CVE-2012-1289

SAP NetWeaver 7.0 is affected by multiple directory traversal vulnerabilities in log.jsp/log_view.jsp under Internet Sales (crm.b2b) and Application Administration (com.sap.ipc.webapp.ipc). The root cause is improper validation of the logfilename parameter, allowing remote authenticated users to ...

RHEL 6 : librsvg2 (RHSA-2011:1289)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1289 advisory. The librsvg2 packages provide an SVG Scalable Vector Graphics library based on libart. A flaw was found in the way librsvg2 parsed certain SVG files...

Moderate: Red Hat Security Advisory: librsvg2 security update

Updated librsvg2 packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Pligg CMS 1.1.3 Privilege Escalation / Access Bypass

Exploit title: Pligg CMS file existence exploration/shared hosting privilege escalation H.ackAck.net Found by: Jelmer de Hen 15/03/2011 I released some Pligg exploits: http://h.ackack.net/the-pligg-cms-0dayset-1.html 22/03/2011 a patch became evailable; patching took 7 days:...

Memory corruption

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1289, and CVE-2010-1290...

CVE-2010-1289

Technical details for CVE-2010-1289 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2010-1289

Adobe Shockwave Player before 11.5.7.609 allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-1284, CVE-2010-1286, CVE-2010-1287, CVE-2010-1290, and CVE-2010-1291...

CVE-2009-1289

CVE-2009-1289 affects the IBM BladeCenter Advanced Management Module (AMM), including BladeCenter H with BPET36H 54. The issue allows remote attackers to discover the access roles and scopes of arbitrary user accounts by sending a modified WEBINDEX parameter to private/login.ssi. Root cause: mani...

Fedora Update for asterisk FEDORA-2008-2554

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for asterisk FEDORA-2008-2620

Check for the Version of asterisk OpenVAS Vulnerability Test Fedora Update for asterisk FEDORA-2008-2620 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for asterisk FEDORA-2008-2554

Check for the Version of asterisk OpenVAS Vulnerability Test Fedora Update for asterisk FEDORA-2008-2554 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Core 10 FEDORA-2009-1289 (gnumeric)

The remote host is missing an update to gnumeric announced via advisory FEDORA-2009-1289. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 10 FEDORA-2009-1289 (gnumeric)

The remote host is missing an update to gnumeric announced via advisory FEDORA-2009-1289. OpenVAS Vulnerability Test $Id: fcore20091289.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1289 gnumeric Authors: Thomas Reinke Copyright: Copyright c 2009...

FreeBSD Ports: pcal

The remote host is missing an update to the system as announced in the referenced advisory. VID 58fc2752-5f74-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[Full-disclosure] [MU-200803-01] Multiple buffer overflows in Asterisk

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple buffer overflows in Asterisk MU-200803-01 March 18, 2008 http://labs.musecurity.com/advisories.html Affected Products/Versions: Asterisk 1.4.18 and other branches http://www.asterisk.org/node/48466 Product Overview: Asterisk is an open source...

AST-2008-002: Two buffer overflows in RTP Codec Payload Handling

Asterisk Project Security Advisory - AST-2008-002 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Two buffer overflows in RTP Codec Payload | | | Handling |...

CVE-2008-1289

creationtimestamp| type| source ---|---|--- 2008-03-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31440...

Debian DSA-1289-1 : linux-2.6 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1496 Michal Miroslaw reported a DoS...

CVE-2007-1289

CVE-2007-1289 affects Tyger Bug Tracking System (TygerBT) 1.1.3. The vulnerability is an SQL injection in ViewBugs.php exploitable via the s parameter, enabling remote attackers to execute arbitrary SQL commands. This relates to a flaw in input handling (unsanitized user input) in that component,...

CVE-2006-1289

Milkeyway Captive Portal 0.1 and 0.1.1 have multiple SQL injection flaws that let remote attackers execute arbitrary SQL via parameters across several PHP scripts (auth.php, authuser.php, utils.php, traffic.php, userstatistics.php, chgpwd.php) and even via a cookie. Affected inputs include userna...