952 matches found
Fedora Update for nodejs-glob FEDORA-2013-12908
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for nodejs-config-chain FEDORA-2013-11780
Check for the Version of nodejs-config-chain OpenVAS Vulnerability Test Fedora Update for nodejs-config-chain FEDORA-2013-11780 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...
Fedora Update for nodejs-npm-registry-client FEDORA-2013-11780
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-3754
Unspecified vulnerability in the Solaris Cluster component in Oracle and Sun Systems Products Suite 3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to HA for TimesTen...
File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities
====== File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities Date: ===== 2013-05-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=939 VL-ID: ===== 939 Common Vulnerability Scoring System: ==================================== 5.9 Introduction: ============= You ha...
JVN#85804149: CLIP-MAIL vulnerable to cross-site scripting
CLIP-MAIL provided by KENT-WEB contains an issue in the webpage output of strings entered in the form, which may result in a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version accordin...
UBUNTU-CVE-2011-4604
The batsocketread function in net/batman-adv/icmpsocket.c in the Linux kernel before 3.3 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted batman-adv ICMP packet...
Fedora 19 : python3-3.3.2-2.fc19 (2013-8673)
Fix for CVE-2013-2099. New minor version of Python 3.3 fixing some regressions and bugs in 3.3.1. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Spike the server security dogs V3. 3 official version—Added the user-to vulnerability and early warning-the black bar safety net
The first few pictures ha, is the result of my test. Follow my test figure to see. 1. First determine the guard function in the“account security daemon”is open. ! 0 0 2. Check the code ! 2 2 3. Save As a bat format to run, the process runs in the security dog will appear to intercept the tips,...
File List 3.3 / 3.5 PRO XSS / LFI / File Upload
Title: ====== File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities Date: ===== 2013-05-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=939 VL-ID: ===== 939 Common Vulnerability Scoring System: ==================================== 5.9 Introduction: =============...
Linux Kernel 3.3.x 3.7.x (Arch Linux x86-64) - sock_diag_handlers[] Local Privilege Escalation (1)
Linux Kernel 3.3.x 3.7.x Arch Linux x86-64 - sockdiaghandlers Local Privilege Escalation 1 // archer.c // // 2012 [email protected] // // Works reliably against x86-64 3.3-3.7 arch. // // Tested against: // // Linux XXX 3.3.1-1-ARCH 1 SMP PREEMPT Tue Apr 3 06:46:17 UTC 2012 x8664 GNU/Linux // Linu...
Squid 'cachemgr.cgi'不完整修复远程拒绝服务漏洞
Bugtraq ID:57646 CVE ID: CVE-2013-0189 Squid是一款功能强大的代理服务器和Web缓存服务器。 Squid tools/cachemgr.cc存在多个内存泄露问题,允许远程攻击者通过提交非法Content-Length头,超长POST请求,和特制的验证凭据触发此漏洞,造成应用程序崩溃。此问题是由于未完整修复CVE-2012-5643引起的。 0 Squid 2.x Squid 3.x Squid 3.2.x Squid 3.3.x 厂商解决方案 用户可参考如下厂商提供的安全公告获得补丁信息:...
_08CMS 3.3 GBK 信息泄漏
No description provided by source...
Memory corruption
The utf-16 decoder in Python 3.1 through 3.3 does not update the alignedend variable after calling the unicodedecodecallerrorhandler function, which allows remote attackers to obtain sensitive information process memory or cause a denial of service memory corruption and crash via unspecified...
CVE-2012-2135
The utf-16 decoder in Python 3.1 through 3.3 does not update the alignedend variable after calling the unicodedecodecallerrorhandler function, which allows remote attackers to obtain sensitive information process memory or cause a denial of service memory corruption and crash via unspecified...
Appweb 3.1.x / 3.2.x / 3.3.x < 3.3.3 mprUrlEncode Function Heap Overflow Vulnerability
According to its banner, the version of Appweb installed on the remote host is 3.1.x, 3.2.x or 3.3.x earlier than 3.3.3. It is, therefore, potentially affected by a heap-based buffer overflow vulnerability caused by a casting error in the function 'mprUrlEncode' in the file 'src/mpr/mprLib.c'. No...
CMSimple 3.3 - index.php Cross-Site Scripting
CMSimple 3.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/52661/info CMSimple is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
CMSimple 3.3 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/52661/info CMSimple is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affect...
FreeBSD Ports: phpMyAdmin
The remote host is missing an update to the system as announced in the referenced advisory. VID 1f6ee708-0d22-11e1-b5bd-14dae938ec40 OpenVAS Vulnerability Test $ Description: Auto generated from VID 1f6ee708-0d22-11e1-b5bd-14dae938ec40 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
CVE-2011-1940
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.3.x before 3.3.10.1 and 3.4.x before 3.4.1 allow remote attackers to inject arbitrary web script or HTML via a crafted table name that triggers improper HTML rendering on a Tracking page, related to 1 libraries/tbllinks.inc.php and...