146 matches found
Apple iTunes < 10.2 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is older than 10.2. As such, it is affected by numerous issues in the following components : - ImageIO - libxml - WebKit C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52534; scriptversion"1.21";...
CVE-2010-0122
CVE-2010-0122 affects Employee Timeclock Software 0.99, where input passed to username and password parameters in auth.php and login_action.php is not properly sanitized, allowing remote SQL injection. This leads to arbitrary SQL execution and data manipulation as described in Secunia/NT referenc...
CVE-2010-0122
Multiple SQL injection vulnerabilities in Employee Timeclock Software 0.99 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to a auth.php or b loginaction.php...
Secunia Research: Employee Timeclock Software SQL Injection Vulnerabilities
====================================================================== Secunia Research 10/03/2010 - Employee Timeclock Software SQL Injection Vulnerabilities - ====================================================================== Table of Contents Affected...
CVE-2010-0122
creationtimestamp| type| source ---|---|--- 2010-03-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39427...
Mandriva Update for pidgin MDVSA-2010:001 (pidgin)
Check for the Version of pidgin OpenVAS Vulnerability Test Mandriva Update for pidgin MDVSA-2010:001 pidgin Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Directory traversal
Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. dot dot in an application/x-msnmsgrp2p MSN emoticon aka custom smiley request, a related issue to CVE-2004-0122. NOTE: it cou...
SLES9: Security update for bind
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: bind-utils bind-devel bind For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...
Solaris Update for libsocket 111327-06
Check for the Version of libsocket OpenVAS Vulnerability Test Solaris Update for libsocket 111327-06 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Solaris Update for libsocket 111327-06
Check for the Version of libsocket OpenVAS Vulnerability Test Solaris Update for libsocket 111327-06 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora Update for bind FEDORA-2008-0903
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2009-0122
hplip.postinst in HP Linux Imaging and Printing HPLIP 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership...
CVE-2009-0122
CVE-2009-0122 affects HP Linux Imaging and Printing (HPLIP) 2.7.7 and 2.8.2 on Ubuntu. The vulnerability lies in hplip.postinst, where local users can change the ownership of arbitrary files through manipulations performed before an HPLIP installation or upgrade by an administrator. This is relat...
CVE-2009-0122
hplip.postinst in HP Linux Imaging and Printing HPLIP 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership...
CVE-2009-0122
hplip.postinst in HP Linux Imaging and Printing HPLIP 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership...
FreeBSD Security Advisory (FreeBSD-SA-08:02.libc.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:02.libc.asc ADV FreeBSD-SA-08:02.libc.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...
FreeBSD Security Advisory (FreeBSD-SA-08:02.libc.asc)
The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:02.libc.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Solaris 10 (sparc) : 136892-01
SunOS 5.10: libc.so.1.9 patch. Date this patch was last updated by Sun : Jun/06/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Solaris 8 (sparc) : 111327-06
SunOS 5.8: libsocket patch. Date this patch was last updated by Sun : Jun/06/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Solaris 8 (x86) : 111328-05
SunOS 5.8x86: libsocket patch. Date this patch was last updated by Sun : Jun/06/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...