c6e2877Secunia Security Advisory - A weakness has been reported in OCS Inventory NG, which can be exploited by malicious people to potentially identify valid user accounts.
5cd10b16123d5608fed280e5a16697fd6bf60c9072bb6bd34b4a2a1bb38ba8c2Secunia Security Advisory - r0t has reported a vulnerability and a weakness in activeCollab, which can be exploited by malicious people to disclose sensitive information and conduct cross-site scripting attacks.
af04c081fcd7fece27817dce7a13c0d4dc865d2540882692e68310d625659292Secunia Security Advisory - ahmadbady has discovered some vulnerabilities in Pluck, which can be exploited by malicious people to disclose sensitive information.
cb258d766c95dc18324b4bbc48875d244c332e1b5a9a55e91502419f8d772da8Secunia Security Advisory - Fedora has issued an update for giflib. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially to compromise a user's system.
cd9b952a284ff5505311c1e8a3edb6367dc65e39f34a7664260b0f3a21ed343eSecunia Security Advisory - Red Hat has issued an update for ntp. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.
2887f5e6d8a354a5a80ec443ae287e815d424d32c2e7e08a80371831c5598691Secunia Security Advisory - Red Hat has issued an update for the kernel. This fixes a security issue and a vulnerability, which can be exploited by malicious, local users to bypass certain security restrictions and cause a DoS (Denial of Service).
71ce2490c1c14e9179a5e29eef355ef7ef29a6be2e2c0780872e036f7b102a9aSecunia Security Advisory - Red Hat has issued an update for nfs-utils. This fixes a security issue, which can be exploited by malicious people to potentially bypass certain security restrictions.
3b592b3402867a57067a40b950d2ee7809a4065c50fcbf240fc27e3d379ad544Whitepaper called Dynamic Data Flow Analysis via Virtual Code Integration (aka The SpiderPig case).
6b324a79b6cd6cf0551225d193153bc4bbe889c7a862c5f5da5bfdab9303ed6dAvira Antivir suffers from a generic PDF evasion vulnerability.
c422cef1fb8f5e6a290025368c6ea7a997667b1917a52175b810af05426a9c05Bitdefender suffers from a generic PDF evasion vulnerability.
99a2cdc0ce6ef059b98aa6f4787625025485aefec24e2544574ee5c5cb5faee2The Drupal Content Creation Kit (CCK) suffers from a cross site scripting vulnerability. Version 6.12 with CCK 6.x-2.2 is affected.
a925c69fc2d26c0536bbf067e84b21b62ecb24c0129d0ce0feb5e075aa8b368cMandriva Linux Security Advisory 2009-116 - lib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA signatures, which allows remote attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a malformed DSA key that triggers a (1) free of an uninitialized pointer or (2) double free. lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow remote attackers to spoof signatures on certificates or have unspecified other impact by leveraging an invalid DSA key. gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is (1) not yet valid or (2) no longer valid, related to lack of time checks in the _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls_x509, as used by (a) Exim, (b) OpenLDAP, and (c) libsoup. The updated packages have been patched to prevent this.
a64ef61f4fb19df224802a1d187d356bd10e0a5c63596b3d5f746e6add63132cMandriva Linux Security Advisory 2009-115 - Multiple vulnerabilities has been identified and corrected in phpMyAdmin. Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allow remote attackers to inject arbitrary web script or HTML via the pma_db_filename_template cookie. Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP code into a configuration file via the save action. This update provides phpMyAdmin 2.11.9.5, which is not vulnerable to these issues.
383ea3332cfdcf915bb755a8e06c1b97950e340eb111db9a3e8103ad4cc4a87aMandriva Linux Security Advisory 2009-114 - Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service (memory consumption) via vectors involving (1) signature verification during user authentication with X.509 certificates, related to the eay_check_x509sign function in src/racoon/crypto_openssl.c; and (2) the NAT-Traversal (aka NAT-T) keepalive implementation, related to src/racoon/nattraversal.c. The updated packages have been patched to prevent this.
b06f40b765bf5878211ac80e0c4251bc235d0aaeb3f3c945a399bbc31a08bbb6
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed