CVE-2011-2710

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via 1 the URI to includes/application.php, reachable through index.php; and, when Internet Explorer or Konqueror is used, 2 allow remote attackers to inject...

CVE-2011-2710

CVE-2011-2710 involves multiple XSS vulnerabilities in Joomla! prior to 1.7.0. The flaws allow remote attackers to inject arbitrary web script or HTML via (1) the URI to includes/application.php (reachable through index.php) and (2) the searchword parameter in a search action to index.php in the ...

CVE-2011-2710

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via 1 the URI to includes/application.php, reachable through index.php; and, when Internet Explorer or Konqueror is used, 2 allow remote attackers to inject...

CVE-2010-2710

CVE-2010-2710 affects HP OpenView Network Node Manager (NNM) 7.51 and 7.53. The description indicates an unspecified vulnerability that allows remote attackers to execute arbitrary code via unknown vectors. The connected documents corroborate the generic impact but do not provide concrete details...

HP OpenView Network Node Manager Multiple Vulnerabilities

The version of HP OpenView Network Node Manager NNM installed on the remote Windows host is affected by multiple vulnerabilities : - The embedded DB service is affected by a denial of service vulnerability that is triggered when it receives a packet with an error code of less than -1. An...

Remote File Inclusion Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront = 3.5.1 / build 2710: Remote File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: eFront $ File affected: studentpage.php / professorpage $ Version: 3.5.1 / build 2710 $...

efront-upload.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront eNYe-Sec - www.enye-sec.org -- Description by the author's page -- eFront is an easy to use, visually attractive, SCORM compatible, eLearning and Human Capital Development system. It is suitable for both company and...

eFront 3.5.1 build 2710 - Arbitrary File Upload

eFront 3.5.1 build 2710 - Arbitrary File Upload -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront eNYe-Sec - www.enye-sec.org -- Description by the author's page -- eFront is an easy to use, visually attractive, SCORM compatible, eLearning and Human Capital Development...

eFront <= 3.5.1 / build 2710 Remote Arbitrary Upload Vulnerability

Exploit for unknown platform in category web applications ================================================================== eFront eNYe-Sec - www.enye-sec.org -- Description by the author's page -- eFront is an easy to use, visually attractive, SCORM compatible, eLearning and Human Capital...

Gentoo Security Advisory GLSA 200510-07 (realplayer helixplayer)

The remote host is missing updates announced in advisory GLSA 200510-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200510-07 (realplayer helixplayer)

The remote host is missing updates announced in advisory GLSA 200510-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NetBSD malformed ICMPv6 MLD-QUERY denial of service

Overview NetBSD fails to properly handle ICMPv6 MLD query packets, which can allow a remote, unauthenticated attacker to cause a denial of service. Description ICMPv6, which is defined in RFC 4443, is a version of the ICMP protocol for IPv6. Multicast Listener Discovery MLD for IPv6, which is...

Solaris 10 (sparc) : 137111-08

SunOS 5.10: kernel patch. Date this patch was last updated by Sun : Oct/08/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (x86) : 137112-08

SunOS 5.10x86: kernel patch. Date this patch was last updated by Sun : Oct/09/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

CVE-2008-2710

CVE-2008-2710 affects Sun Solaris 10 and OpenSolaris prior to SNV_92. The kernel component involved is ip_set_srcfilter in uts/common/inet/ip/ip_multi.c, where a signedness issue can trigger an out-of-bounds write via an SIOCSIPMSFILTER IOCTL with a large imsf-&gt;imsf_numsrc, enabling local user...

Debian Security Advisory DSA 826-1 (helix-player)

The remote host is missing an update to helix-player announced via advisory DSA 826-1. Multiple security vulnerabilities have been identified in the helix-player media player that could allow an attacker to execute code on the victim's machine via specially crafted network resources. CVE-2005-176...

CVE-2004-2710

CVE-2004-2710 affects Gyach Enhanced (Gyach-E) prior to 1.0.3. Multiple buffer overflows allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary code via two vectors: (1) sending certain typing statuses, and (2) setting the chat room status bar to the current c...

CVE-2007-2710

NagiosQL 2.00-P00 and earlier is affected by a PHP remote file inclusion vulnerability in functions/prepend_adm.php. The issue arises when an attacker supplies a URL in the SETS[path][IT] parameter, allowing remote execution of arbitrary PHP code. The vulnerability details and risk are described ...

CentOS 4 : Helix / Player (CESA-2005:788)

An updated HelixPlayer package that fixes a string format issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. HelixPlayer is a media player. A format string bug was discovered in the way HelixPlayer processes RealPix .rp...

CVE-2006-2710

Summary: CVE-2006-2710 affects Secure Elements Class 5 AVR (C5 EVM) before 2.8.1. Root cause: same invariant RSA key used across all installations, permitting remote attackers with the key to decrypt communications. Impact: confidentiality of communications is compromised; integrity/availability ...