CVE-2009-1205

CVE-2009-1205 is a duplicate of CVE-2007-4475 (per its description). The connected records provide concrete details for CVE-2007-4475: a stack-based buffer overflow in SAP GUI’s EAI WebViewer3D ActiveX control (webviewer3d.dll) before SAP GUI 7.10 Patch Level 9. The vulnerability allows remote co...

SAP GUI Moniker Creation Multiple Vulnerabilities

The version of the SAP GUI Moniker Creation ActiveX control installed on the remote Windows host is reportedly affected by 3 stack-based buffer overflows involving various properties and methods in 'MonikerUtildll.dll'. If an attacker can trick a user on the affected host into viewing a specially...

CVE-2007-6724

Vidalia bundle before 0.1.2.18, when running on Windows, installs Privoxy with a configuration file config.txt or config that contains an insecure enable-remote-http-toggle setting, which allows remote attackers to bypass intended access restrictions and modify configuration...

CVE-2007-6723

TorK before 0.22 on Windows and macOS installs Privoxy with a config (config.txt or config) containing insecure enable-remote-toggle and enable-edit-actions settings. This allows remote attackers to bypass intended access restrictions and modify configuration. The CVE documents state the vulnerab...

CVE-2007-6722

CVE-2007-6722 affects Vidalia bundle prior to 0.1.2.18 on Windows and macOS, where Privoxy is installed with a config.txt/config containing insecure enable-remote-toggle and enable-edit-actions. This configuration flaw can allow remote attackers to bypass access restrictions and modify Privoxy se...

CVE-2007-6724

Vidalia bundle prior to 0.1.2.18 on Windows installs Privoxy with a configuration file (config.txt or config) that contains an insecure enable-remote-http-toggle setting. This allows remote attackers to bypass intended access restrictions and modify the Privoxy configuration. Affected component: ...

Cisco ASA5520 Web VPN Cross Site Scripting

Cisco ASA5520 Web VPN Host Header XSS - Description Cross-site scripting. - Product Cisco, ASA5520, IOS 7.2222 - PoC Modified request: POST /+webvpn+/index.html HTTP/1.1 Host: "'alert'BugsNotHugs' alert'BugsNotHugs'meta httpequiv="" content='"www.owasp...

Gentoo Security Advisory GLSA 200903-38 (Squid)

The remote host is missing updates announced in advisory GLSA 200903-38. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2007-4475

creationtimestamp| type| source ---|---|--- 2009-03-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32879 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16575 2018-05-29 15:50:33+00:00| seen|...

CVE-2007-6721

CVE-2007-6721 concerns the Legion of the Bouncy Castle Java Cryptography API (used in Crypto Provider Package) up to release 1.38; a Bleichenbacher vulnerability affects simple RSA CMS signatures without signed attributes. The exact impact is described as unknown in some sources, with remote atta...

CVE-2007-4803

creationtimestamp| type| source ---|---|--- 2009-03-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8312...

GLSA-200903-38 : Squid: Multiple Denial of Service vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200903-38 Squid: Multiple Denial of Service vulnerabilities The arrayShrink function in lib/Array.c can cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for...

openSUSE 10 Security Update : imp (imp-6101)

Version update to IMP 4.1.6 fixes a problem with validating HTTP requests that allowed attackers to delete emails CVE-2007-6018 and some cross-site-scripting issues CVE-2009-0930. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Ubuntu Update for libx11 vulnerability USN-453-1

Ubuntu Update for Linux kernel vulnerabilities USN-453-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4531.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libx11 vulnerability USN-453-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for php5 vulnerabilities USN-424-1

Ubuntu Update for Linux kernel vulnerabilities USN-424-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4241.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for php5 vulnerabilities USN-424-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for freetype, libxfont, xorg, xorg-server vulnerabilities USN-448-1

Ubuntu Update for Linux kernel vulnerabilities USN-448-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4481.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for freetype, libxfont, xorg, xorg-server vulnerabilities USN-448-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone...

Ubuntu Update for php5 regression USN-549-2

Ubuntu Update for Linux kernel vulnerabilities USN-549-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN5492.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for php5 regression USN-549-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net...

Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-559-1

Ubuntu Update for Linux kernel vulnerabilities USN-559-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5591.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-559-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for linux-source-2.6.15/17/20 vulnerabilities USN-518-1

Ubuntu Update for Linux kernel vulnerabilities USN-518-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5181.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-source-2.6.15/17/20 vulnerabilities USN-518-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH...

Ubuntu Update for poppler vulnerability USN-496-2

Ubuntu Update for Linux kernel vulnerabilities USN-496-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN4962.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for poppler vulnerability USN-496-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...