973 matches found
vBulletin多个产品'blog_post.php'安全绕过漏洞
vBulletin是一款基于PHP的应用程序 vBulletin blogpost.php脚本不正确检查权限，远程攻击者可以利用漏洞张贴博客日志 0 vBulletin 3.x vBulletin Publishing Suite 4.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： https://www.vbulletin.com/forum/showthread.php/394259 http://tracker.vbulletin.com/browse/VBIV-13921...
CVE-2011-4643
Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. dot dot in a URI to 1 Splunk Web or 2 the Splunkd HTTP Server, aka SPL-45243...
Adobe Flex SDK 'SWF' Files Cross-Site Scripting Vulnerability (Windows)
This host is installed with Adobe Flex SDK and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodadobeflexsdkswffilesxssvulnwin.nasl 5367 2017-02-20 14:16:52Z cfi $ Adobe Flex SDK 'SWF' Files Cross-Site Scripting Vulnerability Windows Authors: Madhuri D...
Mandriva Update for dhcp MDVSA-2011:182 (dhcp)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Design/Logic Flaw
dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service daemon crash via a crafted request packet...
CVE-2011-4539
dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service daemon crash via a crafted request packet...
CVE-2011-4539
CVE-2011-4539 affects ISC DHCP: dhcpd in 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 fails to properly handle regular expressions in dhcpd.conf, enabling remote attackers to cause a denial of service (daemon crash) via a crafted request packet. Public advisories and Nessus/OpenSSL patch ref...
CVE-2011-4539
dhcpd in ISC DHCP 4.x before 4.2.3-P1 and 4.1-ESV before 4.1-ESV-R4 does not properly handle regular expressions in dhcpd.conf, which allows remote attackers to cause a denial of service daemon crash via a crafted request packet...
CVE-2011-2461
CVE-2011-2461 affects the Adobe Flex SDK (3.x and 4.x before 4.6). An XSS vulnerability arises when loading modules from different domains, allowing remote attackers to inject script/HTML. Impact is XSS; CVSSv2 base score 4.3 (medium). Remediation: update to Flex SDK 4.6 or later as referenced by...
Mambo 4.x - 'Zorder' SQL Injection
Exploit Title : CMS 4.x.x Zorder SQL Injection Vul + Author : Kr4L BeNiM + Contact : www.facebook.com/kr4l.hacker + Date : November 13, 2011 + Software Link: http://mambo-developer.org + Category: Web Apps Vulnerability: SQL injection Vulnerability Exploit : - The "zorder" parameter was not...
CVE-2011-4030
The CVE-2011-4030 issue affects Plone CMFEditions 2.x in Plone 4.0.x–4.0.9, 4.1, and 4.2–4.2a2, where KwAsAttributes classes can be published, allowing remote attackers to access sub-objects via unspecified vectors. Root cause: CMFEditions did not prevent KwAsAttributes from being publishable. Im...
Jcow Social Networking Script 4.2 <= 5.2 Arbitrary Code Execution
Exploit for php platform in category web applications Exploit Title: Jcow CMS 4.x:4.2 Software Link: http://sourceforge.net/projects/jcow/files/jcow4/jcow.4.2.1.zip/download Version: 4.x:4.2 5.6.7.8:34441 at Sat Jun 04 00:00:44 +0000 2011 require 'msf/core' class Metasploit3 'JCow CMS Remote...
CVE-2011-2737
RSA enVision 3.x and 4.x prior to 4 SP4 P3 contain an arbitrary file retrieval vulnerability (CVE-2011-2737) that may allow unauthenticated remote attackers to read files via unspecified vectors. The issue is acknowledged in RSA ESA-2011-030, which recommends upgrading to RSA enVision 4 SP4 P3 as...
Mandriva Update for dhcp MDVSA-2011:128 (dhcp)
Check for the Version of dhcp OpenVAS Vulnerability Test Mandriva Update for dhcp MDVSA-2011:128 dhcp Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
PYSEC-2011-25
Unspecified vulnerability in 1 Zope 2.12.x before 2.12.19 and 2.13.x before 2.13.8, as used in Plone 4.x and other products, and 2 PloneHotfix20110720 for Plone 3.x allows attackers to gain privileges via unspecified vectors, related to a "highly serious vulnerability." NOTE: this vulnerability...
CVE-2011-2369
CVE-2011-2369 is a cross-site scripting vulnerability in SeaMonkey as described in NASL entry SeaMonkey
CVE-2011-2368
The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict write operations, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...
Security Alert : vBulletin 4.X Security SQL Injection & CSRF/XSRF Exploits available !
Security Alert : vBulletin 4.X - SQL Injection & CSRF/XSRF Exploits available ! Two Serious Security Flaws are detected in vBulletin 4.X Versions and also their Security SQL Injection & CSRF/XSRF Exploits are now also available. Impact of these Flaws: Lots of big Forums are on vBulletin 4.X...
CVE-2011-1789
The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware ESXi 4.x before 4.1 Update 1, and VMware ESX 4.x before 4.1 Update 1 does not have a digital signature, which might make it easier for remote attackers to...