Apple iTunes < 11.1.4 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 11.1.4. It is, therefore, affected by multiple vulnerabilities : - The included versions of the WebKit, libxml, and libxslt components in iTunes contain several errors that can lead to memory corruption and arbitrary code executio...

Oracle Linux 6 : openldap (ELSA-2011-0347)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0347 advisory. - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 5 : openldap (ELSA-2011-0346)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0346 advisory. - fix: CVE-2011-1024 ppolicy forwarded bind failure messages cause success 680484 Tenable has extracted the preceding description block directly from the Oracle...

APPLE-SA-2013-06-04-1 OS X Mountain Lion v10.8.4 and Security Update 2013-002

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-06-04-1 OS X Mountain Lion v10.8.4 and Security Update 2013-002 OS X Mountain Lion v10.8.4 and Security Update 2013-002 is now available and addresses the following: CFNetwork Available for: OS X Mountain Lion v10.8 to v10.8.3 Impact: An...

CVE-2013-1024

CVE-2013-1024 is a memory‑initialization flaw in CoreMedia Playback for Mac OS X before 10.8.4, triggered by processing text tracks in a crafted movie file, allowing remote code execution or a denial of service. Related advisories reference Apple HT5784/HT6001, but the provided documents do not s...

1024 CMS 2.1.1 - p SQL Injection

1024 CMS 2.1.1 - p SQL Injection source: https://www.securityfocus.com/bid/55170/info 1024 CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

RedHat Update for openldap RHSA-2011:0347-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-1024

Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2012-1024

Directory traversal vulnerability in file in Enigma2 Webinterface 1.5rc1 and 1.5beta4 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2012-1024

CVE-2012-1024 is a directory-traversal vulnerability in Enigma2 Webinterface (versions 1.5rc1 and 1.5beta4) where an attacker can read arbitrary files by supplying a .. in the file parameter. The issue enables information disclosure via the web interface and is reflected in multiple CVE/OpenVAS r...

Small SSH RSA Key

The remote SSH daemon has a small key size, which is insecure. Given current technology, it should be 1024 bits at a minimum. TRUSTED...

Enigma2 'file' Parameter Information Disclosure Vulnerability

Enigma2 is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download local files in the context of the webserver process. This may allow the attacker to obtain sensitive information; other attacks...

1024 CMS 1.1.0 Beta 'force_download.php' Local File Include Vulnerability

1024 CMS 1.1.0 Beta is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the Web server process...

1024 CMS <= 1.1.0 Beta LFI Vulnerability - Active Check

1024 CMS 1.1.0 Beta is prone to a local file include LFI vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

1024 CMS 1.1.0 Beta - force_download.php Local File Inclusion

1024 CMS 1.1.0 Beta - forcedownload.php Local File Inclusion Exploit Title: 1024 CMS Version 1.1.0 beta/complete-modules/modules/forcedownload/forcedownload.php Local File Inclusion Vulnerability Date: 2011/10/19 Author: Sangyun YOOI2SEC Email: yoosy0302 at naver dot com Software Link:...

1024 CMS 1.1.0 Beta - 'force_download.php' Local File Inclusion

Exploit Title: 1024 CMS Version 1.1.0 beta/complete-modules/modules/forcedownload/forcedownload.php Local File Inclusion Vulnerability Date: 2011/10/19 Author: Sangyun YOOI2SEC Email: yoosy0302 at naver dot com Software Link: http://1024cms.org/ Version: 1024 CMS Version 1.1.0 beta Tested on:...

1024 CMS 1.1.0 Beta Local File Inclusion

Exploit Title: 1024 CMS Version 1.1.0 beta/complete-modules/modules/forcedownload/forcedownload.php Local File Inclusion Vulnerability Date: 2011/10/19 Author: Sangyun YOOI2SEC Email: yoosy0302 at naver dot com Software Link: http://1024cms.org/ Version: 1024 CMS Version 1.1.0 beta Tested on:...

1024 CMS 1.1.0 Beta force_download.php Local File Inclusion

Exploit for php platform in category web applications Exploit Title: 1024 CMS Version 1.1.0 beta/complete-modules/modules/forcedownload/forcedownload.php Local File Inclusion Vulnerability Date: 2011/10/19 Author: Sangyun YOOI2SEC Email: yoosy0302 at naver dot com Software Link: http://1024cms.or...

Fedora Update for openldap FEDORA-2011-3627

Check for the Version of openldap OpenVAS Vulnerability Test Fedora Update for openldap FEDORA-2011-3627 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for openldap FEDORA-2011-3627

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...