Address Book Script 1.09 - Local File Inclusion

Address Book Script 1.09 - Local File Inclusion Securitylab.ir Application Info: Name: Address Book Script Version: 1.9 Vendor: http://www.phpkobo.com/addressbook.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

CVE-2010-0667

MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAYINTERFACE environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2010-0667

MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAYINTERFACE environment variable is set, which allows remote attackers to obtain sensitive information via unspecified vectors...

PYSEC-2010-15

Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured...

CVE-2010-0668

Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser list, the xmlrpc action enabled, the SyncPages action enabled, or OpenID configured...

Ubuntu Update for Firefox 3.0 and Xulrunner 1.9 vulnerabilities USN-895-1

Ubuntu Update for Linux kernel vulnerabilities USN-895-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN8951.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for Firefox 3.0 and Xulrunner 1.9 vulnerabilities USN-895-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks...

Ubuntu: Security Advisory (USN-877-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 8.04 LTS / 8.10 / 9.04 : firefox-3.0, xulrunner-1.9 regression (USN-877-1)

USN-873-1 fixed vulnerabilities in Firefox and Xulrunner. The upstream changes introduced a regression when using NTLM authentication. This update fixes the problem and adds additional stability fixes. We apologize for the inconvenience. Jesse Ruderman, Josh Soref, Martijn Wargers, Jose Angel, Ol...

CVE-2010-0220

The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service application crash via a crafted web site that triggers memory consumption and an accompanying Low Memory alert dialog, and also trigge...

TFTP Daemon 1.9 Denial Of Service

// // //Vulnerability: Remote Buffer Overflow Exploit //Impact: Remote Denial of Service Attack //Vulnerable Application: TFTP Daemon Version 1.9 //Tested on Windows XP Service Pack II // //Author: Socket0x03 //Contact: Socket0x03 at teraexe dot com //Website: www.teraexe.com // // include includ...

Ubuntu USN-873-1 (xulrunner-1.9)

The remote host is missing an update to xulrunner-1.9 announced via advisory USN-873-1. OpenVAS Vulnerability Test $Id: ubuntu8731.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8731.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-873-1 xulrunner-1.9 Author...

TFTP Daemon v1.9 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================== TFTP Daemon v1.9 Denial of Service Exploit ========================================== Title: TFTP Daemon v1.9 Denial of Service Exploit CVE-ID: OSVDB-ID: Author: Socket0x03 Published: 2009-12-22 Verified...

TFTP Daemon v1.9 Denial of Service Exploit

No description provided by source. / // //Vulnerability: Remote Buffer Overflow Exploit //Impact: Remote Denial of Service Attack //Vulnerable Application: TFTP Daemon Version 1.9 //Tested on Windows XP Service Pack II // //Author: Socket0x03 //Contact: Socket0x03 at teraexe dot com email conceal...

Allied Telesyn TFTP (AT-TFTP) ServerDaemon 1.9 - Denial of Service

Allied Telesyn TFTP AT-TFTP ServerDaemon 1.9 - Denial of Service // // //Vulnerability: Remote Buffer Overflow Exploit //Impact: Remote Denial of Service Attack //Vulnerable Application: TFTP Daemon Version 1.9 //Tested on Windows XP Service Pack II // //Author: Socket0x03 //Contact: Socket0x03 a...

USN-873-1: Firefox 3.0 and Xulrunner 1.9 vulnerabilities

Jesse Ruderman, Josh Soref, Martijn Wargers, Jose Angel, Olli Pettay, and David James discovered several flaws in the browser and JavaScript engines of Firefox. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary...

Design/Logic Flaw

login/indexform.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 links to an index page on the HTTP port even when the page is served from an HTTPS port, which might cause login credentials to be sent in cleartext, even when SSL is intended, and allows remote attackers to obtain these...

CVE-2009-4299

mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors...

CVE-2009-4305

SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file CourseTitle."...

CVE-2009-4302

login/indexform.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 links to an index page on the HTTP port even when the page is served from an HTTPS port, which might cause login credentials to be sent in cleartext, even when SSL is intended, and allows remote attackers to obtain these...

CVE-2009-4297

Multiple cross-site request forgery CSRF vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...