Debian DSA-1883-1 : nagios2 - missing input sanitising

Several vulnerabilities have been found in nagios2, a host/service/network monitoring and management system. The Common Vulnerabilities and Exposures project identifies the following problems : Several cross-site scripting issues via several parameters were discovered in the CGI scripts, allowing...

Official Portal 2007 Cross Site Scripting / SQL Injection

Securitylab.ir Application Info: Name: Official Portal 2007 Vulnerability Info: Type: Sql Injection/XSS Risk: Medium Dork: "Official Portal 2007" Vulnerability: ======================= Sql Injection =======================...

Official Portal 2007 Sql Injection/XSS Vulnerability

Exploit for unknown platform in category web applications ==================================================== Official Portal 2007 Sql Injection/XSS Vulnerability ==================================================== Application Info: Name: Official Portal 2007 Vulnerability Info: Type: Sql...

Adobe Multiple Products PDF JavaScript Method Buffer Overflow (CVE-2007-5659)

Adobe develop products for creating, distributing, and viewing Portable Document Format PDF documents. Adobe Reader is a viewer application that allows for reading and printing of PDF documents. Adobe Acrobat provides PDF authoring functionalities in addition to those by viewer. There exists a...

Microsoft Excel File Named Graph Record Parsing Stack Overflow (MS07-023; CVE-2007-0215)

Microsoft Excel is a popular spreadsheet application that is usually released as part of the Microsoft Office suite. The application can create complex spreadsheets with multiple workbooks, formulae, and various data sources. The proprietary file format used for storing Microsoft Excel documents ...

hplip hpssd.py From Address Arbitrary Command Execution

$Id: hpliphpssdexec.rb 8511 2010-02-16 00:27:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Apple QuickTime MOV File JVTCompEncodeFrame Heap Overflow (CVE-2007-2295)

Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying picture files as well as numerous audio/video formats. One of the supported video format is the ITU-T H.264 standard, also known as MPEG-4 Part 10 or Advanced Video...

RKD Software BarCodeAx.dll v4.9 ActiveX Remote Stack Buffer Overflow

$Id: barcodeax49.rb 8466 2010-02-12 18:06:49Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

CA BrightStor ARCserve Backup caloggerd.exe Null Hostname Denial of Service (CVE-2007-2772)

A Null dereference vulnerability exists in the CA BrightStor ARCserve Backup caloggerd process. The vulnerability is due to insufficient data validation when parsing strings in received RPC requests. A remote unauthenticated attacker may leverage this vulnerability by sending a specially crafted...

ACD Systems ACDSee Products XPM File Handling Buffer Overflow (CVE-2007-2193)

ACDSee is an image viewer software for Windows developed by ACD Systems. Besides the usual thumbnail viewing of folders and file type conversion, key features of ACDSee include slideshow presentations, CD/DVD burning, HTML gallery creation, image folder syncing and editing/indexing of image...

PHPCMS 2007 / 2008 跨站脚本漏洞(xss vulnerability)

1、在phpcms2007中，sendmail.php未对传入的mailto, title等参数过滤，导致xss的产生。 不用上源码了，明眼人一看就明白。 Demo：http://www.cnegg.net/mail/sendmail.php?mailto=asdfa"scriptalert/CnCxzSec//script 考虑到PHPCMS2007的用户交互性，该鸡肋XSS可盗取COOKIES，有一定危害。 2、在phpcms2008中sendmail.php对传入变量有一定过滤，可是在magicquote=off的情况下，仍可利用...

Null pointer dereference

The ipv6hopjumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.32.4, when network namespaces are enabled, allows remote attackers to cause a denial of service NULL pointer dereference via an invalid IPv6 jumbogram, a related issue to CVE-2007-4567...

Mercury Mail Transport System SMTP AUTH CRAM-MD5 Buffer Overflow (CVE-2007-4440)

Mercury Mail Transport System is an email server suite for the Microsoft Windows platform and Novell NetWare file servers. The product supports various popular mail transfer protocols such as SMTP, POP3 and IMAP. The components of the Mercury Mail product are implemented with individual Dynamic...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/adminnewsbot.php in Drunken:Golem Gaming Portal 0.5.1 alpha 2 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter, a different vector than CVE-2007-0572...

RedHat Update for kernel RHSA-2010:0019-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2010:0019-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Solaris 10 (x86) : 124445-01

SunOS 5.10x86: mountd patch. Date this patch was last updated by Sun : Nov/03/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2013/02/18. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Solaris 10 (sparc) : 124444-01

SunOS 5.10: mountd patch. Date this patch was last updated by Sun : Nov/03/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2013/04/30. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Solaris 10 (sparc) : 120036-07

SunOS 5.10: libldap patch. Date this patch was last updated by Sun : Aug/31/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Adobe Reader Plugin Malformed URL Cross-Site Scripting (APSB07-01; CVE-2007-0045; CVE-2007-0048)

Multiple cross-site scripting XSS vulnerabilities have been discovered in Adobe Reader and Acrobat Plugin when used with various Web browsers. The vulnerabilities are due to an error in the Adobe Acrobat Reader Plugin...

RHEL 3 / 4 : tomcat in Satellite Server (RHSA-2007:1069)

Updated tomcat packages that fix multiple security issues are now available for Red Hat Network Satellite Server. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tomcat is a servlet container for Java Servlet and JavaServer Pages technologies. ...