PHP 5.5.x < 5.5.33 Multiple Vulnerabilities

According to its banner, the version of PHP running on the remote web server is 5.5.x prior to 5.5.33. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in file ext/wddx/wddx.c in the phpwddxpopelement function when handling XML data. An unauthenticated,...

Xeams 4.5 Build 5755 CSRF / Cross Site Scripting

Exploit Title: Multiple vulnerabilities in Xeams 4.5 Build 5755 CSRF/Stored XSS Date: 07-05-2015 Exploit Author: Marlow Tannhauser Contact: [email protected] Vendor Homepage: http://www.synametrics.com Software Link: http://web.synametrics.com/XeamsDownload.htm Version: 4.5 Build 5755...

Xeams 4.5 Build 5755 - Multiple Vulnerabilities

Exploit Title: Multiple vulnerabilities in Xeams 4.5 Build 5755 CSRF/Stored XSS Date: 07-05-2015 Exploit Author: Marlow Tannhauser Contact: [email protected] Vendor Homepage: http://www.synametrics.com Software Link: http://web.synametrics.com/XeamsDownload.htm Version: 4.5 Build 5755...

Debian DSA-3141-1 : wireshark - security update

Multiple vulnerabilities were discovered in the dissectors/parsers for SSL/TLS and DEC DNA, which could result in denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3141. T...

CVE-2013-3141

CVE-2013-3141 affects Microsoft Internet Explorer 8 and 9. The vulnerability =&gt; remote attackers can trigger memory corruption via a crafted web site, enabling arbitrary code execution or a denial of service. The issue is distinct from CVE-2013-3110. Affected products: IE 8/9; root cause descr...

CVE-2013-3141

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3110...

CVE-2012-3227

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0, 10.0.2, 10.1.0, 10.2.0, 10.2.2, 10.3.0, 10.5.0, and 11.0.0 through 11.2.0 allows remote authenticated users to affect integrity, related to BASE, a different vulnerability th...

CVE-2012-3141

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0, 10.0.2, 10.1.0, 10.2.0, 10.2.2, 10.3.0, 10.5.0, and 11.0.0 through 11.2.0 allows remote authenticated users to affect integrity, related to BASE, a different vulnerability th...

CVE-2012-3141

CVE-2012-3141 affects Oracle FLEXCUBE Universal Banking in Oracle Financial Services Software versions 10.0.0, 10.0.2, 10.1.0, 10.2.0, 10.2.2, 10.3.0, 10.5.0, and 11.0.0 through 11.2.0. The vulnerability is described as unspecified, allowing remote authenticated users to affect integrity, and is ...

CVE-2011-3141

CVE-2011-3141 affects Invensys Wonderware InBatch, specifically the BatchField ActiveX control. Vulnerable versions include InBatch 8.1 SP1, 9.0, and 9.0 SP1. The root cause is a buffer overflow in the BatchField ActiveX control, allowing a remote attacker to cause a denial of service and potenti...

CVE-2010-3141

CVE-2010-3141 describes an Untrusted Search Path (DLL hijacking) vulnerability in Microsoft PowerPoint 2010. An attacker could trigger arbitrary code execution by placing aTrojan horse pptimpconv.dll in the same folder as an affected file type (e.g., .ppt, .pptx, .odp, etc.). The root cause is un...

SLES10: Security update for ethereal

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal ethereal-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for ethereal

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal ethereal-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES9: Security update for ethereal

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5033780 within the Su...

SLES9: Security update for ethereal

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5033780 within the Su...

SuSE9 Security Update : ethereal (YOU Patch Number 12225)

Various vulnerabilities have been fixed in ethereal: CVE-2008-3137, CVE-2008-3138, CVE-2008-3139, CVE-2008-3140, CVE-2008-3141, CVE-2008-3145 and CVE-2008-3146. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

openSUSE Security Update : wireshark (wireshark-149)

Various vulnerabilities have been fixed in wireshark: CVE-2008-3137, CVE-2008-3138, CVE-2008-3139, CVE-2008-3140, CVE-2008-3141, CVE-2008-3145 and CVE-2008-3146. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUS...

Mandriva Linux Security Advisory : wireshark (MDVSA-2008:152)

A number of vulnerabilities were discovered in Wireshark that could cause it to crash while processing malicious packets CVE-2008-3137, CVE-2008-3138, CVE-2008-3139, CVE-2008-3140, CVE-2008-3141, CVE-2008-3145. This update provides Wireshark 1.0.2, which is not vulnerable to these issues...

CentOS Update for wireshark CESA-2008:0890 centos4 x86_64

Check for the Version of wireshark OpenVAS Vulnerability Test CentOS Update for wireshark CESA-2008:0890 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

CentOS Update for wireshark CESA-2008:0890 centos3 i386

Check for the Version of wireshark OpenVAS Vulnerability Test CentOS Update for wireshark CESA-2008:0890 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...