CVE-2009-5102

CVE-2009-5102 affects ATCOM Netvolution 1.0 ASP. The vulnerability is in default.asp and allows SQL injection via the bpe_nid parameter, enabling remote attackers to execute arbitrary SQL commands. The connected documents provide the same description across sources; no exploitation details or pat...

Ubuntu Update for open-iscsi USN-1235-1

Ubuntu Update for Linux kernel vulnerabilities USN-1235-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12351.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for open-iscsi USN-1235-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net...

Ubuntu Update for linux USN-1236-1

Ubuntu Update for Linux kernel vulnerabilities USN-1236-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12361.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux USN-1236-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

CentOS Update for kernel CESA-2011:1386 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

USN-1236-1: Linux kernel vulnerabilities

It was discovered that the Auerswald usb driver incorrectly handled lengths of the USB string descriptors. A local attacker with physical access could insert a specially crafted USB device and gain root privileges. CVE-2009-4067 It was discovered that the Stream Control Transmission Protocol SCTP...

HP Power Manager - 'formExportDataLogs' Remote Buffer Overflow (Metasploit)

$Id: hppowermanagerfilename.rb 14016 2011-10-20 17:40:21Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2009-3999

creationtimestamp| type| source ---|---|--- 2011-10-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18015 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hppowermanagerfilename.rb 2025-02-06 03:13:39+00:00...

Mac OS X v10.6.8 Multiple Vulnerabilities (2011-006)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2011-006. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Internet Explorer SetExpandedClipRect Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

FreeBSD : tptest -- pwd Remote Stack Buffer Overflow (5486669e-ea9f-11de-bd9c-00215c6a37bb)

SecurityFocus reports : TPTEST is prone to a remote stack-based buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. %NASLMINLEVEL 70300 C...

CVE-2011-2009

CVE-2011-2009 describes an Untrusted search path vulnerability in Windows Media Center that allows local users to gain privileges via a Trojan horse DLL loaded from the current working directory. Affected products: Windows Vista SP2, Windows 7 (Gold and SP1), and Windows Media Center TV Pack for ...

MS11-082: Vulnerabilities in Host Integration Server Could Allow Denial of Service (2607670)

The version of Host Integration Server HIS installed on the remote host has multiple denial of service vulnerabilities. A remote, unauthenticated attacker could exploit these issues to cause HIS services to become unresponsive. C Tenable Network Security, Inc. include"compat.inc"; if description...

Cross site scripting

Cross-site scripting XSS vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter. NOTE: the from parameter is already covered by CVE-2009-4562...

Bloggeruniverse 'editcomments.php' SQL Injection Vulnerability

Bloggeruniverse is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2310-1 : linux-2.6 - privilege escalation/denial of service/information leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leak. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-4067 Rafael Dominguez Vega of MWR InfoSecurity reported ...

[SECURITY] [DSA 2310-1] linux-2.6 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2310-1 [email protected] http://www.debian.org/security/ dann frazier September 22, 2011 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-2301-2)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-5100

CVE-2009-5100 affects Pentaho BI Server 1.7.0.1062 and earlier, where web pages using a password field do not set autocomplete off. This may enable physically proximate attackers to obtain the password. The issue is described as a failure to disable autocomplete in login/password contexts, with a...

CVE-2009-5099

Cross-site scripting XSS vulnerability in ViewAction in Pentaho BI Server 1.7.0.1062 and earlier allows remote attackers to inject arbitrary web script or HTML via the outputType parameter...

CVE-2009-5099

The Connected documents confirm CVE-2009-5099 affects Pentaho BI Server (1.7.0.1062 and earlier) via a Cross‑Site Scripting vulnerability in the ViewAction component, exploitable through the outputType parameter. Root cause: insufficient input validation/sanitization of the outputType parameter a...