McAfee Web Gateway < 7.3.2.6 / 7.4.1 Information Disclosure (SB10063)

The remote host is running a version of McAfee Web Gateway prior to 7.3.2.6 / 7.4.1. It is, therefore, affected by an information disclosure vulnerability. A remote attacker could potentially exploit this vulnerability to download any file from the device that the user 'mwg' has access to. C...

CVE-2014-2535

McAfee Web Gateway (MWG) is affected by a directory traversal vulnerability that allows remote authenticated users to read arbitrary files via requests to the web filtering port. Affected versions are MWG 7.4.x before 7.4.1, 7.3.x before 7.3.2.6, and 7.2.0.9 and earlier. The root cause is a direc...

Debian DSA-2535-1 : rtfm - XSS

It was discovered that rtfm, the Request Tracker FAQ Manager, contains multiple cross-site scripting vulnerabilities in the topic administration page. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Debian: Security Advisory (DSA-2535-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 201110-21 (Asterisk)

The remote host is missing updates announced in advisory GLSA 201110-21. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Debian Security Advisory DSA 2276-2 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 2276-2. OpenVAS Vulnerability Test $Id: deb22762.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2276-2 asterisk Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian: Security Advisory (DSA-2276-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: asterisk14

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Debian DSA-2276-1 : asterisk - multiple denial of service

Paul Belanger reported a vulnerability in Asterisk identified as AST-2011-008CVE-2011-2529 through which an unauthenticated attacker may crash an Asterisk server remotely. A package containing a NULL char causes the SIP header parser to alter unrelated memory structures. Jared Mauch reported a...

[SECURITY] [DSA 2276-1] asterisk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2276-1 [email protected] http://www.debian.org/security/ Luciano Bello July 10, 2011 http://www.debian.org/security/faq -...

CVE-2011-2535

chaniax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1, 1.6.2.x before 1.6.2.18.1, and 1.8.x before 1.8.4.3, and Asterisk Business Edition C.3 before C.3.7.3, accesses a memory address contained in an option control frame, which allows remote attackers to cause a deni...

CVE-2011-2535

chaniax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1, 1.6.2.x before 1.6.2.18.1, and 1.8.x before 1.8.4.3, and Asterisk Business Edition C.3 before C.3.7.3, accesses a memory address contained in an option control frame, which allows remote attackers to cause a deni...

CVE-2011-2535

CVE-2011-2535 affects Asterisk Open Source 1.4.x (before 1.4.41.1), 1.6.2.x (before 1.6.2.18.1), and 1.8.x (before 1.8.4.3), plus Asterisk Business Edition C.3 (before C.3.7.3). The flaw is in chan_iax2.c (IAX2 channel driver) where an option frame can be used to access a memory address, enabling...

CVE-2011-2535

chaniax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1, 1.6.2.x before 1.6.2.18.1, and 1.8.x before 1.8.4.3, and Asterisk Business Edition C.3 before C.3.7.3, accesses a memory address contained in an option control frame, which allows remote attackers to cause a deni...

CVE-2010-2535

Multiple cross-site scripting XSS vulnerabilities in the Back End in Joomla! 1.5.x before 1.5.20 allow remote authenticated users to inject arbitrary web script or HTML via administrator screens...

CVE-2010-2535

CVE-2010-2535 involves multiple cross-site scripting (XSS) vulnerabilities in the Back End of Joomla! 1.5.x prior to 1.5.20. The issue allows remote authenticated users to inject arbitrary web script or HTML through administrator screens. Affected software: Joomla! 1.5.x (before 1.5.20). The unde...

CVE-2005-2535

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16408 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/discoverytcp.rb 2025-02-06 03:13:38+00:00|...

CA BrightStor Discovery Service TCP Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'CA BrightSto...

Mozilla Products 'select()' Denial Of Service Vulnerability (Linux)

The host is installed with Mozilla Firefox/Seamonkey/Thunderbird and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsdosvulnjul09lin.nasl 6482 2017-06-29 08:31:43Z cfischer $ Mozilla Products 'select' Denial Of Service Vulnerability Linux Authors: Sharat...

Mozilla Products 'select()' Denial Of Service Vulnerability (Windows)

The host is installed with Mozilla Firefox/Seamonkey/Thunderbird and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsdosvulnjul09win.nasl 6467 2017-06-28 13:51:19Z cfischer $ Mozilla Products 'select' Denial Of Service Vulnerability Windows Authors:...