HP SiteScope Cross-Site Scripting and Session Fixation Vulnerabilities

This host is running HP SiteScope and is prone to cross-site scripting and session fixation vulnerabilities. OpenVAS Vulnerability Test $Id: gbhpsitescopexssnsessionfixationvuln.nasl 5390 2017-02-21 18:39:27Z mime $ HP SiteScope Cross-Site Scripting and Session Fixation Vulnerabilities Authors:...

Cross site scripting

Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X do not properly restrict script, which allows attackers to execute arbitrary code via a crafted document, related to a "cross document script execution vulnerability."...

CVE-2011-2105

Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and macOS are affected by CVE-2011-2105 due to crafted font data causing memory corruption and potential denial of service or other impacts. The issue is acknowledged in multiple advisories (e.g., RHSA-2011...

CVE-2011-1323

Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header options, which allows remote attackers to cause a denial of service device reboot via a crafted option that triggers...

Adobe Reader 9.x / 10.x Multiple Vulnerabilities (APSB11-08)

The remote Windows host contains a version of Adobe Reader 9.x 9.4.4 or 10.x = 10.1. Such versions are affected by multiple memory corruption vulnerabilities. A remote attacker could exploit this by tricking a user into viewing a maliciously crafted PDF file, resulting in arbitrary code execution...

FFmpeg Real Media文件解析内存破坏远程代码执行漏洞

BUGTRAQ ID: 47149 CVE ID: CVE-2011-0722 FFmpeg是一个自由软件，可以执行音讯和视讯多种格式的录影、转档、串流功能，包含了libavcodec ─这是一个用于多个专案中音讯和视讯的解码器函式库，以及 libavformat ——一个音讯与视讯格式转换函式库。 FFmpeg在解析畸形多媒体文件时存在内存破坏远程代码执行漏洞，远程攻击者可利用此漏洞在受影响应用程序中执行任意代码，造成拒绝服务。 Ubuntu Linux 9.x Ubuntu Linux 8.x Ubuntu Linux 10.x FFmpeg FFmpeg = 0.5.4 厂商补丁：...

Oracle 10/11g exp.exe - param file Local Buffer Overflow PoC Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Oracle 10/11g exp.exe - param file Local Buffer Overflow PoC Exploit Date found approx: 9/3/2010 Software Link: http://www.oracle.com/technology/products/database/oracle10g/index.html Version: 10.x and 11g r1 r2 untested...

Oracle 10/11g - 'exp.exe?file' Local Buffer Overflow

!/usr/bin/python Oracle 10/11g exp.exe - param file Local Buffer Overflow PoC Exploit Date found approx: 9/3/2010 Software Link: http://www.oracle.com/technology/products/database/oracle10g/index.html Version: 10.x and 11g r1 r2 untested Tested on: Windows XP SP3 En Usage: $ORACLEHOME\exp.exe...

CVE-2010-3647

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service memory corruption via unknown vectors, a different vulnerability...

Adobe Products Remote Code Execution Vulnerability (Jun 2010) - Linux

Adobe products is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell ZENworks Configuration Management UploadServlet Remote Code Execution

Added: 05/10/2010 BID: 39114 OSVDB: 63412 Background Novell ZENworks Configuration Management is an IT desktop computer management suite that provides the ability to install, configure and administer desktop computers from a centralized location. The product is based on a client/server...

CVE-2009-2754

CVE-2009-2754 relates to a stack-based buffer overflow in librpc.dll’s authentication for the Portmapper service (portmap.exe) used by IBM Informix Dynamic Server (IDS) 10.x prior to 10.00.TC9 and 11.x prior to 11.10.TC3, and EMC Legato NetWorker. The issue is triggered by a crafted parameter siz...

RealNetworks RealPlayer SMIL file BOF Vulnerability (Linux)

This host is installed with RealPlayer which is prone to Buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodrealplayersmilboflin.nasl 5401 2017-02-23 09:46:07Z teissa $ RealNetworks RealPlayer SMIL file BOF Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c 2010...

RealNetworks RealPlayer Multiple Code Execution Vulnerabilities (Linux)

This host is installed with RealPlayer which is prone to multiple code execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodrealplayermultcodeexecvulnlin.nasl 5401 2017-02-23 09:46:07Z teissa $ RealNetworks RealPlayer Multiple Code Execution Vulnerabilities Linux Authors: Antu Sanadi...

Adobe Flash Player ActionScript异常处理器整数溢出漏洞

BUGTRAQ ID: 37267 CVE ID: CVE-2009-3799 Flash Player是一款非常流行的FLASH播放器。 Flash Player在生成ActionScript异常处理器期间过大的exceptioncount值会在Verifier::parseExceptionHandlers函数中触发整数溢出，导致以当前登录用户的权限执行任意代码。 Adobe Flash Player 10.x Adobe AIR 1.5.2 厂商补丁： Adobe ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Opera Multiple Cross-Site Scripting Vulnerabilities (Sep 2009) - Linux

Opera is prone to multiple Cross-Site Scripting vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2009-4327 · Adobe · Reader +2

Name of the Vulnerable Software and Affected Versions: Adobe Reader and Acrobat versions 9.x through 9.1.2 Adobe Flash Player versions 9.x through 9.0.159.0 Adobe Flash Player versions 10.x through 10.0.22.87 Description: The issue allows remote attackers to execute arbitrary code or cause a deni...

Oracle存在多个安全漏洞

CNCAN ID：CNCAN-2009041604 多个Oracle产品存在漏洞，可导致SQL注入，泄漏敏感信息或使攻击者破坏系统： -Oracle Process Manager和Notification opmn守护程序存在格式串错误，提交特殊构建的POST请求给port 6000/TCP可导致任意代码执行。 -传递给"DBMSAQIN"的输入在使用前缺少过滤，可导致注入任意SQL代码。 -Oracle数据库包含的Application Express组件存在错误，非特权用户可以获得"LOWS030000.WWVFLOWUSER"中的APEX密码HASH。 目前还存在多个未知漏洞。...

security flaw

Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to "input validation errors."...

CVE-2008-1813

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote unauthenticated or authenticated attack vectors related to 1 SYS.DBMSAQ in the Advanced Queuing component, aka DB01; 2 Core RDBMS, aka DB03; 3 SDOGEOM i...