GE Proficy Cimplicity WebView substitute.bcl Directory Traversal

This module abuses a directory traversal in GE Proficy Cimplicity, specifically on the gefebt.exe component used by the WebView, in order to retrieve arbitrary files with SYSTEM privileges. This module has been tested successfully on GE Proficy Cimplicity 7.5. This module requires Metasploit:...

CVE-2013-0653

CVE-2013-0653 is a directory traversal vulnerability in GE Intelligent Platforms Proficy CIMPLICITY’s WebView CimWeb substitute.bcl component (versions 4.01–8.0; also affects Proficy Process Systems with CIMPLICITY). The flaw allows remote attackers to read arbitrary files by sending a crafted pa...

Microsoft SharePoint Calendar Cross-Site Scripting (MS11-074; CVE-2011-0653)

A reflected cross-site scripting vulnerability has been reported in SharePoint 2010...

CVE-2011-0653

CVE-2011-0653 is an XSS vulnerability in Microsoft Office SharePoint Server 2010 (Gold and SP1) and SharePoint Foundation 2010. The root cause is insufficient validation of input in the shared calendar object, allowing a remote attacker to entice a user to a crafted page and inject arbitrary web ...

Fedora Update for xmms FEDORA-2011-9413

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 15 : xmms-1.2.11-15.20071117cvs.fc15 (2011-9413)

fix CVE-2007-0653 better late than never, huh? fix alsa output plugin loop fix desktop file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 14 : xmms-1.2.11-15.20071117cvs.fc14 (2011-9421)

fix CVE-2007-0653 better late than never, huh? fix alsa output plugin loop fix desktop file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

openSUSE Security Update : opera (openSUSE-SU-2010:0368-1)

Opera was upgraded to the 10.60 release. It brings lots of new features, bugfixes and security fixes. Security fixes include: CVE-2010-0653: Opera permits cross-origin loading of CSS style sheets even when the style sheet download has an incorrect MIME type and the style sheet document is...

openSUSE Security Update : opera (openSUSE-SU-2010:0368-1)

Opera was upgraded to the 10.60 release. It brings lots of new features, bugfixes and security fixes. Security fixes include: CVE-2010-0653: Opera permits cross-origin loading of CSS style sheets even when the style sheet download has an incorrect MIME type and the style sheet document is...

openSUSE Security Update : opera (openSUSE-SU-2010:0368-1)

Opera was upgraded to the 10.60 release. It brings lots of new features, bugfixes and security fixes. Security fixes include: CVE-2010-0653: Opera permits cross-origin loading of CSS style sheets even when the style sheet download has an incorrect MIME type and the style sheet document is...

CVE-2010-0653

Opera before 10.10 permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document...

SLES9: Security update for XMMS

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: xmms xmms-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015928 within...

CVE-2009-0653

OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970...

CVE-2009-0653

OpenSSL CA Basic Constraints Validation Vulnerability (CVE-2009-0653). What is affected: OpenSSL, probably the 0.9.6 series. The issue concerns failure to verify the Basic Constraints for an intermediate CA‑signed certificate. Root cause: Basic constraints are not validated for some CA certificat...

Fedora Core 10 FEDORA-2009-0653 (drupal)

The remote host is missing an update to drupal announced via advisory FEDORA-2009-0653. OpenVAS Vulnerability Test $Id: fcore20090653.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0653 drupal Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 10 FEDORA-2009-0653 (drupal)

The remote host is missing an update to drupal announced via advisory FEDORA-2009-0653. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

FreeBSD Ports: phpmyadmin, phpMyAdmin

The remote host is missing an update to the system as announced in the referenced advisory. VID 6192ae3d-9595-11d9-a9e0-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-0653

CVE-2008-0653 targets the Joomla! Ynews component (com_ynews) version 1.0.0. The vulnerability is a SQL injection in index.php’s showYNews action, where the id parameter can be manipulated to execute arbitrary SQL commands. This affects the server-side handling of the id value and can lead to dat...

SuSE 10 Security Update : XMMS (ZYPP Patch Number 3075)

Two integer overflows when processing BMP skin images potentially allows attackers to execute arbitrary code via specially crafted files. CVE-2007-0653 / CVE-2007-0654 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Ubuntu 5.10 / 6.06 LTS / 6.10 : xmms vulnerabilities (USN-445-1)

Sven Krewitt of Secunia Research discovered that XMMS did not correctly handle BMP images when loading GUI skins. If a user were tricked into loading a specially crafted skin, a remote attacker could execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the...