fedoraproject fedora 9 vulnerabilities and exploits

(subscribe to this query)

cbrPager prior to 0.9.17 allows user-assisted remote malicious users to execute arbitrary commands via shell metacharacters in a (1) ZIP (aka .cbz) or (2) RAR (aka .cbr) archive filename.

Jcoppens Cbrpager Fedoraproject Fedora 9 Fedoraproject Fedora 8 Fedoraproject Fedora 7

Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x prior to 6.3 allow remote malicious users to inject arbitrary web script or HTML via vectors related to (1) free tagging taxonomy terms, which are not properly handled on node preview pages, and (2) unspecified Ope...

Drupal Drupal Fedoraproject Fedora 8 Fedoraproject Fedora 9

The Drupal filter_xss_admin function in 5.x prior to 5.8 and 6.x prior to 6.3 does not "prevent use of the object HTML tag in administrator input," which has unknown impact and attack vectors, probably related to an insufficient cross-site scripting (XSS) protection mec...

Drupal Drupal Fedoraproject Fedora 8 Fedoraproject Fedora 9

Cross-site request forgery (CSRF) vulnerability in Drupal 6.x prior to 6.3 allows remote malicious users to perform administrative actions via vectors involving deletion of OpenID identities.

Drupal Drupal Fedoraproject Fedora 8 Fedoraproject Fedora 9

Session fixation vulnerability in Drupal 5.x prior to 5.9 and 6.x prior to 6.3, when contributed modules "terminate the current request during a login event," allows remote malicious users to hijack web sessions via unknown vectors.

Drupal Drupal Fedoraproject Fedora 8 Fedoraproject Fedora 9

SQL injection vulnerability in the Schema API in Drupal 6.x prior to 6.3 allows remote malicious users to execute arbitrary SQL commands via vectors related to "an inappropriate placeholder for 'numeric' fields."

Drupal Drupal Fedoraproject Fedora 8 Fedoraproject Fedora 9

The multipart processor in ModSecurity prior to 2.5.9 allows remote malicious users to cause a denial of service (crash) via a multipart form datapost request with a missing part header name, which triggers a NULL pointer dereference.

Trustwave Modsecurity Fedoraproject Fedora 9 Fedoraproject Fedora 10

1 EDB exploit

The PDF XSS protection feature in ModSecurity prior to 2.5.8 allows remote malicious users to cause a denial of service (Apache httpd crash) via a request for a PDF file that does not use the GET method.

Trustwave Modsecurity Fedoraproject Fedora 9 Fedoraproject Fedora 10

Open redirect vulnerability in the search script in Trac prior to 0.10.5 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function.

Edgewall Trac Fedoraproject Fedora 9 Fedoraproject Fedora 8

Cross-site request forgery (CSRF) vulnerability in Drupal 5.x prior to 5.8 and 6.x prior to 6.3 allows remote malicious users to perform administrative actions via vectors involving deletion of "translated strings."

Drupal Drupal Fedoraproject Fedora 8 Fedoraproject Fedora 9

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook