10524 matches found
Vulnerable Microsoft VC++ 2005 RTM runtime libraries installed with "Microsoft Security Essentials" (and numerous other Microsoft products)
Hi @ll, this is part 2 of "Defense in depth -- the Microsoft way", see http://seclists.org/fulldisclosure/2013/May/107 On Windows NT 5.x the current "Microsoft Security Essentials" v4.2 available from http://www.microsoft.com/securityessentials, and offered as optional update KB2804527 via...
http-phpmyadmin-dir-traversal NSE Script
Exploits a directory traversal vulnerability in phpMyAdmin 2.6.4-pl1 and possibly other versions to retrieve remote files on the web server. Reference: Script Arguments http-phpmyadmin-dir-traversal.dir Basepath to the services page. Default: /phpMyAdmin-2.6.4-pl1/...
Squid Proxy Oversized Reply Header Handling - Improved Performance (CVE-2005-0241)
A denial of service vulnerability has been reported in Squid Web Proxy Cache server...
Fedora 19 : libXt-1.1.3-4.20130524git1f4802b74.fc19 (2013-9098)
Update to latest git to fix the following CVEs: CVE-2013-2002, CVE-2013-2005 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
[SECURITY] [DSA 2680-1] libxt security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2680-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...
Microsoft Internet Explorer JPEG Rendering Buffer Overflow (MS05-038; CVE-2005-1988) - High Confidence
A buffer overflow vulnerability has been reported in the Microsoft Internet Explorer JPEG image rendering component. The vulnerability is due to the improper validation of user specified data in JPEG image files. A remote attacker can exploit this issue by enticing the target user to open a...
Snort Back Orifice Pre-Processor Buffer Overflow - Improved Performance (CVE-2005-3252)
A buffer overflow exists in Snort product. The flaw is caused by an insufficient boundary checks in the handling of Back Orifice messages. An attacker may leverage this vulnerability to execute arbitrary code in the security context of the affected product, normally root. In case of an attack whe...
CVE-2005-0575
creationtimestamp| type| source ---|---|--- 2013-03-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24897 2013-04-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24950...
Internet Explorer PNG Image Rendering Memory Corruption - improved performance (MS05-025; CVE-2005-1211; CVE-2006-0025)
Portable Network Graphics PNG is a popular image file format. Specially crafted PNG files may be used to create a DoS condition and in some cases, arbitrary code execution...
AIX 5.2 TL 7 / 5.2 TL 8 : devices.chrp.base.rte (U477521)
The remote host is missing AIX PTF U477521, which is related to the security of the package devices.chrp.base.rte. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U477521. The text itself is copyright...
Stuxnet 0.5 : Symantec study reveals Stuxnet was dated 2005
Today social media are spreading a shocking news, authors of Stuxnet virus that hit Iranian nuclear program in 2010 according a new research proposed by Symantec security company started in 2005 and contrary to successive instance of the malware he was designed to manipulate the nuclear facility'...
Sun Java JRE / Web Start Java Plug-in Untrusted Applet Privilege Escalation (Unix)
The remote host is using an unmanaged version of Sun Java Runtime Environment that has vulnerabilities in its Java Runtime Plug-in, a web browser add-on used to display Java applets. The JRE Plug-in security can be bypassed by tricking a user into viewing a maliciously crafted web page...
Postfix IPv6 Relaying Security Issue (CVE-2005-0337)
There is a vulnerability in the way Postfix handles the relaying of e-mail messages A successful attack allows an attacker to use the target Postfix as an open relay to MX hosts with IPv6addresses...
RHEL 3 / 4 : Adobe Acrobat Reader (RHSA-2005:750)
Updated acroread packages that fix a security issue are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Adobe Acrobat Reader allows users to view and print documents in portable document format PDF. A buffer overflow bug has...
RHEL 3 / 4 : RealPlayer (RHSA-2005:762)
An updated RealPlayer package that fixes a format string bug is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. RealPlayer is a media player that provides media playback locally and via streaming. A format string bug was discover...
RHEL 3 / 4 : flash-plugin (RHSA-2005:835)
Updated Macromedia Flash Player packages that fix a security issue are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a Mozilla-compatible Macromedia Flash Player browser plug-in. A buffer...
VERITAS Backup Exec Remote Agent Windows Servers BOF Vulnerability
VERITAS Backup Exec Remote Agent for Windows Servers is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability (2754849)
This host has important security update missing according to Microsoft Bulletin MS12-070. OpenVAS Vulnerability Test $Id: secpodms12-070.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability 2754849 Authors: Rachana Shetty Copyright: Copyright...
Microsoft Windows - 'AfdJoinLeaf' Local Privilege Escalation (MS11-080) (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...
