Orbit Open Ad Server 1.1.0 SQL Injection

Advisory ID: HTB23208 Product: Orbit Open Ad Server Vendor: OrbitScripts, LLC Vulnerable Versions: 1.1.0 and probably prior Tested Version: 1.1.0 Advisory Publication: March 19, 2014 without technical details Vendor Notification: March 19, 2014 Vendor Patch: March 21, 2014 Public Disclosure: Apri...

Debian Security Advisory DSA 2540-1 (mahara)

The remote host is missing an update to mahara announced via advisory DSA 2540-1. OpenVAS Vulnerability Test $Id: deb25401.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2540-1 mahara Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2540-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2540-1 : mahara - XSS

Emanuel Bronshtein discovered that Mahara, an electronic portfolio, weblog, and resume builder, contains multiple cross-site scripting vulnerabilities due to missing sanitization and insufficient encoding of user-supplied data. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Opera Web Browser Select Object Denial Of Service Vulnerability - Mac OS X

Opera Web Browser is prone to select object denial of service vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mapserver FEDORA-2011-9555

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for mapserver FEDORA-2010-12266

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 13 : mapserver-5.6.5-1.fc13 (2010-12266)

Update to 5.6.5, for various fixes described at: http://trac.osgeo.org/mapserver/browser/tags/rel-5-6-5/m apserver/HISTORY.TXT Also fixes CVE-2010-2539, CVE-2010-2540, per bz 617301 and 617312. Note that Tenable Network Security has extracted the preceding description block directly from the...

[SECURITY] [DSA 2078-1] New mapserver packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-2078-1 [email protected] http://www.debian.org/security/ Nico Golde July 31nd, 2010 http://www.debian.org/security/faq -...

CVE-2010-2540

mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the use of CGI command-line arguments that were intended for debugging, which allows remote attackers to have an unspecified impact via crafted arguments...

CVE-2010-2540

CVE-2010-2540 affects MapServer’s mapserv CGI interface. In MapServer versions prior to 4.10.6 and 5.x prior to 5.6.4, CGI arguments intended for debugging are not properly restricted, enabling remote attackers to craft arguments and trigger an unspecified impact. Fixed in MapServer 4.10.6 and 5....

NTPd Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'NTP daemon...

Opera Web Browser Select Object Denial Of Service Vulnerability - Windows

Opera Web Browser is prone to Select Object Denial of Service vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-2540

CVE-2009-2540 concerns Opera Web Browser (likely 9.64 and earlier) where a crafted HTML Select element with a large length value can trigger memory consumption, causing a denial of service. This is described as a related issue to CVE-2009-1692. Connected sources (OpenVAS entries) validate the ass...

Design/Logic Flaw

Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit JDK before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 through 1.0.2, allows remote attackers to...

Blended Threat Vulnerability in SearchPath Could Allow Elevation of Privilege (959426)

This host is missing a critical security update according to Microsoft Bulletin MS09-015. OpenVAS Vulnerability Test $Id: secpodms09-015.nasl 5934 2017-04-11 12:28:28Z antu123 $ Blended Threat Vulnerability in SearchPath Could Allow Elevation of Privilege 959426 Authors: Nikita MR Updated By:...

MS09-015: Blended Threat Vulnerability in SearchPath Could Allow Elevation of Privilege (959426)

A vulnerability in the way the Windows SearchPath function locates and opens files on the remote host could allow an attacker to execute arbitrary remote code if he can trick a user into downloading a specially crafted file into a specific location, such as the Windows Desktop. C Tenable Network...

CVE-2008-2933

Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' pipe characters in a command-line URI as requests to open multiple tabs, which allows remote attackers to access chrome:i URIs, or read arbitrary local files via manipulations involving a series of URIs that is not entirely...

Design/Logic Flaw

Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' pipe characters in a command-line URI as requests to open multiple tabs, which allows remote attackers to access chrome:i URIs, or read arbitrary local files via manipulations involving a series of URIs that is not entirely...

CVE-2008-2540

CVE-2008-2540 involves Safari on macOS and Safari/IE on Windows where downloading an object with an unrecognized content type can place malware in user directories and, via an untrusted search path, lead to remote code execution on Windows (Carpet Bomb / Blended Threat). Connected docs confirm th...