85 matches found
VideoWhisper Live Streaming Integration 4.27.3 XSS / Shell Upload / Traversal
Advisory ID: HTB23199 Product: VideoWhisper Live Streaming Integration Vendor: VideoWhisper Vulnerable Versions: 4.27.3 and probably prior Tested Version: 4.27.3 Advisory Publication: February 6, 2014 without technical details Vendor Notification: February 6, 2014 Vendor Patch: February 7, 2014...
Ubuntu Update for icedtea-web USN-1907-2
Check for the Version of icedtea-web OpenVAS Vulnerability Test $Id: gbubuntuUSN19072.nasl 8483 2018-01-22 06:58:04Z teissa $ Ubuntu Update for icedtea-web USN-1907-2 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
Ubuntu Update for openjdk-7 USN-1907-1
Check for the Version of openjdk-7 OpenVAS Vulnerability Test $Id: gbubuntuUSN19071.nasl 8542 2018-01-26 06:57:28Z teissa $ Ubuntu Update for openjdk-7 USN-1907-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
SA-CONTRIB-2013-038 - Commons Groups - Access bypass & Privilege escalation
The Drupal Commons distribution is a tool for building social, group-based collaboration communities. The Commons Groups module is used by the distribution to provide specific Organic Groups customizations. Versions 3.0 and earlier of the Commons Groups module is vulnerable to an access bypass an...
ISC BIND RRSIG Query Denial of Service (CVE-2011-1907)
A denial of service vulnerability has been reported in ISC BIND...
CVE-2012-1907
CVE-2012-1907 affects the PrivaWall Antivirus scanner engine (versions ≤ 5.6). The root cause is the engine’s failure to recognize Office XML/Open Document XML format, enabling a crafted file embedded in a WordML document to bypass malware detection. Impact: potential to evade scanning and malwar...
ISC BIND 9 RRSIG Query类型远程拒绝服务漏洞
BUGTRAQ ID: 47734 CVE ID: CVE-2011-1907 BIND是一个应用非常广泛的DNS协议的实现，由ISC负责维护，具体的开发由Nominum公司完成。 ISC BIND在实现上存在远程拒绝服务漏洞，由于未能正确处理某些记录类型，攻击者可利用此漏洞造成应用程序进程崩溃，拒绝服务合法用户。 此问题仅影响将配置的RPZ功能用于RRset替换的BIND用户。BIND...
CVE-2011-1907
ISC BIND 9.8.x before 9.8.0-P1, when Response Policy Zones RPZ RRset replacement is enabled, allows remote attackers to cause a denial of service assertion failure and daemon exit via an RRSIG query...
CVE-2011-1907
ISC BIND 9.x is affected by a DoS vulnerability (CVE-2011-1907) when RPZ RRset replacement is enabled. The issue occurs in the RRSIG query path, causing an assertion failure and daemon exit. Affected versions are BIND 9.x up to but not including 9.8.0-P1 (notably 9.8.x before 9.8.0-P1). The root ...
Remote DoS Flaw in BIND Fixed in New Version !
The Internet Systems Consortium released an advisory today informing BIND users that certain types of queries to name servers can cause the servers to crash and create a denial-of-service condition. This remotely exploitable bug only affects BIND users with the Response Policy Zones RPZ feature...
Security Advisory: DNS BIND Security Advisory: RRSIG Queries Can Trigger Server Crash When Using Response Policy Zones
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Note: https://www.isc.org/CVE-2011-1907 is the authoritative source for this Security Advisory. Please check the source for any updates. Summary: When a name server is configured with a response policy zone RPZ, queries for type RRSIG can trigger a...
CVE-2010-1907
The CVE-2010-1907 entry concerns the SdcUser.TgConCtl ActiveX control in tgctlcm.dll used by Consona Live Assistance, Dynamic Agent, and Subscriber Assistance. The vulnerability allows remote attackers to discover the client user’s username and deduce a path to a user directory via GetUserName. I...
Debian DSA-1907-1 : kvm - several vulnerabilities
Several vulnerabilities have been discovered in kvm, a full virtualization system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-5714 Chris Webb discovered an off-by-one bug limiting KVM's VNC passwords to 7 characters. This flaw might make it...
Debian Security Advisory DSA 1907-1 (kvm)
The remote host is missing an update to kvm announced via advisory DSA 1907-1. OpenVAS Vulnerability Test $Id: deb19071.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1907-1 kvm Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Debian: Security Advisory (DSA-1907-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-1907
Claroline 1.8.11 is affected by a Cross-Site Scripting (XSS) vulnerability in claroline/linker/notfound.php, exploitable via the Referer HTTP header. The issue allows remote attackers to inject arbitrary web script or HTML. No explicit root cause details beyond the XSS description are provided, a...
CVE-2009-1907
creationtimestamp| type| source ---|---|--- 2009-05-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32991...
CVE-2008-1907
Multiple SQL injection vulnerabilities in functions/displaypage.func.php in cpCommerce 1.1.0 allow remote attackers to execute arbitrary SQL commands via the 1 idproduct, 2 idmanufacturer, and 3 idcategory parameters to unspecified components. NOTE: this probably overlaps CVE-2007-2959 and...
CVE-2008-1907
CVE-2008-1907 describes multiple SQL injection vulnerabilities in cpCommerce 1.1.0, specifically in functions/display_page.func.php. The attacker can remotely execute arbitrary SQL commands via the (1) id_product, (2) id_manufacturer, and (3) id_category parameters to unspecified components, indi...