CVE-2007-6723

TorK before 0.22 on Windows and macOS installs Privoxy with a config (config.txt or config) containing insecure enable-remote-toggle and enable-edit-actions settings. This allows remote attackers to bypass intended access restrictions and modify configuration. The CVE documents state the vulnerab...

CVE-2007-6724

Vidalia bundle prior to 0.1.2.18 on Windows installs Privoxy with a configuration file (config.txt or config) that contains an insecure enable-remote-http-toggle setting. This allows remote attackers to bypass intended access restrictions and modify the Privoxy configuration. Affected component: ...

Cisco ASA5520 Web VPN Cross Site Scripting

Cisco ASA5520 Web VPN Host Header XSS - Description Cross-site scripting. - Product Cisco, ASA5520, IOS 7.2222 - PoC Modified request: POST /+webvpn+/index.html HTTP/1.1 Host: "'alert'BugsNotHugs' alert'BugsNotHugs'meta httpequiv="" content='"www.owasp...

Gentoo Security Advisory GLSA 200903-38 (Squid)

The remote host is missing updates announced in advisory GLSA 200903-38. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2007-4475

creationtimestamp| type| source ---|---|--- 2009-03-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32879 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16575 2018-05-29 15:50:33+00:00| seen|...

CVE-2007-6721

CVE-2007-6721 concerns the Legion of the Bouncy Castle Java Cryptography API (used in Crypto Provider Package) up to release 1.38; a Bleichenbacher vulnerability affects simple RSA CMS signatures without signed attributes. The exact impact is described as unknown in some sources, with remote atta...

CVE-2007-4803

creationtimestamp| type| source ---|---|--- 2009-03-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8312...

Adobe Collab.collectEmailInfo() Buffer Overflow

This module exploits a buffer overflow in Adobe Reader and Adobe Acrobat Professional 8.1.1. By creating a specially crafted pdf that a contains malformed Collab.collectEmailInfo call, an attacker may be able to execute arbitrary code. This module requires Metasploit:...

GLSA-200903-38 : Squid: Multiple Denial of Service vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200903-38 Squid: Multiple Denial of Service vulnerabilities The arrayShrink function in lib/Array.c can cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for...

openSUSE 10 Security Update : imp (imp-6101)

Version update to IMP 4.1.6 fixes a problem with validating HTTP requests that allowed attackers to delete emails CVE-2007-6018 and some cross-site-scripting issues CVE-2009-0930. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Ubuntu Update for linux-source-2.6.15/17/20 vulnerabilities USN-518-1

Ubuntu Update for Linux kernel vulnerabilities USN-518-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5181.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.15/17/20 vulnerabilities USN-518-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH...

Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-559-1

Ubuntu Update for Linux kernel vulnerabilities USN-559-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5591.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-559-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for libx11 vulnerability USN-453-1

Ubuntu Update for Linux kernel vulnerabilities USN-453-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4531.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libx11 vulnerability USN-453-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for samba regression USN-617-2

Ubuntu Update for Linux kernel vulnerabilities USN-617-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN6172.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for samba regression USN-617-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.ne...

Ubuntu Update for freetype, libxfont, xorg, xorg-server vulnerabilities USN-448-1

Ubuntu Update for Linux kernel vulnerabilities USN-448-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4481.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for freetype, libxfont, xorg, xorg-server vulnerabilities USN-448-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone...

Ubuntu Update for php5 vulnerabilities USN-424-1

Ubuntu Update for Linux kernel vulnerabilities USN-424-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4241.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for php5 vulnerabilities USN-424-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for php5 regression USN-549-2

Ubuntu Update for Linux kernel vulnerabilities USN-549-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN5492.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for php5 regression USN-549-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net...

Ubuntu Update for squid vulnerability USN-601-1

Ubuntu Update for Linux kernel vulnerabilities USN-601-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6011.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for squid vulnerability USN-601-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for mozilla-thunderbird vulnerabilities USN-431-1

Ubuntu Update for Linux kernel vulnerabilities USN-431-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4311.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mozilla-thunderbird vulnerabilities USN-431-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-588-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...