CVE-2015-4225

Cisco APIC on Nexus 9000 devices (versions 1.0(1.110a) and 1.0(1e)) contains a vulnerability where RBAC health scoring is not properly implemented, allowing remote authenticated users to read sensitive information via unspecified vectors (Bug CSCuq77485). The issue stems from RBAC protection arou...

OracleVM 2.1 : libxml2 (OVMSA-2009-0018)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add bug347316.patch to backport fix for bug347316 from upstream version - Add libxml2-enterprise.patch and update logos in tarball - Fix a couple of crash CVE-2009-2414, CVE-2009-2416 - Resolves:...

CVE-2014-4225

Technical details for CVE-2014-4225 are not publicly provided in the supplied documents. The description remains unspecified beyond a local-access vulnerability in Oracle Solaris 10 related to patch installation scripts. Monitor for updates and published advisories.

CA eTrust PestPatrol ActiveX Control Buffer Overflow

No description provided by source. $Id: etrustpestscan.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

SA-CONTRIB-2013-062 - RESTful Web Services (RESTWS) - Access Bypass

This module enables you to expose Drupal entities as RESTful web services. It provides a machine-readable interface to exchange resources in JSON, XML and RDF. The module doesn't sufficiently check for field level access when preforming entity write operations on POST and PUT requests. It also do...

Oracle Linux 5 : libxml2 (ELSA-2008-0988)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0988 advisory. - two patches for size overflows problems CVE-2008-4225 and CVE-2008-4226 Tenable has extracted the preceding description block directly from the Oracl...

Solaris 8 (sparc) : 127680-07

Sun Management Center 4.0: Patch for Solaris 8. Date this patch was last updated by Sun : Nov/25/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 127681-07

Sun Management Center 4.0: Patch for Solaris 9. Date this patch was last updated by Sun : Nov/25/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (x86) : 123922-11

Sun Management Center 3.6.1x86: Patch for Solaris 9. Date this patch was last updated by Sun : Nov/25/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc...

Solaris 9 (x86) : 127682-07

Sun Management Center 4.0: Patch for Solaris 9x86. Date this patch was last updated by Sun : Nov/25/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc';...

Fedora 10 : libxml2-2.7.2-2.fc10 (2008-10038)

Fixes a couple of security issues when overflowing text data size of buffer size. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Scientific Linux Security Update : libxml2 on SL3.x, SL4.x, SL5.x i386/x86_64

An integer overflow flaw causing a heap-based buffer overflow was found in the libxml2 XML parser. If an application linked against libxml2 processed untrusted, malformed XML content, it could cause the application to crash or, possibly, execute arbitrary code. CVE-2008-4226 A denial of service...

CVE-2010-4225

Unspecified vulnerability in the modmono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx ASP.NET applications via unknown vectors related to an "unloading bug."...

CVE-2010-4225

Unspecified vulnerability in the modmono module for XSP in Mono 2.8.x before 2.8.2 allows remote attackers to obtain the source code for .aspx ASP.NET applications via unknown vectors related to an "unloading bug."...

CVE-2010-4225

CVE-2010-4225 concerns the mod_mono XSP component in Mono 2.8.x before 2.8.2. The issue is an unloading-bug that enables remote attackers to obtain the source code of ASP.NET (.aspx) applications. Affected software is Mono with the mod_mono XSP module; specific impact is source-code disclosure. R...

CVE-2009-4225

creationtimestamp| type| source ---|---|--- 2010-11-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16630 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/etrustpestscan.rb 2025-02-06 03:13:39+00:00|...

CVE-2009-4225

This CVE (CVE-2009-4225) concerns CA eTrust PestPatrol’s ActiveX control (ppctl.dll). A stack-based buffer overflow affects the 5.6.7.9 version, exploitable by sending a long argument to Initialize, enabling remote code execution. Documented references point to the vulnerable ActiveX control in P...

CA eTrust PestPatrol ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in CA eTrust PestPatrol. When sending an overly long string to the Initialize property of ppctl.dll 5.6.7.9 an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

Solaris Update for XML and XSLT libraries 125732-05

Check for the Version of XML and XSLT libraries OpenVAS Vulnerability Test Solaris Update for XML and XSLT libraries 125732-05 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...

SLES10: Security update for libxml2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: libxml2 libxml2-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...