1234 matches found
NetVault: SmartDisk 1.2 - 'libnvbasics.dll' Remote Denial of Service
source: https://www.securityfocus.com/bid/48029/info NetVault: SmartDisk is prone to a remote denial-of-service vulnerability. A successful exploit will cause the application to crash, effectively denying service. NOTE: Remote code execution may be possible; however, this has not been confirmed...
NetVault: SmartDisk 1.2 - libnvbasics.dll Remote Denial of Service
NetVault: SmartDisk 1.2 - libnvbasics.dll Remote Denial of Service source: https://www.securityfocus.com/bid/48029/info NetVault: SmartDisk is prone to a remote denial-of-service vulnerability. A successful exploit will cause the application to crash, effectively denying service. NOTE: Remote cod...
[SECURITY] [DSA 2223-1] doctrine security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2223-1 [email protected] http://www.debian.org/security/ Florian Weimer April 20, 2011 http://www.debian.org/security/faq -...
QuickShare File Share FTP Server Directory Traversal Vulnerability
The host is running QuickShare File Share FTP Server and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbquicksharehqftpserverdirtravvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ QuickShare File Share FTP Server Directory Traversal Vulnerability Authors: Veerendra ...
CVE-2010-3701
CVE-2010-3701 affects Red Hat Enterprise MRG Messaging broker (qpidd) prior to version 1.2.2. The flaw is in lib/MessageStoreImpl.cpp where handling a very large persistent message by a remote authenticated user can exhaust stack memory, leading to a broker crash (DoS). Exploitation details: remo...
MRG: remote authenticated DoS in broker
lib/MessageStoreImpl.cpp in Red Hat Enterprise MRG before 1.2.2 allows remote authenticated users to cause a denial of service stack memory exhaustion and broker crash via a large persistent message...
Fedora 12 : Django-1.2.2-1.fc12 (2010-14430)
See http://www.djangoproject.com/weblog/2010/sep/08/security-release/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
[SECURITY] Fedora 12 Update: sssd-1.2.2-20.fc12
Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...
Fedora 13 : bogofilter-1.2.2-1.fc13 (2010-13139)
Fixes CVE-2010-2494 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Nasim Guest Book - 'page' Cross-Site Scripting
source: https://www.securityfocus.com/bid/42503/info Nasim Guest Book is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
Mantis 'manage_proj_cat_add.php' HTML Injection Vulnerability
Mantis is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing...
TheHostingTool 1.2.2 Cross Site Request Forgery
Date: Mon 12 Jul 2010 01:19:52 PM EEST Vendor: http://thehostingtool.com/ Download: http://thehostingtool.googlecode.com/files/THT-v1.2.2.zip --- -= CSRF PoC 1 - Create Staff Account =- TheHostingTool 1.2.2 Multiple CSRF Vulnerabilities - Create Staff Account -= CSRF PoC 2 - Delete Staff Account ...
TheHostingTool 1.2.2 - Multiple Cross-Site Request Forgery Vulnerabilities
Date: Mon 12 Jul 2010 01:19:52 PM EEST Vendor: http://thehostingtool.com/ Download: http://thehostingtool.googlecode.com/files/THT-v1.2.2.zip --- -= CSRF PoC 1 - Create Staff Account =- TheHostingTool 1.2.2 Multiple CSRF Vulnerabilities - Create Staff Account -= CSRF PoC 2 - Delete Staff Account ...
osCSS 1.2.2 - page Cross-Site Scripting
osCSS 1.2.2 - page Cross-Site Scripting source: https://www.securityfocus.com/bid/41510/info osCSS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Mumble Murmur 1.2 - Denial of Service
source: https://www.securityfocus.com/bid/41251/info Mumble Murmur is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Mumble versions 1.2.2 and prior are vulnerable...
Zikula Application Framework 1.2.2 - index.php?func Cross-Site Scripting
Zikula Application Framework 1.2.2 - index.php?func Cross-Site Scripting source: https://www.securityfocus.com/bid/39717/info Zikula Application Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this...
Directory traversal
Directory traversal vulnerability in view.php in Pulse CMS 1.2.2 allows remote attackers to read arbitrary files via directory traversal sequences in the f parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2010-1298
Summary of CVE-2010-1298 : A directory traversal vulnerability exists in Pulse CMS 1.2.2, specifically in view.php, where an attacker can read arbitrary files by manipulating the f parameter in directory traversal sequences. The issue is documented across multiple sources (NVD, Red Hat, CVE List,...
Secunia Research: Pulse CMS login.php Arbitrary File Writing Vulnerability
====================================================================== Secunia Research 24/03/2010 - Pulse CMS login.php Arbitrary File Writing Vulnerability - ====================================================================== Table of Contents Affected...
