Cisco DPC2100 - Denial of Service

Exploit Title: Cisco DPC2100 Denial of Service Date: 09/01/2010 Author: Daniel Smith Software Link: http://www.cisco.com/ Version: HW:2.1/SW:v2.0.2r1256-060303 Tested on: OSX 10.6/Win7 CVE: CVE-2011-1613 ======================================================= Information...

Gentoo Security Advisory GLSA 201209-03 (php)

The remote host is missing updates announced in advisory GLSA 201209-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201209-05 (libreoffice)

The remote host is missing updates announced in advisory GLSA 201209-05. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2011-4623

CVE-2011-4623 — rsyslog imfile integer overflow : The rsyslog daemon’s imfile module is affected by an overflow in rsCStrExtendBuf (runtime/stringbuf.c). This occurs in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4, allowing a local user to trigger a heap-based buffer overflow ...

CVE-2012-0209

Horde 3.3.12, Horde Groupware 1.2.10, and Horde Groupware Webmail Edition 1.2.10, as distributed by FTP between November 2011 and February 2012, contains an externally introduced modification Trojan Horse in templates/javascript/opencalendar.js, which allows remote attackers to execute arbitrary...

SonicWall Viewpoint 'scheduleID' Parameter SQL Injection Vulnerability

This host is running SonicWall Viewpoint and is prone to sql injection vulnerability. OpenVAS Vulnerability Test $Id: gbsonicwallviewpointscheduleidsqlinjvuln.nasl 5988 2017-04-20 09:02:29Z teissa $ SonicWall Viewpoint 'scheduleID' Parameter SQL Injection Vulnerability Authors: Rachana Shetty...

SonicWall Viewpoint <= 6.0 SP2 SQLi Vulnerability - Active Check

SonicWall Viewpoint is prone to an SQL injection SQLi vulnerability. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Mac OS X v10.6.8 Multiple Vulnerabilities (2012-004)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-004. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

APPLE-SA-2012-09-19-3 Safari 6.0.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-09-19-3 Safari 6.0.1 Safari 6.0.1 is now available and addresses the following: Safari Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8 and v10.8.1 Impact: Opening a maliciously crafted downloaded HTML...

Apple iOS < 6.0 Multiple Vulnerabilities

Binary data appleios60check.nbin...

CVE-2011-5191

Cross-site scripting XSS vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5192...

CVE-2011-5192

Cross-site scripting XSS vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5191...

CVE-2011-5195

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference Systems 2.3.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload a PHP file...

CVE-2011-5196

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files...

CVE-2011-5198

CVE-2011-5198 is a confirmed SQL injection in the Neturf eCommerce Shopping Cart, targeting the search.php endpoint. The vulnerability allows remote attackers to append arbitrary SQL via the SearchFor parameter (no authentication required, network access). CVSS v2 metrics indicate a base score of...

CVE-2011-5194

CVE-2011-5194 is an XSS vulnerability in the WordPress Whois Search plugin (vendors/samswhois/samswhois.inc.php) that affects versions before 1.4.2.3. The flaw allows remote attackers to inject arbitrary scripts via the domain parameter to index.php. No exploitation details are provided in the co...

CVE-2011-5196

The CVE-2011-5196 entry concerns Public Knowledge Project Open Journal Systems (OJS) prior to version 2.3.6, with a CSRF flaw in the index/manager/fileUpload path. The underlying issue allows an attacker to hijack an administrator’s session and perform requests that upload PHP files. The document...

CVE-2011-5195

CVE-2011-5195 describes a CSRF vulnerability in the Open Conference Systems (Public Knowledge Project) component at index/manager/fileUpload. The flaw lets remote attackers hijack administrator sessions for requests that upload a PHP file, affecting versions 2.3.4 and earlier. The underlying issu...

CVE-2011-5193

The CVE-2011-5193 entry concerns the WordPress plugin “Whois Search” (plugin path: vendors/samswhois/samswhois.inc.php). The vulnerability is an XSS in the index.php domain parameter when the WHOIS widget is enabled, exploitable in plugin versions around 1.4.2.3 (per CVE-2011-5193). Connected dat...

CVE-2011-5192

CVE-2011-5192 describes a Cross-site scripting (XSS) vulnerability in the Pretty Link Lite WordPress plugin. Affected component: pretty-bar.php in Pretty Link Lite. Vulnerable until version 1.5.5 (i.e., "before 1.5.6"). Root cause: XSS via the slug parameter, enabling an attacker to inject arbitr...