MS14-049: Vulnerability in Windows Installer Service Could Allow Elevation of Privilege (2962490)

A privilege escalation vulnerability exists on the remote Windows host due to improper handling of the repair functionality in the Windows installer service. A local attacker could exploit this vulnerability to execute arbitrary code on the remote host under the privileges of the system...

CentOS Update for php CESA-2013:1814 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for php RHSA-2013:1814-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 : php (ELSA-2013-1814)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1814 advisory. 5.1.6-43 - drop unneeded patch 5.1.6-42 - add security fixes for CVE-2012-2688, CVE-2011-1398, CVE-2013-1643, CVE-2013-6420 Tenable has extracted the...

Oracle Linux 6 : ipmitool (ELSA-2011-1814)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-1814 advisory. 1.8.11-12.1 - fixed wrong permissions on ipmievd.pid 756684 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Apache Rave User Information Disclosure

This module exploits an information disclosure in Apache Rave 0.20 and prior. The vulnerability exists in the RPC API, which allows any authenticated user to disclose information about all the users, including their password hashes. In order to authenticate, the user can provide his own...

CVE-2013-1814

The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset parameter, as demonstrated by discovering password hashes in the password field of a response...

DSquare Exploit Pack: D2SEC_APACHE_RAVE

Name| d2secapacherave ---|--- CVE| CVE-2013-1814 Exploit Pack| D2ExploitPack Description| d2secapacherave.py Notes|...

CVE-2013-1814

CVE-2013-1814 (Apache Rave) affects Apache Rave 0.11–0.20. The vulnerability lies in the User RPC API (users/get): remote authenticated users can disclose sensitive data for all user accounts via the offset parameter, including password hashes. Public references corroborate an information disclos...

Apache Rave 0.11 - 0.20 - User Information Disclosure Vulnerability

Exploit for multiple platform in category web applications CVE-2013-1814: Apache Rave exposes User over API Severity: Important Vendor: The Apache Software Foundation Versions Affected: Rave 0.11 to 0.20 Description: Rave returns the full user object, including the salted and hashed password, via...

Apache Rave User Exposure

CVE-2013-1814: Apache Rave exposes User over API Severity: Important Vendor: The Apache Software Foundation Versions Affected: Rave 0.11 to 0.20 Description: Rave returns the full user object, including the salted and hashed password, via the User RPC API. This endpoint is only available to...

ManageEngine DeviceExpert ScheduleResultViewer Remote Directory Traversal

DeviceExpert is susceptible to a directory traversal attack on the 'FileName' parameter of 'ScheduleResultView' servlet scheduleresult.de. It is possible for an unauthenticated, remote attacker to invoke the ScheduleResultViewer to disclose every file on the system, including database tables...

CentOS 6 : ipmitool (CESA-2011:1814)

An updated ipmitool package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2011-1814

CVE-2011-1814 affects Google Chrome prior to version 12.0.742.91. OpenVAS entries map CVE-2011-1814 to multiple Jun 2011 Chrome vulnerabilities, including a read-from-uninitialized-pointer issue that can cause a denial of service. The associated OpenVAS data list Chrome variants on Windows/Linux ...

CVE-2011-1814

Removed by vendor...

Fedora Update for webkitgtk FEDORA-2011-0121

Check for the Version of webkitgtk OpenVAS Vulnerability Test Fedora Update for webkitgtk FEDORA-2011-0121 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mac OS X : Apple Safari < 5.0.3 / 4.1.3

The version of Apple Safari installed on the remote Mac OS X host is earlier than 5.0.3 / 4.1.3. As such, it is potentially affected by numerous issues in its WebKit component that could allow arbitrary code execution, session tracking, address bar spoofing, and other sorts of attacks. C Tenable...

FreeBSD Ports: webkit-gtk2

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora Update for webkitgtk FEDORA-2010-15957

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for webkitgtk FEDORA-2010-15982

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...