Debian DSA-1498-1 : libimager-perl - buffer overflow

It was discovered that libimager-perl, a Perl extension for generating 24-bit images, did not correctly handle 8-bit compressed images, which could allow the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

Solaris 9 (sparc) : 137038-01

SunOS 5.9: ImageMagick patch. Date this patch was last updated by Sun : Jan/24/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Unfixed XSS vulnerability at www.ascomputadores.com.br

Security researcher mygotmanoel, has submitted on 24/01/2008 a cross-site-scripting XSS vulnerability affecting www.ascomputadores.com.br, which at the time of submission ranked 2485427 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008...

Unfixed XSS vulnerability at www.crm2day.com

Security researcher Kaospunk, has submitted on 24/01/2008 a cross-site-scripting XSS vulnerability affecting www.crm2day.com, which at the time of submission ranked 145305 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008. It is...

Debian Security Advisory DSA 149-2 (glibc)

The remote host is missing an update to glibc announced via advisory DSA 149-2. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 159-1 (python)

The remote host is missing an update to python announced via advisory DSA 159-1. OpenVAS Vulnerability Test $Id: deb1591.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 159-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Unfixed XSS vulnerability at poisk.ru

Security researcher Uber0n, has submitted on 24/12/2007 a cross-site-scripting XSS vulnerability affecting poisk.ru, which at the time of submission ranked 56977 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It is currently unfixe...

openssh security and bug fix update

4.3p2-24 - fixed audit log injection problem CVE-2007-3102 248059 4.3p2-23 - document where the nss certificate and token dbs are looked for 4.3p2-22 - experimental support for PKCS11 tokens through libnss3 183423 4.3p2-21 - fix an information leak in Kerberos password authentication CVE-2006-505...

CVE-2002-2415

Allied Telesyn AT-8024 1.3.1 and Rapier 24 switches allow remote authenticated users to cause a denial of service in the management interface via a stream of zero null bytes sent via UDP to a running service...

CVE-2002-2415

The CVE-2002-2415 entry concerns Allied Telesyn AT-8024 (version 1.3.1) and Rapier 24 switches. The vulnerability allows remote authenticated users to cause a denial of service in the management interface by sending a stream of zero (null) bytes via UDP to a running service. Affected component: m...

GLSA-200710-24 : OpenOffice.org: Heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200710-24 OpenOffice.org: Heap-based buffer overflow iDefense Labs reported that the TIFF parsing code uses untrusted values to calculate buffer sizes, which can lead to an integer overflow resulting in heap-based buffer overflow...

Unfixed XSS vulnerability at www.calarkendinlet.turkcell.com.tr

Security researcher BackDoor, has submitted on 24/10/2007 a cross-site-scripting XSS vulnerability affecting www.calarkendinlet.turkcell.com.tr, which at the time of submission ranked 5158 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at turkcell-imbenim.turkcell.com.tr

Security researcher BackDoor, has submitted on 24/10/2007 a cross-site-scripting XSS vulnerability affecting turkcell-imbenim.turkcell.com.tr, which at the time of submission ranked 5158 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/200...

Xitami 2.5c2 Web Server If-Modified-Since Overflow

This module exploits a stack buffer overflow in the iMatix Corporation Xitami Web Server. If a malicious user sends an If-Modified-Since header containing an overly long string, it may be possible to execute a payload remotely. Due to size constraints, this module uses the Egghunter technique. Th...

Unfixed XSS vulnerability at www.nigraphic.com

Security researcher Narcoticxs, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.nigraphic.com, which at the time of submission ranked 4457358 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Unfixed XSS vulnerability at www.indirsek.org

Security researcher Comando, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.indirsek.org, which at the time of submission ranked 574689 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Unfixed XSS vulnerability at www.illinchetto.it

Security researcher BackDoor, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.illinchetto.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is currentl...

Unfixed XSS vulnerability at www.spisales.com

Security researcher iNs, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.spisales.com, which at the time of submission ranked 1133214 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It is currently...

Unfixed XSS vulnerability at www.resourcesandtrust.com

Security researcher Narcoticxs, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.resourcesandtrust.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...

Unfixed XSS vulnerability at www.mrbilgi.com

Security researcher BackDoor, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.mrbilgi.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is currently...