VMware ESXi 5.5 < Build 3029944 OpenSLP RCE (VMSA-2015-0007)

The remote VMware ESXi host is version 5.5 prior to build 3029944. It is, therefore, affected by a remote code execution vulnerability due to a double-free error in the SLPDProcessMessage function in OpenSLP. An unauthenticated, remote attacker can exploit this, via a crafted package, to execute...

CVE-2015-1047

vpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote attackers to cause a denial of service via a long heartbeat message...

CVE-2015-1047

VMware products affected by CVE-2015-1047 include vCenter Server (vpxd) 5.0 before u3e, 5.1 before u3, and 5.5 before u2 (DoS via long heartbeat) and ESXi 5.0/5.1/5.5 with OpenSLP OpenSLP OpenSLP double-free in SLPDProcessMessage() leading to remote code execution or denial of service. Patches/up...

Oracle: Security Advisory (ELSA-2012-1047)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware ESXi OpenSLP Remote Code Execution (VMSA-2015-0007) - Remote Version Check

VMware ESXi updates address critical security issues. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

VMware ESXi OpenSLP Remote Code Execution (VMSA-2015-0007)

VMware vCenter and ESXi updates address critical security issues. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware vCenter Multiple Vulnerabilities (VMSA-2015-0007)

The VMware vCenter Server installed on the remote host is affected by the following vulnerabilities : - A flaw exists in the vpxd service due to improper sanitization of long heartbeat messages. An unauthenticated, remote attacker can exploit this to cause a denial of service. CVE-2015-1047 - A...

Apple iTunes < 11.1.4 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 11.1.4. It is, therefore, affected by multiple vulnerabilities : - The included versions of the WebKit, libxml, and libxslt components in iTunes contain several errors that can lead to memory corruption and arbitrary code executio...

Apple iTunes < 11.1.4 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 11.1.4. It is, therefore, potentially affected by several issues : - The included versions of WebKit, libxml, and libxslt contain several errors that could lead to memory corruption and possibly arbitrary code executio...

CVE-2013-1047

CVE-2013-1047 affects WebKit as used in Apple iOS before version 7. A crafted website can trigger memory corruption in WebKit, allowing remote code execution or a denial of service (application crash). The description does not specify exact vulnerable products/versions beyond iOS prior to 7, nor ...

Oracle Linux 5 : php53 (ELSA-2012-1047)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1047 advisory. - add security fix for CVE-2010-2950 - fix tests for CVE-2012-2143, CVE-2012-0789 - add security fix for CVE-2012-2336 Tenable has extracted the...

CVE-2012-1047

CVE-2012-1047 describes a directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) of Cyberoam Central Console (CCC) 2.00.2 . The flaw allows remote attackers to include and execute arbitrary local files by using a “..” in the file parameter of an Online_help action. This is ...

CVE-2011-1047

CVE-2011-1047 concerns multiple SQL injection vulnerabilities in the VastHTML Forum Server (aka ForumPress) WordPress plugin, specifically versions 1.6.1 and 1.6.5. The issues arise from improper input sanitization in three vectors: (1) the search_max parameter in index.php (wpf.class.php), (2) t...

Ubuntu Update for awstats vulnerability USN-1047-1

Ubuntu Update for Linux kernel vulnerabilities USN-1047-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10471.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for awstats vulnerability USN-1047-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1047-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : awstats vulnerability (USN-1047-1)

It was discovered that AWStats did not correctly filter the LoadPlugin configuration option. A local attacker on a shared system could use this to inject arbitrary code into AWStats. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

CVE-2010-1047

SQL injection vulnerability in index.php in MASA2EL Music City 1.0 and 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a singer action...

CVE-2010-1047

CVE-2010-1047 describes an SQL injection in index.php for MASA2EL Music City 1.0 and 1.1 that allows remote attackers to execute arbitrary SQL via the id parameter in a singer action. The vulnerability is documented across CVE/NVD sources; exploitation status is not detailed in the provided docum...

CVE-2010-1047

creationtimestamp| type| source ---|---|--- 2010-02-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11329...

CVE-2009-1047

CVE-2009-1047 is a Drupal XSS vulnerability in the Send by e-mail module of the Printer, e-mail and PDF versions module. The issue affects Drupal 5.x before 5.x-4.4 and 6.x before 6.x-1.4, enabling remote attackers to inject arbitrary web script or HTML via outbound HTML e-mail. Impact is web ses...