Apple iTunes < 11.1.4 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 11.1.4. It is, therefore, potentially affected by several issues : - The included versions of WebKit, libxml, and libxslt contain several errors that could lead to memory corruption and possibly arbitrary code executio...

CVE-2013-1037

CVE-2013-1037 affects WebKit as used in Apple iOS prior to 7. The vulnerability allows a remote attacker to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption in WebKit components (memory corruption and application crash). The NVD entry lists a ba...

Oracle Linux 5 / 6 : postgresql / and / postgresql84 (ELSA-2012-1037)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1037 advisory. - Update to PostgreSQL 8.4.12, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-12.html including the fixes for...

CVE-2012-1037

PHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows remote authenticated users to execute arbitrary PHP code via a URL in the subtype parameter...

CVE-2012-1037

PHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows remote authenticated users to execute arbitrary PHP code via a URL in the subtype parameter...

CVE-2012-1037

CVE-2012-1037 is a PHP remote file inclusion vulnerability affecting GLPI 0.78 up to 0.80.61, where remote authenticated users can execute arbitrary PHP code via a URL supplied in the sub_type parameter of front/popup.php. The NVD entry lists a CVSSv2 base score of 6.5 (MEDIUM) with network acces...

RHEL 5 / 6 : postgresql and postgresql84 (RHSA-2012:1037)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1037 advisory. - BSD crypt: DES encrypted password weakness CVE-2012-2143 - postgresql: Ability of database owners to install procedural languages via...

postgresql, postgresql84 security update

CentOS Errata and Security Advisory CESA-2012:1037 Updated postgresql84 and postgresql packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively. The Red Hat Security Response Team has rated this update as having moderate security impact. Common...

Fedora 16 : glpi-0.80.7-1.fc16 (2012-1519)

This version correct several bugs and a security bug CVE-2012-1037 You are strongly encouraged to update your actual version. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...

GLPI 0.80.61 Local File Inclusion / Remote File Inclusion

CVE-2012-1037: GLPI /front/popup.php?popup=addruleparameter&subtype= Timeline...

Ubuntu 10.04 LTS / 10.10 : ifupdown update (USN-1037-1)

Under certain circumstances, the DHCP client could start before its AppArmor profile was loaded and therefore run unconfined. This update ensures the AppArmor profile is loaded before DHCP client starts. Note that Tenable Network Security has extracted the preceding description block directly fro...

CVE-2004-1037

creationtimestamp| type| source ---|---|--- 2010-07-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16894 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/twikisearch.rb 2025-02-06 03:13:38+00:00| seen|...

TWiki - Search Function Arbitrary Command Execution (Metasploit)

$Id: twikisearch.rb 9671 2010-07-03 06:21:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2010-1037

Cross-site request forgery CSRF vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-1037

HP System Insight Manager (SIM) running on HP-UX, Linux, and Windows prior to version 6.0 is vulnerable to a CSRF flaw that could allow remote attackers to hijack user sessions. The vulnerability affects SIM components listed in the HP security bulletin (HPSBMA02525 rev.1) and is addressed by upg...

CVE-2010-1037

Cross-site request forgery CSRF vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

TWiki Search Function Arbitrary Command Execution

This module exploits a vulnerability in the search component of TWiki. By passing a 'search' parameter containing shell metacharacters to the 'WebSearch' script, an attacker can execute arbitrary OS commands. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2009-1037

CVE-2009-1037 affects Drupal’s Send by e-mail module within the "Printer, e-mail and PDF versions" module. The vulnerability concerns the flood control API and allows remote attackers to cause unlimited spam messages via vectors related to flood control behavior. Affected versions are 5.x before ...

CentOS Update for seamonkey CESA-2008:1037-01 centos2 i386

Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2008:1037-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

seamonkey security update

CentOS Errata and Security Advisory CESA-2008:1037-01 Updated seamonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat...