VERITAS NetBackup bpcd daemon command chaining vulnerability

Added: 02/16/2007 CVE: CVE-2006-4902 BID: 21565 OSVDB: 31334 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The NetBackup bpcd daemon fails to properly validate chained commands. A remote attacker could execute arbitrary commands by appending the...

Unfixed XSS vulnerability at www.baykush.com

Security researcher cyber, has submitted on 15/02/2007 a cross-site-scripting XSS vulnerability affecting www.baykush.com, which at the time of submission ranked 156217 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/02/2007. It is currently...

Unfixed XSS vulnerability at www.borsaitaliana.it

Security researcher i-landet, has submitted on 15/02/2007 a cross-site-scripting XSS vulnerability affecting www.borsaitaliana.it, which at the time of submission ranked 35488 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2007. It is...

Unfixed XSS vulnerability at www.polksheriff.org

Security researcher amele2, has submitted on 14/02/2007 a cross-site-scripting XSS vulnerability affecting www.polksheriff.org, which at the time of submission ranked 129339 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/02/2007. It is...

MS07-013: Vulnerability in Microsoft RichEdit Could Allow Remote Code Execution (918118)

The remote host contains a version of Microsoft Windows and/or Microsoft Office that has a vulnerability in the RichEdit component that could be abused by an attacker to execute arbitrary code on the remote host. To exploit this vulnerability, an attacker would need to spend a specially crafted R...

Unfixed XSS vulnerability at www.identifythebest.com

Security researcher www.r3t.n3t.nl, has submitted on 02/12/2007 a cross-site-scripting XSS vulnerability affecting www.identifythebest.com, which at the time of submission ranked 100952 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007...

Unfixed XSS vulnerability at www.lulea.se

Security researcher Uber0n, has submitted on 02/10/2007 a cross-site-scripting XSS vulnerability affecting www.lulea.se, which at the time of submission ranked 395070 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is currently...

Unfixed XSS vulnerability at mk-board.net

Security researcher kusomiso.com, has submitted on 02/10/2007 a cross-site-scripting XSS vulnerability affecting mk-board.net, which at the time of submission ranked 632613 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is...

Unfixed XSS vulnerability at www.samsung-ringtones.com

Security researcher Uber0n, has submitted on 02/10/2007 a cross-site-scripting XSS vulnerability affecting www.samsung-ringtones.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is...

Unfixed XSS vulnerability at www.nextpimp.com

Security researcher Uber0n, has submitted on 02/10/2007 a cross-site-scripting XSS vulnerability affecting www.nextpimp.com, which at the time of submission ranked 32410 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is currentl...

Unfixed XSS vulnerability at www.rp-online.de

Security researcher Duke, has submitted on 02/07/2007 a cross-site-scripting XSS vulnerability affecting www.rp-online.de, which at the time of submission ranked 9707 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/10/2007. It is currently...

Unfixed XSS vulnerability at www.psychology.heacademy.ac.uk

Security researcher CoNqUeRoR, has submitted on 02/07/2007 a cross-site-scripting XSS vulnerability affecting www.psychology.heacademy.ac.uk, which at the time of submission ranked 186094 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at s010.gfsrv.net

Security researcher THE-SH0CK-B0Y, has submitted on 02/07/2007 a cross-site-scripting XSS vulnerability affecting s010.gfsrv.net, which at the time of submission ranked 10101 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2007. It is...

Unfixed XSS vulnerability at www.hostingnova.net

Security researcher St@rExT, has submitted on 02/06/2007 a cross-site-scripting XSS vulnerability affecting www.hostingnova.net, which at the time of submission ranked 2311616 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/06/2007. It is...

Unfixed XSS vulnerability at www.mucit.com

Security researcher FujKeR, has submitted on 02/04/2007 a cross-site-scripting XSS vulnerability affecting www.mucit.com, which at the time of submission ranked 5757515 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/04/2007. It is currently...

Solaris 10 (sparc) : 124622-02

The remote host is missing Sun Security Patch number 124622-02 Patch-ID 124622-02. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on...

Solaris 10 (i386) : 124721-02

The remote host is missing Sun Security Patch number 124721-02 Sun Cluster 3.0/3.1/3.1x86: HA-PostgreSQL patch. Date this patch was last updated by Sun : Tue Jun 26 06:01:23 MDT 2007 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 @DEPRECATED@ This script has...

GLSA-200612-02 : xine-lib: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200612-02 xine-lib: Buffer overflow A possible buffer overflow has been reported in the Real Media input plugin. Impact : An attacker could exploit this vulnerability by enticing a user into loading a specially crafted stream with...

Solaris 8 (x86) : 120672-08

Mozilla 1.7x86 for Solaris 8 and 9. Date this patch was last updated by Sun : Sep/02/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 123256-02

SunOS 5.10: eri patch. Date this patch was last updated by Sun : Nov/08/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit...