CVE-2013-1540

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier and 6 Update 43 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-2433...

RHEL 5 : kernel (RHSA-2012:1540)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1540 advisory. - kernel: rds-ping cause kernel panic CVE-2012-2372 - kernel: net: slab corruption due to improper synchronization around inet-opt...

Ubuntu Update for nss USN-1540-2

Ubuntu Update for Linux kernel vulnerabilities USN-1540-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN15402.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for nss USN-1540-2 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu 10.04 LTS / 11.04 / 11.10 : nss vulnerability (USN-1540-1)

Kaspar Brand discovered a vulnerability in how the Network Security Services NSS ASN.1 decoder handles zero length items. If the user were tricked into opening a specially crafted certificate, an attacker could possibly exploit this to cause a denial of service via application crash. Note that...

HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMA02662)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-1540

CVE-2011-1540 affects HP System Management Homepage (SMH) prior to version 6.3. The issue allows remote authenticated users to execute arbitrary code via unknown vectors, with CVSS v2 base score 9.0 (high) and full impact to confidentiality, integrity, and availability. HP’s security bulletin not...

[security bulletin] HPSBMA02662 SSRT100409 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Unauthorized Access, Execution of Arbitrary Code, Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02735910 Version: 1 HPSBMA02662 SSRT100409 rev.1 - HP System Management Homepage SMH for Linux and Windows, Remote Unauthorized Access, Execution of Arbitrary Code, Denial of Service DoS NOTICE:...

CVE-2010-1540

Directory traversal vulnerability in index.php in the MyBlog commyblog component 3.0.329 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the task parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-1540

CVE-2010-1540 : A directory traversal vulnerability affects Joomla! component com_myblog (MyBlog) version 3.0.329, where an attacker can read arbitrary files via a .. (dot dot) in the task parameter of index.php. This is a vulnerability in the Joomla! MyBlog component and is documented in both th...

CVE-2010-1540

creationtimestamp| type| source ---|---|--- 2010-03-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11625...

Fedora Update for ocsinventory FEDORA-2010-1540

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE 11 Security Update : libopenssl (SAT Patch Number 1540)

The TLS/SSLv3 protocol as implemented in openssl prior to this update was not able to associate data to a renegotiated connection. This allowed man-in-the-middle attackers to inject HTTP requests in a HTTPS session without being noticed. For example Apache's modssl was vulnerable to this kind of...

Linux Kernel r8169驱动Out-of-IOMMU错误本地拒绝服务漏洞

BUGTRAQ ID: 36706 CVECAN ID: CVE-2009-3613 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的Realtek r8169以太网驱动中存在漏洞，pciunmapsingle中的内存泄露可能导致耗尽IOMMU空间和系统崩溃。本地网络中的攻击者可以通过ping操作发送巨型帧触发out-of-IOMMU错误，导致拒绝服务的情况。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Debian Security Advisory DSA 1540-2 (lighttpd)

The remote host is missing an update to lighttpd announced via advisory DSA 1540-2. OpenVAS Vulnerability Test $Id: deb15402.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1540-2 lighttpd Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1540-2 (lighttpd)

The remote host is missing an update to lighttpd announced via advisory DSA 1540-2. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Debian: Security Advisory (DSA-1540-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1540-1 : lighttpd - denial of service

It was discovered that lighttpd, a fast webserver with minimal memory footprint, didn't correctly handle SSL errors. This could allow a remote attacker to disconnect all active SSL connections. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2003-1540

CVE-2003-1540 concerns WF-Chat 1.0 Beta, where sensitive information is stored under the web root with insufficient access control. The vulnerability allows remote attackers to obtain authentication-related data by directly requesting the files “!pwds.txt” and “!nicks.txt.” The available sources ...

CVE-2007-1540

Directory traversal vulnerability in am.pl in 1 SQL-Ledger 2.6.27 and earlier, and 2 LedgerSMB before 1.2.0, allows remote attackers to run arbitrary executables and bypass authentication via a .. dot dot sequence and trailing NULL %00 in the login parameter. NOTE: this issue was reportedly...

CVE-2007-1540

CVE-2007-1540: Directory traversal in am.pl affects SQL-Ledger 2.6.27 and earlier and LedgerSMB before 1.2.0. The login parameter can be manipulated with a .. sequence and trailing NULL (%00) to run arbitrary executables and bypass authentication. The issue was reportedly addressed in SQL-Ledger ...