131 matches found
CVE-2015-1777
CVE-2015-1777 affects rhnreg_ks in Red Hat Network Client Tools (rhn-client-tools) on Red Hat Gluster Storage 2.1 and RHEL 5, 6, 7. The component fails to properly validate hostnames in X.509 certificates from SSL servers, enabling a remote MITM that can prevent system registration. Root cause: h...
CVE-2015-1777
Removed by vendor...
popmaster.ir XSS vulnerability
Vulnerable URL: http://popmaster.ir/pop.php?user=%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1777 VIP website status:| Yes Check...
CVE-2016-1777
Web Server in Apple OS X Server before 5.1 supports the RC4 algorithm, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors...
CVE-2016-1777
CVE-2016-1777 is documented as a vulnerability where RC4 was supported by the Web Server in Apple OS X Server (before 5.1). The connected Apple security entries indicate that RC4 was removed as a default cipher in macOS security updates, addressing the issue (CVE-2016-1777) and associated CVEs by...
CVE-2016-1777
Web Server in Apple OS X Server before 5.1 supports the RC4 algorithm, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors...
CVE-2007-1777
Integer overflow in the zipreadentry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive that contains an entry with a length value of 0xffffffff, which is incremented before use in an emalloc call, triggering a heap overflow...
Oracle: Security Advisory (ELSA-2011-1777)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Matt Wright FormMail Multiple cross-site scripting (XSS) vulnerabilities (CVE-2009-1776; CVE-2009-1777)
FormMail is prone to an HTTP-response-splitting vulnerability and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user, steal...
F5 FirePass SQL injection vulnerability CVE-2012-1777
F5 FirePass is prone to an SQL injection vulnerability. Copyright C 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2014-1777
CVE-2014-1777 affects Microsoft Internet Explorer 10 and 11. It enables remote attackers to read local files via a crafted webpage (information disclosure). Public exploits exist. Remediation is to install the June 2014 IE security update (MS14-035; KB2969262 or KB2963950, as applicable), per ven...
Microsoft Internet Explorer CVE-2014-1777 Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Internet Explorer 10 and 11 are vulnerable. Technologies Affected Avaya Aura Conferencing 6.0 Avaya Aura...
Check_MK Arbitrary File Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 === LSE Leading Security Experts GmbH - Security Advisory LSE-2014-05-21 === CheckMK - Arbitrary File Disclosure Vulnerability - -------------------------------------------------- Affected Versions ================= Linux versions of CheckMK equal or...
Oracle Linux 6 : qemu-kvm (ELSA-2011-1777)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1777 advisory. - CVE: CVE-2011-4111 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...
Oracle Linux 6 : libarchive (ELSA-2011-1507)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1507 advisory. 2.8.3-3 - Security fixes CVE-2011-1777, CVE-2011-1778 739939 Tenable has extracted the preceding description block directly from the Oracle Linux...
CVE-2013-1777
The CVE-2013-1777 issue is concrete: Apache Geronimo 3.x (notably in WebSphere Application Server Community Edition 3.0.0.3) exposes an RMI classloader misconfiguration that allows remote attackers to execute arbitrary code by sending a crafted serialized object through JMX. The root cause is imp...
RHEL 6 : qemu-kvm (RHSA-2011:1777)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1777 advisory. - qemu: ccid: buffer overflow in handling of VSCATR message CVE-2011-4111 Note that Nessus has not tested for this issue but has instead relied only ...
Scientific Linux Security Update : libarchive on SL6.x i386/x86_64
The libarchive programming library can create and read several different streaming archive formats, including GNU tar and cpio. It can also read ISO 9660 CD-ROM images. Two heap-based buffer overflow flaws were discovered in libarchive. If a user were tricked into expanding a specially crafted IS...
RedHat Update for libarchive RHSA-2011:1507-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Mac OS X Multiple Vulnerabilities (2012-002)
This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-002. OpenVAS Vulnerability Test $Id: gbmacosxsu12-002.nasl 6521 2017-07-04 14:51:10Z cfischer $ Mac OS X Multiple Vulnerabilities 2012-002 Authors: Madhuri D Copyright: Copyright c...