CVE-2010-0601

The MGCP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S11 allows remote attackers to cause a denial of service device crash via a malformed packet, aka Bug ID CSCsl39126...

CVE-2010-0602

Cisco PGW 2200 Softswitch SIP/MGCP stack contains DoS vulnerabilities (CVE-2010-0602 among others) that allow remote attackers to crash the device via malformed SIP/MGCP packets. Affected software: Cisco PGW 2200 Softswitch prior to 9.7(3)S11; Cisco reports that all listed vulnerabilities are fix...

CVE-2010-0603

The SIP implementation on the Cisco PGW 2200 Softswitch with software before 9.73S10 allows remote attackers to cause a denial of service device crash via a malformed session attribute, aka Bug ID CSCsk40030...

CVE-2010-1563

The SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S9 and 9.73P before 9.73P9 allows remote attackers to cause a denial of service device crash via a malformed header, aka Bug ID CSCsk04588...

CVE-2010-1565

Unspecified vulnerability in the SIP implementation on the Cisco PGW 2200 Softswitch with software 9.73S before 9.73S9 and 9.73P before 9.73P9 allows remote attackers to cause a denial of service TCP socket exhaustion via unknown vectors, aka Bug ID CSCsk13561...

CVE-2010-0604

Cisco PGW 2200 Softswitch is affected by multiple DoS vulnerabilities in its SIP and MGCP handling (CVE-2010-0604 among others). The SIP implementation can crash the device via malformed/unknown SIP traffic, potentially affecting remote availability. Cisco lists affected releases prior to 9.7(3)S...

[DSECRG-09-048] HP LaserJet printers - Multiple Stored XSS vulnerabilities

Digital Security Research Group DSecRG Advisory DSECRG-09-048 http://dsecrg.ru/pages/vul/show.php?id=148 Application: HP LaserJet printer web interface Vulnerable: HP LaserJet 2200, 4350, 4600, 5500, and many others Vendor URL: http://www.hp.com/ Bug: Multiple Stored XSS Vulnerabilities Exploits:...

Apple Safari Multiple Vulnerabilities - Aug09

This host is installed with Apple Safari Web Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodapplesafarimultvulnaug09.nasl 5055 2017-01-20 14:08:39Z teissa $ Apple Safari Multiple Vulnerabilities - Aug09 Authors: Nikita MR Copyright: Copyright c 2009 SecPod...

CVE-2009-2200

Summary (CVE-2009-2200) : WebKit in Apple Safari (pre-4.0.3) fails to properly restrict the URL scheme of the pluginspage attribute of an EMBED element. This underlies a vulnerability where a user-assisted crafted HTML document can cause the browser to launch arbitrary file: URLs and potentially ...

Safari < 4.0.3 Multiple Vulnerabilities

Binary data 801007.prm...

Safari < 4.0.3 Multiple Vulnerabilities

The version of Safari installed on the remote Windows host is earlier than 4.0.3. Such versions are potentially affected by several issues : - A buffer overflow exists in the handling of EXIF metadata that ccould lead to a crash or arbitrary code execution. CVE-2009-2188 - A vulnerability in...

Mac OS X : Apple Safari < 4.0.3

The version of Apple Safari installed on the remote Mac OS X host is earlier than 4.0.3. As such, it is potentially affected by several issues : - A vulnerability in WebKit's parsing of floating point numbers may allow for remote code execution. CVE-2009-2195 - A vulnerability in Safari may allow...

Google Chrome Browser Carriage Return Null Object Memory Exhaustion

Exploit for unknown platform in category dos / poc =================================================================== Google Chrome Browser Carriage Return Null Object Memory Exhaustion =================================================================== Google Chrome Carriage Return Null Object...

Gentoo Security Advisory GLSA 200607-07 (xine-lib)

The remote host is missing updates announced in advisory GLSA 200607-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: libmms

The remote host is missing an update to the system as announced in the referenced advisory. VID f6bff909-4a26-11db-a4cc-000a48049292 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-2200

Maian Weblog 4.0 is affected by multiple cross-site scripting (XSS) vulnerabilities. The CVE-2008-2200 entry specifies exploitable vectors in the web app: (1) keywords parameter to admin/index.php in a blogs search action, (2) msg_charset and (3) msg_header9 parameters to admin/inc/header.php, an...

CVE-2007-2200

Directory traversal vulnerability in navigator/navigatorok.php in Pagode 0.5.8 allows remote attackers to read and possibly delete arbitrary files via a .. dot dot in the asolute parameter...

CVE-2007-2200

CVE-2007-2200 affects Pagode 0.5.8, where a directory traversal flaw in navigator/navigator_ok.php allows remote attackers to read—and possibly delete—arbitrary files by supplying a .. sequence in the asolute parameter. The vulnerability’s impact is read and potential deletion of files; no exploi...

Computer Associates BrightStor ARCserve Backup LGServer.EXE远程堆缓冲区溢出漏洞

Computer Associates BrightStor ARCserve Backup是一款企业级别的备份解决方案。 BrightStor ARCserve Backup包含的LGSERVER.EXE处理畸形报文存在问题，远程攻击者可以利用漏洞进行堆溢出攻击，可能以进程权限执行任意指令。 所有针对Mobile Backup服务进程LGSERVER.EXE监听在TCP 2200口的报文以"\x4e\x3d\x2c\x1b"序列开头，发送包含\x4e\x3d\x2c\x1b并追加65535字符的字符串可导致进程终止，可能导致任意代码执行。 Computer Associates...

Remote Unauthenticated Code Execution CA BrightStor ARCserve Backup

======= Summary ======= Today: 31 January 2007 Reference: NGS00404 Discover: Mark Litchfield Name: Remote Unauthenticated Code Execution CA BrightStor ARCserve Backup for Laptops & Desktops Vendor: Computer Associates Systems Affected: BrightStor ARCserve Backup for Laptops & Desktops r11.1 Risk:...