CVE-2012-2323

CVE-2012-2323 is a reservation duplicate of CVE-2012-2214 and is not an active vulnerability entry.

CVE-2017-2214

The CVE-2017-2214 entry corresponds to an untrusted search path vulnerability in AppCheck and AppCheck Pro prior to version 2.0.1.15. The underlying issue allows an attacker to execute arbitrary code via a specially crafted executable in an unspecified directory. Affected products: AppCheck and A...

CVE-2016-2214

Huawei Agile Controller-Campus contains a cross-site scripting (XSS) vulnerability in a portal authentication page. Affected software is before V100R001C00SPC319. Remote attackers could inject arbitrary web script or HTML via unknown vectors, potentially impacting user sessions. Huawei HWPSIRT ad...

CVE-2015-2214

NetCat CMS (NetCat.ru) 5.01 and earlier is affected by an information disclosure vulnerability. The issue stems from the netshop/post.php script not adequately filtering the redirect_url parameter, allowing remote attackers to obtain the installation path. This root cause is described across conn...

Oracle Solaris Third-Party Patch Update : pidgin (multiple_vulnerabilities_in_pidgin)

The remote Solaris system is missing necessary patches to address security updates : - proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service application crash vi...

Ubuntu 14.04 LTS : libxml2 regression (USN-2214-3)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2214-3 advisory. USN-2214-1 fixed vulnerabilities in libxml2. The upstream fix introduced a number of regressions. This update fixes the problem. We apologize for the inconvenienc...

openSUSE Security Update : nagios (openSUSE-SU-2013:1158-1)

This nagios update fixes a authorization problem inside host/service views. - added nagios-CVE-2013-2214.patch fixing unauthorized host/service views displayed in servicegroup view bnc827020 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

openSUSE Security Update : flash-player (openSUSE-SU-2010:0502-1)

Flash Player was updated to version 10.1.82.76 fixing several critical security issues. CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214, CVE2010-2215, CVE-2010-2216 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

openSUSE Security Update : acroread (openSUSE-SU-2010:0573-1)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-1240, CVE-2010-2862. This update also incorporate the Adobe Flash Player update APSB10-16 for the bundled flash player parts CVE-2010-0209, CVE-2010-2188, CVE-2010-2213, CVE-2010-2214,...

Ubuntu 14.04 LTS : libxml2 regression (USN-2214-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2214-2 advisory. USN-2214-1 fixed vulnerabilities in libxml2. The upstream fix introduced a regression when using xmllint with the --postvalid option. This update fixes the proble...

Ubuntu 14.04 LTS : libxml2 vulnerability (USN-2214-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2214-1 advisory. Daniel Berrange discovered that libxml2 would incorrectly perform entity substitution even when requested not to. If a user or automated system were tricked into...

Nagios 'status.cgi' Information Disclosure Vulnerability (Jul 2013) - Active Check

Nagios is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nagios:nagios";...

CVE-2013-2214

status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access to certain users that are a contact for a service, which allows remote authenticated users to obtain sensitive information about hostnames via the servicegroup 1 overview, 2 summary, or 3 grid style i...

CVE-2013-2214

CVE-2013-2214 affects Nagios status.cgi: in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1, access restrictions for service contact users are not properly enforced, enabling remote authenticated users to disclose hostnames via the servicegroup overview, summary, or grid views. Root cause is an ...

RHEL 5 : flash-plugin (RHSA-2010:0623)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0623 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...

RHEL 3 / 4 : flash-plugin (RHSA-2010:0624)

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 3 and 4 Extras. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Fedora Update for pidgin FEDORA-2012-10287

Check for the Version of pidgin OpenVAS Vulnerability Test Fedora Update for pidgin FEDORA-2012-10287 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for pidgin FEDORA-2012-10294

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Pidgin MSN and XMPP Denial of Service Vulnerabilities (Windows)

This host has installed with Pidgin and is prone to denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbpidginmsnnxmppdosvulnwin.nasl 5912 2017-04-10 09:01:51Z teissa $ Pidgin MSN and XMPP Denial of Service Vulnerabilities Windows Authors: Madhuri D Copyright: Copyright c 2012...

CVE-2012-2214

proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service application crash via a sequence of XMPP file-transfer requests...