71 matches found
Ceragon FibeAir IP-10 7.2.0 Hidden User Backdoor
Credits: Ian Ling + Website: iancaling.com + Source: http://blog.iancaling.com/post/160817658078 Vendor: ================= https://www.ceragon.com Products: ====================== Ceragon FibeAir IP-10 =7.2.0 latest version Vulnerability Types: =================== Hidden User Backdoor...
Adobe Acrobat Multiple Vulnerabilities - 01 (Jan 2016) - Mac OS X
Adobe Acrobat is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat"; ifdescription...
Memory corruption
The AcroForm plugin in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code or cause a denial of service memory corruption...
CVE-2016-0936
Technical details for CVE-2016-0936 are not publicly provided in the supplied connected documents. Monitor for updates; no explicit affected products, versions, or remediation details are present beyond the initial description.
Oracle: Security Advisory (ELSA-2007-0936)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ceragon FibeAir IP-10 SSH Private Key Exposure
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'net/ssh' class Metasploit3 'Ceragon FibeAir IP-10 SSH Private Key Exposure', 'Description' = %q Ceragon ships a public/private key pair on...
CVE-2015-0936
creationtimestamp| type| source ---|---|--- 2015-04-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41679 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/ceragonfibeairknownprivkey.rb 2025-02-06 03:13:42+00:0...
CVE-2014-0936
CVE-2014-0936 affects IBM Security AppScan Source 8.0–9.0. The issue is a misconfigured publish-assessment permission on the configured database server, which allows the transmission of cleartext assessment data and may enable remote attackers to obtain sensitive information by sniffing the netwo...
Oracle Linux 5 : Important: / kernel (ELSA-2007-0936)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0936 advisory. 2.6.18-8.1.14.0.2.el5 - Fix bonding primary=ethX Bert Barbe IT 101532 ORA 5136660 - Add entropy module option to e1000/bnx2 John Sobecki ORA 6045759...
CentOS Update for kernel CESA-2010:0936 centos4 x86_64
Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2010:0936 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CVE-2012-0936
This CVE affects OpenNMS: vulnerable in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1. The flaw is in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java, enabling cross-site scripting via the Username field during login. Root cause: XSS in th...
CVE-2010-0936
Cross-site scripting XSS vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282dlinkA4p820071213 allows remote attackers to inject arbitrary web script or HTML via the nickname parameter...
CVE-2010-0936
CVE-2010-0936 is a cross-site scripting (XSS) vulnerability in the D-LINK DKVM-IP8 (firmware 2282_dlinkA4_p8_20071213) where an attacker can inject arbitrary script via the nickname parameter in auth.asp. Affected component: web authentication page; impact is XSS with none/partial confidentiality...
CVE-2010-0936
creationtimestamp| type| source ---|---|--- 2010-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33471...
CVE-2009-0936
Tor vulnerability CVE-2009-0936 is an unspecified flaw in Tor prior to version 0.2.0.34 that allows a denial of service via a crafted "corrupt votes" condition. Connected sources (Gentoo GLSA 200904-11, Gentoo advisory, OpenVAS listing) confirm the issue affects Tor and describes potential impact...
FreeBSD Ports: tor
The remote host is missing an update to the system as announced in the referenced advisory. VID 78f5606b-f9d1-11dd-b79c-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 78f5606b-f9d1-11dd-b79c-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CVE-2008-0936
CVE-2008-0936 affects the XOOPS Prayer List (prayerlist) 1.04 module: an SQL injection vulnerability in index.php allows an attacker to manipulate the cid parameter in a view action to execute arbitrary SQL. The vulnerability impacts remote confidentiality and integrity (per the reported CVSS 2.0...
CVE-2008-0936
SQL injection vulnerability in index.php in the Prayer List prayerlist 1.04 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view action...
CVE-2007-0936
Visio Document Packaging Vulnerability (CVE-2007-0936) in Microsoft Visio 2002/2003—memory corruption triggered by parsing a packed object in Visio files (.VSD/.VSS/.VST). Allows remote code execution when a crafted Visio file is opened. Affected software includes Visio 2002 (SP2) and Visio 2003 ...
