90 matches found
Ubuntu: Security Advisory (USN-2968-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Advisory-XSS Security Vulnerability on Huawei E355
Huawei E355 portable 3G wireless routers have the stored cross-site scripting XSS vulnerability. Attackers can exploit the vulnerability to plant malicious scripts into the configuration file to interrupt the services of legitimate users. Vulnerability ID: HWPSIRT-2014-0516 The CVE No. of the...
CVE-2014-2968
Cross-site scripting XSS vulnerability in the web interface on the Huawei E355 CH1E355SM modem with software 21.157.37.01.910 and Web UI 11.001.08.00.03 allows remote attackers to inject arbitrary web script or HTML via an SMS message...
CVE-2014-2968
CVE-2014-2968 is a stored cross-site scripting (XSS) vulnerability in the Huawei E355 series web interface. The issue affects the CH1E355SM device with software 21.157.37.01.910 and Web UI 11.001.08.00.03, allowing an attacker to inject arbitrary script or HTML via an SMS message when interacting...
Debian DSA-2968-1 : gnupg2 - security update
Jean-Rene Reinhard, Olivier Levillain and Florian Maury reported that GnuPG, the GNU Privacy Guard, did not properly parse certain garbled compressed data packets. A remote attacker could use this flaw to mount a denial of service against GnuPG by triggering an infinite loop. %NASLMINLEVEL 70300 ...
Debian: Security Advisory (DSA-2968-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-2968
IBM Sterling Control Center (SCC) is affected by CVE-2013-2968 due to a buffer-read flaw in a component used when reading large files without end-of-line characters. Affected SCC versions are 5.2 (up to 5.2.0.8), 5.3 (up to 5.3.0.3), and 5.4 (up to 5.4.0.1). The issue can allow remote authenticat...
CVE-2012-2968
CVE-2012-2968 is a directory traversal flaw in Caucho Quercus as distributed in Resin before 4.0.29. The vulnerability allows a remote attacker to create or write files in arbitrary directories by injecting a dot-dot sequence into a pathname in an HTTP request. Affected component: Quercus (Java P...
Caucho's Quercus on Resin contains multiple vulnerabilities
Overview Caucho's Quercus on Resin contains multiple vulnerabilities which could allow an attacker to execute arbitrary code with the privileges of the application. Description It has been reported that Caucho's Quercus on Resin contains multiple vulnerabilities which could allow an attacker to...
Epson EventManager 'x-protocol-version' Denial of Service Vulnerability
This host is running Epson EventManager and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodepsoneventmanagerdosvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ Epson EventManager 'x-protocol-version' Denial of Service Vulnerability Authors: Sooraj KS Copyright:...
Epson EventManager 'x-protocol-version' Denial of Service Vulnerability
Epson EventManager is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-2968
The CVE concerns Wind River VxWorks’ FTP daemon, where the FTP service does not close the TCP connection after multiple failed login attempts. This behavior allows remote attackers to attempt brute-force access, as described in multiple sources (NVD, Red Hat advisory, CVE CVE-2010-2968 records). ...
CVE-2009-2968
Directory traversal vulnerability in a support component in the web interface in VMware Studio 2.0 public beta before build 1017-185256 allows remote attackers to upload files to arbitrary locations via unspecified vectors...
CVE-2009-2968
CVE-2009-2968 describes a directory traversal in VMware Studio 2.0 public beta (before build 1017-185256) affecting a web interface support component. Due to insufficient input sanitization, an attacker could trick the component into uploading files to arbitrary directories inside the Studio virt...
CVE-2009-2968
Directory traversal vulnerability in a support component in the web interface in VMware Studio 2.0 public beta before build 1017-185256 allows remote attackers to upload files to arbitrary locations via unspecified vectors...
VMware Studio虚拟应用设备WEB接口文件上传目录遍历漏洞
Bugraq ID: 36199 CVE ID：CVE-2009-2968 VMware Studio是一款用于开发，配置，定制虚拟应用程序和应用设备的解决方案。 VMware Studio支持的web接口组件不正确过滤用户输入，远程攻击者可以利用漏洞上传文件到VMware Studio虚拟应用设备上的任意目录中。 不过此漏洞不影响由 Studio 2.0 beta建立的虚拟机。 VMWare Studio 2.0 beta 用户可联系供应商获得相应产品的补丁或升级程序： VMware Studio 2.0 build 1017-185256...
VMSA-2009-0011 VMware Studio 2.0 addresses a security issue in the public beta version of Studio 2.0
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2009-0011 Synopsis: VMware Studio 2.0 addresses a security issue in the public beta version of Studio 2.0 Issue date: 2009-08-31...
VMSA-2009-0011:VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0
VMSA-2009-0011 VMware Studio 2.0 addresses a security issue in the public beta version of Studio 2.0 VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0011 VMware Security Advisory Synopsis: VMware Studio 2.0 addresses a security issue in the public beta version of Studio 2...
FreeBSD Ports: firefox
The remote host is missing an update to the system as announced in the referenced advisory. VID 2e28cefb-2aee-11da-a263-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
