Fedora Update for mediawiki FEDORA-2013-7714

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Liferay Portal 6.1.0 User Enumeration

The version of Liferay Portal hosted on the remote web server contains a flaw in the 'SearchPermissionCheckerImpl' class's 'doGetPermissionQuery' method that allows a remote, unauthenticated attacker to enumerate all user accounts. It may be possible to determine the email address of each of the...

Memory corruption

Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2031, and CVE-2012-2033...

Memory corruption

Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2031, and CVE-2012-2032...

CVE-2012-2031

Adobe Shockwave Player (Windows/macOS) has a memory corruption vulnerability (CVE-2012-2031) in parsing the rcsL DIR/DCR chunk of OBJ/RIF data, described as a remote code execution flaw when a user opens a crafted DIR/DCR file. The advisory notes that a remote attacker could execute arbitrary cod...

Adobe Shockwave Player Remote Code Execution (CVE-2012-2031)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Qualys Vulnerability & Malware Research Labs VMRL http://www.dissect.pe Memory corruption when Adobe Shockwave Player parses .dir media file CVE-2012-2031 INTRODUCTION Adobe Shockwave Player is the Adobe plugin to many different browsers to view...

CVE-2010-2031

CVE-2010-2031 affects KAVSafe.sys 2010.4.14.609 and earlier (used with Kingsoft Webshield 3.5.1.2 and earlier). It allows local users to overwrite arbitrary kernel memory via a crafted IOCTL 0x830020d4 request to the KAVSafe device. The NVD entry documents a local-exploit scenario with a CVSSv2 b...

ClamAV < 0.96.1 Multiple Vulnerabilities

According to its version, the clamd antivirus daemon on the remote host is earlier than 0.96.1. Such versions are reportedly affected by multiple vulnerabilities : - An error exists within the 'clipdf' function in 'libclamav/pdf.c' when processing certain PDF files. Bug 2016 - An error exists...

Debian DSA-2031-1 : krb5 - use-after-free

Sol Jerome discovered that kadmind service in krb5, a system for authenticating users and services on a network, allows remote authenticated users to cause a denial of service daemon crash via a request from a kadmin client that sends an invalid API version number. %NASLMINLEVEL 70300 C Tenable...

CVE-2009-2031

The CVE-2009-2031 entry applies to Sun OpenSolaris smbfs (SNV_84 to SNV_110). It describes a localPrivilege issue where, when default mount permissions are used, local users can read arbitrary files and list arbitrary directories on CIFS volumes . The description identifies the affected component...

Design/Logic Flaw

VicFTPS 5.0 allows remote attackers to cause a denial of service crash via a LIST command that starts with a "//" forward slash, backward slash, forward slash. NOTE: this might be the same issue as CVE-2008-2031...

Victory FTP Server 5.0 LIST DoS

The Victory FTP Server v5.0 can be brought down by sending a very simple LIST command This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Victory FTP Server 5.0 LIST DoS', 'Description' = %q The...

CVE-2008-2031

creationtimestamp| type| source ---|---|--- 2008-10-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6834 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/ftp/vicftps50list.rb 2025-02-06 03:13:39+00:00| seen...

CVE-2008-2031

CVE-2008-2031 affects VicFTPS 5.0. The vulnerability is a remote Denial of Service triggered by a crafted LIST command, causing a crash/NULL pointer dereference. OpenVAS entries corroborate a LIST command DoS vulnerability in VicFTPS 5.0; one OpenVAS advisory notes the crafted input may crash the...

CVE-2007-2031

The CVE-2007-2031 issue affects the 3proxy HTTP proxy. The connected sources confirm a buffer/stack overflow in 3proxy’s HTTP proxy handling, specifically in the logurl() function as part of processing overly long requests. Affected versions include 3proxy 0.5 through 0.5.3g and 0.6b-devel prior ...

XSS vulnerabilities

PMASA-2006-2 Announcement-ID: PMASA-2006-2 Date: 2006-05-12 Summary XSS vulnerabilities Description 1. It was possible to conduct an XSS attack with a crafted lang or theme parameter. 2. The db parameter was also vulnerable to an XSS attack. Severity We consider these vulnerabilities to be...

CVE-2006-2031

Cross-site scripting XSS vulnerability in index.php in phpMyAdmin 2.8.0.3, 2.8.0.2, 2.8.1-dev, and 2.9.0-dev allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2006-2031

Cross-site scripting XSS vulnerability in index.php in phpMyAdmin 2.8.0.3, 2.8.0.2, 2.8.1-dev, and 2.9.0-dev allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2006-2031

CVE-2006-2031 (and related entries) documents a cross-site scripting (XSS) flaw in phpMyAdmin 2.8.0.x branches. The vulnerability allows injection of arbitrary script/HTML via the lang parameter (and related theme parameter references in other sources). Affected products include phpMyAdmin 2.8.0....

CVE-2005-2031

CVE-2005-2031 affects socialMPN and involves multiple SQL injection vectors in PHP scripts: article.php (sid), user.php (uname), viewforum.php (siteid), newtopic.php (username), sections.php (secid or artid), index.php (siteid), and friend.php (sid). The underlying issue is improper input handlin...