20519 matches found
Oracle Database Server EMCTL Component Unspecified Vulnerability-02
Oracle Database Server is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Oracle Database Server Content Management Component Unspecified Vulnerability-01
Oracle Database Server is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Code injection
GEAR Software CD DVD Filter driver aka GEARAspiWDM.sys, as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton Ghost, allows local users to cause a denial of service system crash via unspecified vectors...
CVE-2011-3477
GEAR Software CD DVD Filter driver aka GEARAspiWDM.sys, as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton Ghost, allows local users to cause a denial of service system crash via unspecified vectors...
CVE-2011-3477
GEAR Software CD DVD Filter driver aka GEARAspiWDM.sys, as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton Ghost, allows local users to cause a denial of service system crash via unspecified vectors...
CVE-2011-3477
CVE-2011-3477 concerns the GEAR Software CD/DVD Filter driver (GEARAspiWDM.sys) as used in several Symantec products (Backup Exec System Recovery 8.5 and BESR 2010, System Recovery 2011, Norton 360, Norton Ghost). According to the linked records, the vulnerability enables a local attacker to caus...
Sql injection
SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber action, a related issue to CVE-2011-5099...
CVE-2011-4973
Authentication bypass vulnerability in modnss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password...
CVE-2011-4973
Authentication bypass vulnerability in modnss 1.0.8 allows remote attackers to assume the identity of a valid user by using their certificate and entering 'password' as the password...
CVE-2011-4889
CVE-2011-4889 affects IBM WebSphere Application Server via the Virtual Member Manager. The root cause is aPassword update flaw in the Tivoli Directory Server configuration caused by the javax.naming.directory.AttributeInUseException, which might allow a remote attacker to gain access using an old...
CVE-2011-4069
html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and consequently bypass authentication via a crafted username...
CVE-2011-4069
PacketFence is affected through the web UI file html/admin/login.php. The vulnerability allows LDAP injection via a crafted username, enabling bypass of authentication in versions before 3.0.2. The issue is documented across multiple sources (NVD/CNVD) with a consistent description: an LDAP injec...
CVE-2011-4068
PacketFence before 3.0.2 is affected by an authentication bypass in the check_password function (html/admin/login.php). An unauthenticated remote attacker can bypass login with an empty password, gaining access to the system. Multiple sources reference PacketFence
CVE-2011-2902
zxpdf in xpdf before 3.02-19 as packaged in Debian unstable and 3.02-12+squeeze1 as packaged in Debian squeeze deletes temporary files insecurely, which allows remote attackers to delete arbitrary files via a crafted .pdf.gz file name...
CVE-2011-2902
zxpdf in xpdf before 3.02-19 as packaged in Debian unstable and 3.02-12+squeeze1 as packaged in Debian squeeze deletes temporary files insecurely, which allows remote attackers to delete arbitrary files via a crafted .pdf.gz file name...
CVE-2011-2902
zxpdf in xpdf before 3.02-19 (Debian unstable) and 3.02-12+squeeze1 (Debian squeeze) insecurely deletes temporary files, enabling remote attackers to delete arbitrary files via a crafted .pdf.gz filename. The vulnerability is a file-deletion flaw within zxpdf, not a memory corruption or code-exec...
WordPress < 3.1.3 Multiple Vulnerabilities
According to its self-reported version number, the WordPress application running on the remote web server is prior to 3.1.3. It is, therefore, affected by multiple unspecified vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's...
CVE-2011-4955
The CVE-2011-4955 entries in Connected documents confirm a cross-site scripting (XSS) vulnerability in the WordPress bSuite plugin prior to version 5 alpha 3. The flaw resides in ui_stats.php, exploitable by supplying arbitrary script or HTML via the (1) s or (2) p parameters to index.php, enabli...
Oracle Mysql Security Updates (jan2012-366304) 01 - Linux
Oracle MySQL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...