Lucene search
+L

183 matches found

CERT
CERT
added 2013/06/07 12:0 a.m.175 views

Parallels Plesk Panel phppath/php vulnerability

Overview Parallels Plesk Panel versions 9.0 - 9.2.3 on Linux platforms are vulnerable to remote code execution. Description Parallels Plesk Panel versions 9.0 - 9.2.3 on Linux platforms may be exploited by a combination of CVE-2012-1823 and the Plesk phppath script alias usage. There have been...

9.8CVSS10AI score0.99998EPSS
SaveExploits44References8
Tenable Nessus
Tenable Nessus
added 2013/05/15 12:0 a.m.39 views

Ubuntu 12.04 LTS / 12.10 / 13.04 : thunderbird vulnerabilities (USN-1823-1)

Multiple memory safety issues were discovered in Thunderbird. If the user were tricked into opening a specially crafted message with scripting enabled, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of t...

10CVSS7.9AI score0.10893EPSS
SaveExploits6References12
OpenVAS
OpenVAS
added 2013/04/05 12:0 a.m.46 views

Fedora Update for php FEDORA-2013-3927

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.99998EPSS
SaveExploits52References4
OpenVAS
OpenVAS
added 2013/04/05 12:0 a.m.63 views

Fedora Update for php FEDORA-2013-3927

Check for the Version of php OpenVAS Vulnerability Test Fedora Update for php FEDORA-2013-3927 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

7.5CVSS8.8AI score0.99998EPSS
SaveExploits52References2
CVE
CVE
added 2013/04/02 10:0 p.m.70 views

CVE-2013-1823

Affected software: Red Hat Subscription Asset Manager prior to version 1.2.1. Vulnerability: Cross-site scripting (XSS) in the Notifications form, where HTML in the username field could be injected. The root cause is improper escaping of HTML markup in the username input. Impact: Remote attackers...

4.3CVSS5.8AI score0.01903EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2013/01/25 12:0 a.m.45 views

SuSE 11.1 Security Update : PHP5 (SAT Patch Number 6252)

This update fixes several security issues in PHP5 : - A directory traversal bug has been fixed in PHP5. CVE-2012-1172 - A command injection was possible when PHP5 was operated in CGI mode using commandline options. This problem does not affect PHP5 in the normal apache module mode setup...

9.8CVSS8.6AI score0.99998EPSS
SaveExploits46References9
Tenable Nessus
Tenable Nessus
added 2013/01/25 12:0 a.m.54 views

SuSE 11.2 Security Update : PHP5 (SAT Patch Number 6251)

This update fixes several security issues in PHP5 : - A directory traversal bug has been fixed in PHP5. CVE-2012-1172 - A command injection was possible when PHP5 was operated in CGI mode using commandline options. This problem does not affect PHP5 in the normal Apache module mode setup...

9.8CVSS8.6AI score0.99998EPSS
SaveExploits46References8
Tenable Nessus
Tenable Nessus
added 2013/01/24 12:0 a.m.81 views

RHEL 5 / 6 : php (RHSA-2012:0568)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0568 advisory. - php: command line arguments injection when run in CGI mode VU520827 CVE-2012-1823 Note that Nessus has not tested for this issue but has instea...

9.8CVSS8.8AI score0.99998EPSS
SaveExploits44References5
Tenable Nessus
Tenable Nessus
added 2013/01/24 12:0 a.m.57 views

RHEL 5 : php53 (RHSA-2012:0569)

Updated php53 packages that fix one security issue are now available for Red Hat Enterprise Linux 5.6 Extended Update Support. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

9.8CVSS9.3AI score0.99998EPSS
SaveExploits44References3
seebug.org
seebug.org
added 2012/12/25 12:0 a.m.151 views

PHP-CGI Argument Injection Remote Code Execution

No description provided by source. !/usr/bin/python import requests import sys print """ CVE-2012-1823 PHP-CGI Arguement Injection Remote Code Execution This exploit abuses an arguement injection in the PHP-CGI wrapper to execute code as the PHP user/webserver user. Feel free to give me abuse abo...

7.5CVSS0.9AI score0.99998EPSS
SaveExploits44
Packet Storm
Packet Storm
added 2012/12/24 12:0 a.m.168 views

PHP-CGI Argument Injection Remote Code Execution

!/usr/bin/python import requests import sys print """ CVE-2012-1823 PHP-CGI Arguement Injection Remote Code Execution This exploit abuses an arguement injection in the PHP-CGI wrapper to execute code as the PHP user/webserver user. Feel free to give me abuse about this " sys.exit0 target =...

7.5CVSS0.5AI score0.99998EPSS
SaveExploits44
OpenVAS
OpenVAS
added 2012/12/13 12:0 a.m.27 views

openSUSE: Security Advisory for update (openSUSE-SU-2012:0590-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9AI score0.99998EPSS
SaveExploits44References3
OpenVAS
OpenVAS
added 2012/09/26 12:0 a.m.52 views

Gentoo Security Advisory GLSA 201209-03 (php)

The remote host is missing updates announced in advisory GLSA 201209-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

10CVSS0.6AI score0.99998EPSS
SaveExploits80
OpenVAS
OpenVAS
added 2012/09/25 12:0 a.m.45 views

Mac OS X v10.6.8 Multiple Vulnerabilities (2012-004)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-004. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

10CVSS7.4AI score0.99998EPSS
SaveExploits85References27
Tenable Nessus
Tenable Nessus
added 2012/09/20 12:0 a.m.71 views

Mac OS X 10.7.x < 10.7.5 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.5. The newer version contains multiple security-related fixes for the following components : - Apache - BIND - CoreText - Data Security - ImageIO - Installer - International Components for Unicode - Kernel - Mail - PHP ...

10CVSS7.7AI score0.99998EPSS
SaveExploits87References35
Tenable Nessus
Tenable Nessus
added 2012/09/20 12:0 a.m.257 views

Mac OS X Multiple Vulnerabilities (Security Update 2012-004) (BEAST)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-004 applied. This update contains multiple security-related fixes for the following components : - Apache - Data Security - DirectoryService - ImageIO - International Components for Unicode - Mail - PHP ...

10CVSS7.7AI score0.99998EPSS
SaveExploits85References31
OpenVAS
OpenVAS
added 2012/08/30 12:0 a.m.41 views

Fedora Update for maniadrive FEDORA-2012-7628

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

9.8CVSS7.6AI score0.99998EPSS
SaveExploits50References4
OpenVAS
OpenVAS
added 2012/08/30 12:0 a.m.80 views

Fedora Update for php FEDORA-2012-7628

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

9.8CVSS7.6AI score0.99998EPSS
SaveExploits50References4
OpenVAS
OpenVAS
added 2012/08/30 12:0 a.m.39 views

Fedora Update for php FEDORA-2012-10936

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

10CVSS7.6AI score0.99998EPSS
SaveExploits53References4
OpenVAS
OpenVAS
added 2012/08/30 12:0 a.m.59 views

Fedora Update for php FEDORA-2012-10936

Check for the Version of php OpenVAS Vulnerability Test Fedora Update for php FEDORA-2012-10936 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

10CVSS0.99998EPSS
SaveExploits53References2
Rows per page
Query Builder