81 matches found
CVE-2016-1454
CVE-2016-1454 affects Cisco NX-OS 4.0–7.3 and 11.0–11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 series devices. The issue arises from incomplete input validation in the BGP UPDATE handling, allowing an unauthenticated, remote attacker to trigger a DoS (device relo...
CVE-2015-1454
CVE-2015-1454 affects Blue Coat ProxyClient before 3.3.3.3 and 3.4.x before 3.4.4.10, and Unified Agent before 4.1.3.151952. The issue is improper validation of certain certificates, enabling a man‑in‑the‑middle attacker to spoof ProxySG Client Managers and, via a crafted certificate, modify conf...
Pearson eSIS HTML注入漏洞
Bugtraq ID:66673 CVE ID:CVE-2014-1454 Pearson eSIS Enterprise Student Information System是一个相关学生信息系统的管理系统。 Pearson eSIS在实现上存在HTML注入漏洞，成功利用后可使攻击者在受影响浏览器上下文中注入并执行HTML和脚本代码。 0 pearsonschoolsystems eSIS 目前没有详细解决方案： www.pearsonschoolsystems.com/products/esis...
Pearson eSIS Enterprise Student Information System XSS
Advisory ID: hag201477 Product: Pearson eSIS Enterprise Student Information System Vendor: PearsonVue Vulnerable Versions: Any version Advisory Publication: April 06, 2014 Vendor Notification: March 05, 2014 Public Disclosure: April 06, 2014 Vulnerability Type: Cross-Site Scripting CWE-79 CVE...
Joomla! 2.5.x < 2.5.9 / 3.0.x < 3.0.3 Multiple Vulnerabilities
According to its self-reported version number, the Joomla! installation running on the remote web server is 2.5.x prior to 2.5.9 or 3.0.x prior to 3.0.3. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the highlight.php script, within the...
CVE-2013-1454
CVE-2013-1454 affects Joomla! 3.0.x through 3.0.2, with an information-disclosure issue described as caused by coding errors. The connected sources corroborate an unspecified information-disclosure vulnerability in Joomla! 3.0.x (and mention 3.0.2 as affected). No concrete exploit vectors, root c...
Ubuntu 8.04 LTS : linux vulnerability (USN-1454-1)
A flaw was found in the Linux's kernels ext4 file system when mounted with a journal. A local, unprivileged user could exploit this flaw to cause a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenab...
CVE-2012-1454
The CVE-2012-1454 entry notes that the ELF file parser in Dr.Web 5.0.2.03300, eSafe 7.0.17.0, McAfee Gateway (Webwasher) 2010.1C, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 can be bypassed by a modified ei_version field in an ELF file, enabling a remo...
CVE-2012-1454
The ELF file parser in Dr.Web 5.0.2.03300, eSafe 7.0.17.0, McAfee Gateway formerly Webwasher 2010.1C, Rising Antivirus 22.83.00.03, Fortinet Antivirus 4.2.254.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF file with a modified eiversion field. NOTE:...
MySQL < 3.23.33 Multiple Buffer Overflows
The version of MySQL installed on the remote host is affected by the following vulnerabilities : - A buffer overflow in libmysqlclient.so allows a remote attacker to execute arbitrary code via a long host parameter. CVE-2001-1453 - A buffer overflow allows a remote attacker to execute arbitrary...
Google Chrome multiple vulnerabilities - May11 (Windows)
The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnmay11win.nasl 7019 2017-08-29 11:51:27Z teissa $ Google Chrome multiple vulnerabilities - May11 Windows Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networ...
CVE-2011-1454
CVE-2011-1454 describes a use-after-free in the DOM id handling of Google Chrome prior to 11.0.696.57. The vulnerability allows remote attackers to cause a denial of service or potentially other impact via a crafted HTML document. The connected sources confirm the affected product (Google Chrome)...
VMware SpringSource tc Server 'JMX' Interface Security Bypass Vulnerability
VMware SpringSource tc Server is prone to a security bypass vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
CVE-2010-1454
The CVE concerns VMware SpringSource tc Server Runtime (6.0.19/6.0.20 before 6.0.20.D, and 6.0.25.A before 6.0.25.A-SR01) where JmxSocketListener improperly enforces encrypted passwords (s2enc). This allows remote access to the JMX interface with a blank password when the listener is configured t...
CVE-2010-1454: SpringSource tc Server unauthenticated remote access to JMX interface
CVE-2010-1454: SpringSource tc Server unauthenticated remote access to JMX interface Severity: Critical Vendor: SpringSource, a division of VMware Versions Affected: tc Server Runtime 6.0.19.A, 6.0.20.A, 6.0.20.B, 6.0.20.C, 6.0.25.A Description: A problem has been identified in the...
SLES9: Security update for freeradius oes/CORE-9
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: freeradius For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5010921 within the...
CVE-2009-1454
Cross-site scripting XSS vulnerability in tasks.php in WebCollab before 2.50 aka Billy Goat allows remote attackers to inject arbitrary web script or HTML via the selection parameter in a todo action...
CVE-2009-1454
CVE-2009-1454 is an XSS in WebCollab’s tasks.php prior to version 2.50 (aka Billy Goat). The issue allows remote attackers to inject arbitrary script/HTML via the selection parameter in a todo action. Affected: WebCollab before 2.50. Impact (per available data): client-side script execution with ...
Gentoo Security Advisory GLSA 200505-13 (freeradius)
The remote host is missing updates announced in advisory GLSA 200505-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...