DotNetNuke CMS Cross Site Scripting

PR10-19 DotNetNuke CMS XSS Advisory publicly released: Friday, 3 December 2010 Vulnerability found: Saturday, 30 October 2010 Vendor informed: Monday, 1 November 2010 Severity level: Low/Medium Credits Richard Brain of ProCheckUp Ltd www.procheckup.com Description DotNetNuke is a Content Manageme...

CVE-2010-4005

The 1 tomboy and 2 tomboy-panel scripts in GNOME Tomboy 1.5.2 and earlier place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: vector 1 exists because of an incorrect fix for...

SuSE 11 Security Update : compiz (SAT Patch Number 2005)

The expo plugin in Compiz Fusion allowed local users with physical access to bypass the screen-saver by just dragging it aside. CVE-2008-6514: CVSS v2 Base Score: 6.2. This has been fixed. %NASLMINLEVEL 70300 if !definedfunc"nasllevel" || nasllevel = 70000 && nasllevel = 70200 && nasllevel = 8000...

Sql injection

SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033...

CA BrightStor ARCserve License Service - 'GCR NETWORK' Remote Buffer Overflow (Metasploit)

$Id: licensegcr.rb 10892 2010-11-03 22:09:44Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2005-1415

creationtimestamp| type| source ---|---|--- 2010-10-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16703 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/globalscapeftpinput.rb 2025-02-06 03:13:38+00:00|...

CVE-2005-2373

creationtimestamp| type| source ---|---|--- 2010-10-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16729 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/slimftpdlistconcat.rb 2025-02-06 03:13:38+00:00| see...

CVE-2005-1323

creationtimestamp| type| source ---|---|--- 2010-10-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16735 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/nettermnetftpduser.rb 2025-02-06 03:13:38+00:00| see...

CVE-2005-0308

creationtimestamp| type| source ---|---|--- 2010-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16645 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ursoftw32dasm.rb 2025-02-06 03:13:38+00:00|...

Linksys WRT54 Access Point - 'apply.cgi' Remote Buffer Overflow (Metasploit)

$Id: linksysapplycgi.rb 10457 2010-09-24 16:55:38Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

CVE-2005-2799

creationtimestamp| type| source ---|---|--- 2010-09-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16854 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linksyswrt54glapplyexec.rb 2018-05-29 15:50:33+00:00|...

Mandriva Update for rpm MDVSA-2010:180 (rpm)

Check for the Version of rpm OpenVAS Vulnerability Test Mandriva Update for rpm MDVSA-2010:180 rpm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

CVE-2005-4734

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16358 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/isapi/rsawebagentredirect.rb 2025-02-06 03:13:38+00:00|...

Mozilla Suite/Firefox - InstallVersion->compareTo() Code Execution (Metasploit)

$Id: mozillacompareto.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Hummingbird Connectivity 10 SP5 - LPD Buffer Overflow (Metasploit)

$Id: hummingbirdexceed.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Lyris ListManager - MSDE Weak sa Password (Metasploit)

$Id: lyrislistmanagerweakpass.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2005-4145

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16397 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/mssql/lyrislistmanagerweakpass.rb 2025-02-06...

CVE-2005-2265

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16306 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/mozillacompareto.rb 2025-02-06 03:13:38+00:00| see...

CVE-2005-0277

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16730 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/3cdaemonftpuser.rb 2025-02-06 03:13:38+00:00| seen|...

CVE-2005-1815

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16337 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/lpd/hummingbirdexceed.rb 2025-02-06 03:13:38+00:00| seen...