D-Link IP Cameras Multiple Vulnerabilities

1. Advisory Information Title: D-Link IP Cameras Multiple Vulnerabilities Advisory ID: CORE-2013-0303 Advisory URL:http://www.coresecurity.com/core-labs/advisories/d-link-ip-cameras-multiple-vulnerabilities Date published: 2013-04-29 Date of last update: 2013-03-29 Vendors contacted: D-Link...

CVE-2012-1599

CVE-2012-1599 affects Joomla! platforms: Joomla! 1.5.x before 1.5.26 and Joomla! 2.5.x before 2.5.4 are vulnerable due to a flawed permissions check that can disclose sensitive administrative back end information via unknown vectors. The issue is described as a possible duplicate of CVE-2012-1611...

Ubuntu Update for linux-ti-omap4 USN-1599-1

Ubuntu Update for Linux kernel vulnerabilities USN-1599-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15991.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-ti-omap4 USN-1599-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...

Design/Logic Flaw

Joomla! 2.5.x before 2.5.4 does not properly check permissions, which allows attackers to obtain sensitive "administrative back end" information via unknown attack vectors. NOTE: this might be a duplicate of CVE-2012-1599...

Gentoo Security Advisory GLSA 201110-21 (Asterisk)

The remote host is missing updates announced in advisory GLSA 201110-21. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Fedora Update for asterisk FEDORA-2011-6225

Check for the Version of asterisk OpenVAS Vulnerability Test Fedora Update for asterisk FEDORA-2011-6225 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Debian Security Advisory DSA 2225-1 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 2225-1. OpenVAS Vulnerability Test $Id: deb22251.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2225-1 asterisk Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Fedora Update for asterisk FEDORA-2011-6208

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-1599

manager.c in the Manager Interface in Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 does not properly check for the system privilege, which allows remote authenticated use...

CVE-2011-1599

manager.c in the Manager Interface in Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 does not properly check for the system privilege, which allows remote authenticated use...

CVE-2011-1599

CVE-2011-1599 affects Asterisk Manager Interface (manager.c) where insufficient privilege checks allow remote authenticated users to execute arbitrary commands via an Originate action with Async header and an Application header. Affected: Asterisk Open Source 1.4.x < 1.4.40.1, 1.6.1.x < 1.6...

Debian DSA-2225-1 : asterisk - several vulnerabilities

Several vulnerabilities have been discovered in Asterisk, an Open Source PBX and telephony toolkit. - CVE-2011-1147 Matthew Nicholson discovered that incorrect handling of UDPTL packets may lead to denial of service or the execution of arbitrary code. - CVE-2011-1174 Blake Cornell discovered that...

CVE-2010-1599

The CVE-2010-1599 issue is a SQL injection in NKInFoWeb loadorder.php, affecting NKInFoWeb 2.5 and 5.2.2.0 via the id_sp parameter. Remote attackers could potentially execute arbitrary SQL commands through this parameter. The NVD entry lists a base score of 7.5 (High) with network attack vector a...

CVE-2009-1599

Summary: CVE-2009-1599 concerns a PDF-related JavaScript security bypass in Opera. The vulnerability arises when a javascript: URI is executed from the target attribute of a submit button inside a form contained in an inline PDF, potentially bypassing Adobe Acrobat JavaScript restrictions on acce...

Debian Security Advisory DSA 1601-1 (wordpress)

The remote host is missing an update to wordpress announced via advisory DSA 1601-1. OpenVAS Vulnerability Test $Id: deb16011.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1601-1 wordpress Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1601-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1601-1 : wordpress - several vulnerabilities

Several remote vulnerabilities have been discovered in Wordpress, the weblog manager. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1599 WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain...

Debian Security Advisory DSA 1599-1 (dbus)

The remote host is missing an update to dbus announced via advisory DSA 1599-1. OpenVAS Vulnerability Test $Id: deb15991.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1599-1 dbus Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1599-1 : dbus - programming error

Havoc Pennington discovered that DBus, a simple interprocess messaging system, performs insufficient validation of security policies, which might allow local privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2008-1599

CVE-2008-1599 affects IBM AIX 5.2, 5.3, and 6.1. The nddstat family (atmstat, entstat, fddistat, hdlcstat, tokstat) handles environment variables insecurely, allowing a local user to gain root privileges via these setuid-root commands. Vulnerable files/paths include /usr/sbin/atmstat, /usr/sbin/e...