QNAP Qcenter Virtual Appliance 1.6.x Information Disclosure / Command Injection

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ QNAP Qcenter Virtual Appliance Multiple Vulnerabilities 1. Advisory Information Title: QNAP Qcenter Virtual Appliance Multiple Vulnerabilities Advisory ID: CORE-2018-0006 Advisory URL:...

QNAP Q'center Virtual Appliance Multiple Vulnerabilities

Advisory ID Internal CORE-2018-0006 1. Advisory Information Title: QNAP Q'center Virtual Appliance Multiple Vulnerabilities Advisory ID: CORE-2018-0006 Advisory URL:https://www.coresecurity.com/core-labs/advisories/qnap-qcenter-virtual-appliance-multiple-vulnerabilities Date published: 2018-07-11...

CVE-2017-0707

CVE-2017-0707 is reflected in connected documents as an Elevation of Privilege in the HTC LED driver within the Android kernel. Documents identify the affected component as the LED driver (HTC) and classify the issue as EoP (Moderate) with local impact; no detailed root-cause, exploit specifics, ...

CVE-2016-0707

Apache Ambari CVE-2016-0707 affects the Ambari agent prior to 2.1.2. The vulnerability arises from weak permissions on the /var/lib/ambari-agent/data and /var/lib/ambari-agent/keys directories, allowing local users to read files and obtain sensitive information. The issue is documented with a fix...

Oracle: Security Advisory (ELSA-2011-0307)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0707

Cisco FireSIGHT System Software versions 5.3.1.1 and 6.0.0 in FireSIGHT Management Center are affected by a cross-site scripting (XSS) vulnerability. The issue allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter (Bug ID CSCus85425). Impact is web ...

Cisco Wireless LAN Controller远程拒绝服务漏洞(CVE-2014-0707)

BUGTRAQ ID: 65986 CVECAN ID: CVE-2014-0707 Cisco WLC 负责全系统的无线LAN功能，例如安全策略、入侵保护、RF管理，服务质量和移动性。 Cisco Wireless LAN Controller没有正确处理 Ethernet 802.11 帧，未经身份验证的远程攻击者可触发关键错误，造成拒绝服务。 0 Cisco Wireless LAN Controller 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（cisco-sa-20140305-wlc）以及相应补丁:...

CVE-2014-0707

CVE-2014-0707 affects Cisco Wireless LAN Controller (WLC) devices in versions 7.2, 7.3, and 7.4 prior to 7.4.110.0. The vulnerability allows remote attackers to cause a denial of service (device restart) by sending a crafted 802.11 Ethernet frame. Root cause is related to how WLC handles these fr...

Oracle Linux 6 : mailman (ELSA-2011-0308)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2011-0308 advisory. 3:2.1.12-14.2 - fix 677848 - fixed build problem without brew 3:2.1.12-14.1 - fix 677848 - fixed CVE-2010-3089 and CVE-2011-0707 Tenable has extracted...

Oracle Linux 5 : mailman (ELSA-2011-0307)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2011-0307 advisory. 3:2.1.9-6.1 - fix 677845 - fixed CVE-2008-0564, CVE-2010-3089 and CVE-2011-0707 Tenable has extracted the preceding description block directly from the...

CVE-2013-0707

The CVE-2013-0707 issue affects JustSystems products (Ichitaro 2006/2007, Ichitaro Government, Ichitaro Portable with oreplug, Hanako 2006–2013, Hanako Police variants) and is described as an arbitrary-code execution vulnerability triggered by processing a crafted file. The connected sources (JVN...

Security fix for the ALT Linux 9 package mailman version 5:2.1.15-alt0.2

Oct. 17, 2012 Konstantin Lepikhov 5:2.1.15-alt0.2 - New upstream release 2.1.15. - Security fixes: + CVE-2011-0707, + many fixes in web interface against XSS attacks, + web admin interface has been hardened against CSRF attacks. - Re-merge debian patches...

Stack overflow

Stack-based buffer overflow in GOM Player 2.1.33.5071 allows user-assisted remote attackers to execute arbitrary code via a .ASX file with a long URI in the "ref href" tag. NOTE: this issue exists because of a CVE-2007-0707 regression...

CVE-2011-5162

GOM Player 2.1.33.5071 is affected by a stack-based buffer overflow in the ASX ref href handling, allowing user‑assisted remote code execution via a crafted ASX file with a long URI. The issue is described as a regression from CVE-2007-0707. Affected component: parsing of the ASX file’s ref href ...

Scientific Linux Security Update : mailman on SL6.x i386/x86_64

Multiple input sanitization flaws were found in the way Mailman displayed usernames of subscribed users on certain pages. If a user who is subscribed to a mailing list were able to trick a victim into visiting one of those pages, they could perform a cross-site scripting XSS attack against the...

Scientific Linux Security Update : mailman on SL4.x, SL5.x i386/x86_64

Multiple input sanitization flaws were found in the way Mailman displayed usernames of subscribed users on certain pages. If a user who is subscribed to a mailing list were able to trick a victim into visiting one of those pages, they could perform a cross-site scripting XSS attack against the...

CentOS Update for mailman CESA-2011:0307 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for mailman RHSA-2011:0308-01

Check for the Version of mailman OpenVAS Vulnerability Test RedHat Update for mailman RHSA-2011:0308-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2012-0707

CVE-2012-0707 is an XSS vulnerability in IBM WebSphere Lombardi Edition 7.2. A remote attacker can inject arbitrary script/HTML via crafted text input to a coach configured with a document attachment control, enabling potential user-facing script execution. The NVD entry provides the affected pro...

SuSE 10 Security Update : mailman (ZYPP Patch Number 7484)

This mailman update fixes several cross-site scripting XSS vulnerabilities. CVE-2011-0707 / CVE-2010-3089 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid57225;...