PointDev IDEAL Migration - Buffer Overflow (Metasploit)

$Id: idealmigrationipj.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Microsoft Excel - Malformed FEATHEADER Record (MS09-067) (Metasploit)

$Id: ms09067excelfeatheader.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fedora 14 : xorg-x11-server-1.9.0-9.fc14 (2010-14754)

Refuse to believe tiny or negative sizes from PanelID. 632805 - Call mktemp correctly 632879 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Nmap NSE: SMB Check Vulnerabilities

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-5003

CVE-2009-5003 is an SQL injection in the e-soft24 Banner Exchange Script 1.0. The vulnerability is in click.php, exploitable via the targetid parameter to allow remote execution of arbitrary SQL commands. Multiple sources (NVD, CVE lists, PRION) corroborate this description. The reports do not pr...

Fedora Update for samba FEDORA-2010-14678

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for kdegraphics MDVSA-2010:182 (kdegraphics)

Check for the Version of kdegraphics OpenVAS Vulnerability Test Mandriva Update for kdegraphics MDVSA-2010:182 kdegraphics Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

USN-990-2: Apache vulnerability

USN-860-1 introduced a partial workaround to Apache that disabled client initiated TLS renegotiation in order to mitigate CVE-2009-3555. USN-990-1 introduced the new RFC5746 renegotiation extension in openssl, and completely resolves the issue. After updating openssl, an Apache server will allow...

CVE-2009-5001

The Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 4.0.2.x before 4.0.2.2-P8AE-FP002 grants a document's Creator-Owner full control over an annotation object, even if the default instance security has changed, which might allow remote authenticated users to bypass intended...

CVE-2009-5000

Multiple cross-site scripting XSS vulnerabilities in the Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 4.0.2.x before 4.0.2.3-P8AE-FP003 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to .jsp pages...

CVE-2009-5002

The CVE reports a flaw in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x prior to 4.0.2.1-P8AE-FP001 where the Get Content Failure Audit events are not recorded. This could allow remote attackers to attempt content access without detection. Affected component: Workplace (WP) in P8AE. Root cause...

CVE-2009-5001

CVE-2009-5001 affects the IBM FileNet P8 Application Engine (P8AE) 4.0.2.x prior to 4.0.2.2-P8AE-FP002. The vulnerability is that the document's Creator-Owner gains full control over an annotation object, even if default security settings have changed, potentially allowing remote authenticated us...

CVE-2009-4998

The vulnerability described as CVE-2009-4998 affects the Workplace (WP) component of IBM FileNet P8 Application Engine (P8AE) . It applies to versions 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007 , in certain FileTracker configurations. The issue is that the component does not app...

CVE-2009-4999

IBM FileNet P8 Application Engine (P8AE) 3.5.1 is vulnerable to a cross-site scripting (XSS) flaw in the Workplace component (aka WP). The issue allows remote attackers to inject arbitrary web script or HTML via the Name field and affects versions before 3.5.1-016. The vulnerability is documented...

CVE-2009-5000

CVE-2009-5000 refers to multiple cross-site scripting (XSS) vulnerabilities in the Workplace component of IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.3-P8AE-FP003. The underlying issue is XSS in .jsp pages triggered via unspecified parameters, enabling remote attackers to inject...

CVE-2009-4999

Cross-site scripting XSS vulnerability in the Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 3.5.1 before 3.5.1-016 allows remote attackers to inject arbitrary web script or HTML via the Name field...

Adobe - FlateDecode Stream Predictor 02 Integer Overflow (Metasploit) (1)

$Id: adobeflatedecodepredictor02.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

VideoLAN VLC Client (Windows x86) - 'smb://' URI Buffer Overflow (Metasploit)

$Id: vlcsmburi.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2009-4850

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16570 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/awingsoftwinds3dsceneurl.rb 2025-02-06...

CVE-2009-3869

creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16298 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/javasetdifficmbof.rb 2025-02-06 03:13:39+00:00|...