Gentoo Security Advisory GLSA 201210-04 (ebuild)

The remote host is missing updates announced in advisory GLSA 201210-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

SAP NetWeaver Dispatcher 7.0 ehp1/2 - Multiple Vulnerabilities

Advisory Information Title: SAP Netweaver Dispatcher Multiple Vulnerabilities Advisory ID: CORE-2012-0123 Advisory URL: http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities Date published: 2012-05-08 Date of last update: 2012-05-10 Vendors contacted: SAP Release...

SAP NetWeaver Dispatcher 7.0 ehp12 - Multiple Vulnerabilities

SAP NetWeaver Dispatcher 7.0 ehp12 - Multiple Vulnerabilities 1. Advisory Information Title: SAP Netweaver Dispatcher Multiple Vulnerabilities Advisory ID: CORE-2012-0123 Advisory URL: http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities Date published: 2012-05-08...

Debian: Security Advisory (DSA-2512-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2512

CVE-2011-2512 affects qemu-kvm up to version 0.14.0 where virtio_queue_notify did not validate the virtqueue index, allowing a guest user to crash the guest (DoS) and potentially execute arbitrary code using a negative value in the Virtio Header Queue Notify field due to a signed comparison bypas...

RedHat Update for qemu-kvm RHSA-2011:0919-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-2512

CVE-2012-2512 affects SAP NetWeaver Dispatcher (7.0 EHP1/EHP2) via disp+work.exe: DiagTraceStreamI vulnerability triggered by crafted SAP Diag packets over remote TCP causes a denial of service (daemon crash). Vulnerable versions include disp+work.exe v7010.29.15.58313 and v7200.70.18.23869. Impa...

SAP Netweaver Dispatcher Multiple Vulnerabilities

1. Advisory Information Title: SAP Netweaver Dispatcher Multiple Vulnerabilities Advisory ID: CORE-2012-0123 Advisory URL: http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities Date published: 2012-05-08 Date of last update: 2012-05-10 Vendors contacted: SAP Releas...

kvm (important)

A privileged guest user could cause a buffer overflow in the virtio subsystem of the host, therefore crashing the guest or potentially execute arbitrary code on the host CVE-2011-2212, CVE-2011-2512...

Ubuntu: Security Advisory (USN-1165-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2270-1] qemu-kvm security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2270-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 01, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2270-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2270-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 01, 2011 http://www.debian.org/security/faq -...

CVE-2010-2512

The CVE-2010-2512 issue is supported by multiple connected records indicating a SQL injection in the 2daybiz Matrimonial Script, specifically in the file/product area: customprofile.php . The vulnerability is exploitable via the id parameter , allowing remote attackers to execute arbitrary SQL co...

CVE-2010-2512

creationtimestamp| type| source ---|---|--- 2010-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14008...

CVE-2009-2512

The Web Services on Devices API WSDAPI in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly process the headers of WSD messages, which allows remote attackers to execute arbitrary code via a crafted 1 message or 2 response, aka "Web Services on Devices API Memory...

CVE-2009-2512

CVE-2009-2512 describes a remote code execution vulnerability in Microsoft Windows WSDAPI (Web Services on Devices API) affecting Windows Vista (Gold, SP1, SP2) and Windows Server 2008 (Gold, SP2). The root cause is memory corruption due to improper processing/validation of WSD message headers (M...

Microsoft Windows WSDAPI服务远程内存破坏漏洞（MS09-063）

BUGTRAQ ID: 36919 CVE ID: CVE-2009-2512 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统中设备API上Web服务（WSDAPI）中存在内存破坏漏洞。远程攻击者可以通过向WSDAPI服务发送带有畸形头的WSD消息触发这个漏洞，导致在用户系统上执行任意指令。 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Windows Server 2008 SP2 Microsoft Window...

CVE-2008-2512

CVE-2008-2512 is a directory-traversal vulnerability in Symantec Backup Exec System Recovery Manager (BESR) (7.x before 7.0.4 and 8.x before 8.0.2). A remote, unauthenticated attacker can exploit an inadequate sanitization in the Tomcat-based servlet (reportsfile) to read arbitrary files on the a...

Symantec Backup Exec System Recovery Manager Traversal Arbitrary File Access

The remote host appears to be running Symantec Backup Exec System Recovery Manager, a backup manager solution. The Tomcat servlet 'reportsfile' included in the version of Backup Exec System Recovery Manager installed on the remote host fails to properly sanitize user input to the 'filename'...

Citrix Presentation Server heap based buffer overflow

Overview A heap-based buffer overflow in Citrix Presentation Server may allow a remote attacker to execute arbitrary code on an vulnerable system in the context of the system user. Description Citrix Presentation Server is an application delivery system providing access to users accross a network...