D-Link Devices HNAP SOAPAction-Header Command Execution

Different D-Link Routers are vulnerable to OS command injection in the HNAP SOAP interface. Since it is a blind OS command injection vulnerability, there is no output for the executed command. This module has been tested on a DIR-645 device. The following devices are also reported as affected:...

Mozilla Firefox Multiple Vulnerabilities-01 (May 2014) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

SeaMonkey Multiple Vulnerabilities-01 (May 2014) - Mac OS X

SeaMonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:seamonkey"; ifdescription...

SeaMonkey < 2.26 Multiple Vulnerabilities

Binary data 8214.prm...

Ubuntu Update for firefox USN-2185-1

Check for the Version of firefox OpenVAS Vulnerability Test $Id: gbubuntuUSN21851.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for firefox USN-2185-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...

CVE-2014-1522

Technical details for CVE-2014-1522 are not publicly provided in the connected documents. No specifics on affected products, versions, root cause, impact, or fixes are available; monitor for updates.

D-Link DAP-1522未文档化telnet账户漏洞

D-Link DAP-1522是一款路由器设备。 D-Link DAP-1522中的telnet服务使用一个内置的账户，允许远程攻击者可以利用该账户控制设备，如重置出厂设置。 0 D-Link DAP-1522 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.dlink.com...

Oracle WebCenter Content (April 2013 CPU)

The version of Oracle WebCenter Content installed on the remote host is potentially affected by multiple vulnerabilities in the Content Server component. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid69478;...

CVE-2013-1522

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 allows remote attackers to affect integrity via unknown vectors related to Content Server...

CVE-2013-1522

Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6.0 contains CVE-2013-1522, an unspecified vulnerability that allows remote attackers to affect integrity via unknown vectors. Affected products/versions are cited by NVD; CVSSv2 base score 4.3 (MEDIUM) wi...

CVE-2012-1522

CVE-2012-1522 concerns Microsoft Internet Explorer 9, where memory object handling allows remote execution of arbitrary code if a deleted object is accessed. This is the Cached Object Remote Code Execution vulnerability. The connected documents indicate this is addressed by the MS12-044 security ...

Internet Explorer Cached Object Remote Code Execution (MS12-044; CVE-2012-1522)

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object that has been deleted. A remote attacker can trigger this vulnerability by enticing an unsuspecting victim to open a specially crafted...

CentOS Update for kernel CESA-2009:1522 centos4 i386

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2009:1522 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Debian Security Advisory DSA 2223-1 (doctrine)

The remote host is missing an update to doctrine announced via advisory DSA 2223-1. OpenVAS Vulnerability Test $Id: deb22231.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2223-1 doctrine Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

CVE-2011-1522

CVE-2011-1522 covers multiple SQL injection flaws in Doctrine DBAL’s AbstractPlatform::modifyLimitQuery. Affected are Doctrine 1.x prior to 1.2.4 and 2.x prior to 2.0.3. The vulnerabilities allow remote attackers to inject arbitrary SQL through the limit or offset parameters, with network attack ...

CVE-2011-1522

Multiple SQL injection vulnerabilities in the Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery function in Doctrine 1.x before 1.2.4 and 2.x before 2.0.3 allow remote attackers to execute arbitrary SQL commands via the 1 limit or 2 offset field...

[SECURITY] [DSA 2223-1] doctrine security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2223-1 [email protected] http://www.debian.org/security/ Florian Weimer April 20, 2011 http://www.debian.org/security/faq -...

Debian DSA-2223-1 : doctrine - SQL injection

It was discovered that Doctrine, a PHP library for implementing object persistence, contains SQL injection vulnerabilities. The exact impact depends on the application which uses the Doctrine library. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

[SECURITY] [DSA 2223-1] doctrine security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2223-1 [email protected] http://www.debian.org/security/ Florian Weimer April 20, 2011 http://www.debian.org/security/faq -...

CVE-2010-1522

The CVE-2010-1522 issue affects BookLibrary Basic (com_booklibrary) for Joomla! 1.5.3, where multiple SQL injections are possible via user-supplied parameters in index.php. The root cause is improper sanitization of inputs in five vectors: bid[] in lend_request/save_lend_request, id in mdownload/...