Microsoft Works RTF Heap Remote Code Execution (MS12-065; CVE-2012-2550)

A remote code execution vulnerability has been reported in Microsoft Works...

Debian Security Advisory DSA 2550-2 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 2550-2. OpenVAS Vulnerability Test $Id: deb25502.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2550-2 asterisk Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2550-1 (asterisk)

The remote host is missing an update to asterisk announced via advisory DSA 2550-1. OpenVAS Vulnerability Test $Id: deb25501.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2550-1 asterisk Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2550-2 : asterisk - several vulnerabilities

Several vulnerabilities were discovered in Asterisk, a PBX and telephony toolkit, allowing privilege escalation in the Asterisk Manager, denial of service or privilege escalation. More detailed information can be found in the Asterisk advisories: AST-2012-010, AST-2012-011, AST-2012-012, and...

smb-vuln-ms10-054 NSE Script

Tests whether target machines are vulnerable to the ms10-054 SMB remote memory corruption vulnerability. The vulnerable machine will crash with BSOD. The script requires at least READ access right to a share on a remote machine. Either with guest credentials or with specified username/password...

MS10-054: Vulnerabilities in SMB Server Could Allow Remote Code Execution (982214) (remote check)

The remote host is affected by several vulnerabilities in the SMB server that may allow an attacker to execute arbitrary code or perform a denial of service against the remote host. These vulnerabilities depend on access to a shared drive, but do not necessarily require credentials. C Tenable...

CVE-2010-2550

CVE-2010-2550 affects the SMB Server in multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 SP2/R2, Windows 7). The root cause is improper validation of fields in an SMB request, allowing remote code execution via a crafted SMB packet (aka “SMB Pool Overflow Vulnera...

Microsoft Windows SMB Code Execution and DoS Vulnerabilities (982214)

This host is missing a critical security update according to Microsoft Bulletin MS10-054. OpenVAS Vulnerability Test $Id: secpodms10-054.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows SMB Code Execution and DoS Vulnerabilities 982214 Authors: Sooraj KS Updated By: Madhuri D on...

CVE-2009-2550

CVE-2009-2550 affects Hamster Audio Player (0.3a). The vulnerability is a stack-based buffer overflow triggered by a long string in playlist files (.m3u or .hpl), allowing remote attackers to execute arbitrary code. The OpenVAS entries corroborate a buffer overflow in Hamster Audio Player with CV...

CVE-2009-2550

creationtimestamp| type| source ---|---|--- 2009-07-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9157 2009-07-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9172...

Gentoo Security Advisory GLSA 200508-12 (evolution)

The remote host is missing updates announced in advisory GLSA 200508-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-2550

IBM WebSphere Application Server 6.1 prior to 6.1.0.17 is affected by a vulnerability in the Web Services Security SOAP header attribute, with unspecified impact and attack vectors. The issue is associated with CVE-2008-2550. Public references note the vulnerability exists in WAS 6.1 before Fix P...

CVE-2007-2550

CVE-2007-2550 affects CubeCart 3.0.15 (Devellion) and involves multiple CRLF injection vulnerabilities in cookies named with a prefix of "ccSID", enabling remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting against cart.php or index.php. The vulnerability is due ...

Debian DSA-1016-1 : evolution - format string vulnerabilities

Ulf Harnhammar discovered several format string vulnerabilities in Evolution, a free groupware suite, that could lead to crashes of the application or the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CentOS 3 / 4 : Evolution (CESA-2005:267)

Updated evolution packages that fix a format string issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A format string bug was found in...

CVE-2006-2550

CVE-2006-2550 affects perlpodder before 0.5. It allows remote code execution via shell metacharacters in the podcast URL, which are executed when the URL is saved to a log file. The public description notes that the wget vector is covered by CVE-2006-2548. Connected documents confirm the basic vu...

[SECURITY] [DSA 1016-1] New evolution packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1016-1 [email protected] http://www.debian.org/security/ Martin Schulze March 23rd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1016-1] New evolution packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1016-1 [email protected] http://www.debian.org/security/ Martin Schulze March 23rd, 2006 http://www.debian.org/security/faq -...

CVE-2004-2550

SandSurfer before version 1.7.1 is vulnerable to multiple cross-site scripting (XSS) in unspecified Perl scripts, potentially allowing attackers to inject scripts that execute in affected users’ browsers when viewing reports containing injected data. The Nessus entry and CVE records align on the ...

CVE-2004-2550

Multiple cross-site scripting XSS vulnerabilities in unspecified Perl scripts in SandSurfer before 1.7.1 allow remote attackers to inject arbitrary web script or HTML, which is later executed by a target who views reports containing the injected data...