4566 matches found
Unfixed XSS vulnerability at results.mu.ac.in
Security researcher Tr0n, has submitted on 25/07/2009 a cross-site-scripting XSS vulnerability affecting results.mu.ac.in, which at the time of submission ranked 39715 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/06/2010. It is currently...
openSUSE Security Update : MozillaFirefox (MozillaFirefox-1000)
The Mozilla Firefox browser was updated to version 3.0.11, fixing various bugs and security issues : - MFSA 2009-24/CVE-2009-1392/CVE-2009-1832/CVE-2009-1833 Crashes with evidence of memory corruption rv:1.9.0.11 - MFSA 2009-25/CVE-2009-1834 bmo479413 URL spoofing with invalid unicode characters ...
openSUSE Security Update : MozillaFirefox (MozillaFirefox-1000)
The Mozilla Firefox browser was updated to version 3.0.11, fixing various bugs and security issues : - MFSA 2009-24/CVE-2009-1392/CVE-2009-1832/CVE-2009-1833 Crashes with evidence of memory corruption rv:1.9.0.11 - MFSA 2009-25/CVE-2009-1834 bmo479413 URL spoofing with invalid unicode characters ...
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : linux, linux-source-2.6.15 vulnerabilities (USN-793-1)
Igor Zhbanov discovered that NFS clients were able to create device nodes even when rootsquash was enabled. An authenticated remote attacker could create device nodes with open permissions, leading to a loss of privacy or escalation of privileges. Only Ubuntu 8.10 and 9.04 were affected...
CVE-2009-2611
creationtimestamp| type| source ---|---|--- 2009-06-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9018...
Debian: Security Advisory (DSA-1820-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE Security Advisory SUSE-SA:2009:034 (MozillaFirefox)
The remote host is missing updates announced in advisory SUSE-SA:2009:034. OpenVAS Vulnerability Test $Id: susesa2009034.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:034 MozillaFirefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
S-CMS 2.0b3 - Multiple Local File Inclusions
|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE LOC...
Solaris Update for lp 114980-25
Check for the Version of lp OpenVAS Vulnerability Test Solaris Update for lp 114980-25 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...
DDIVRT-2009-25 IPsession SQL Injection Vulnerability
Title ----- DDIVRT-2009-25 IPsession SQL Injection Vulnerability Severity -------- Medium Date Discovered --------------- March 31, 2009 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: David Marshall and r@b13$ Vulnerability Description...
Dog Pedigree Online Database 1.0.1b - Multiple SQL Injections
|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE SQL...
Unfixed XSS vulnerability at www1.gantep.edu.tr
Security researcher BlueMax, has submitted on 25/04/2009 a cross-site-scripting XSS vulnerability affecting www1.gantep.edu.tr, which at the time of submission ranked 165314 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009. It is...
Solaris 2.6 (x86) : 105622-25
SunOS 5.6x86: c2audit, libbsm and cron pa. Date this patch was last updated by Sun : Dec/19/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Solaris 2.6 (sparc) : 105621-25
SunOS 5.6: c2audit, libbsm and cron patch. Date this patch was last updated by Sun : Nov/10/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Design/Logic Flaw
The 1 Airline Product Set aka ALPS, 2 Serial Tunnel Code aka STUN, 3 Block Serial Tunnel Code aka BSTUN, 4 Native Client Interface Architecture NCIA support, 5 Data-link switching aka DLSw, 6 Remote Source-Route Bridging RSRB, 7 Point to Point Tunneling Protocol PPTP, 8 X.25 for Record Boundary...
CVE-2009-0629
Cisco IOS DLSw feature (12.2, 12.3, 12.4, 15.0, 15.1) is affected by a DoS via a sequence of malformed packets exploiting a narrow timing window (Bug ID CSCtf74999). The related Red Hat/NVD entries describe that this vulnerability can cause device crashes or reloads. Mitigation details are not pr...
DNS Tunneling Client Detection (port 25 non-tcp)
Binary data 4975.prm...
Unfixed XSS vulnerability at www.gslc-bsa.org
Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.gslc-bsa.org, which at the time of submission ranked 748576 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...
GLSA-200903-25 : Courier Authentication Library: SQL Injection vulnerability
The remote host is affected by the vulnerability described in GLSA-200903-25 Courier Authentication Library: SQL Injection vulnerability It has been reported that some parameters used in SQL queries are not properly sanitized before being processed when using a non-Latin locale Postgres database...