CVE-2011-1849

HP Intelligent Management Center (IMC) 5.0 before E0101L02 is affected by CVE-2011-1849 in tftpserver.exe, enabling remote attackers to create/overwrite files and potentially execute arbitrary code via a crafted WRQ request. The vulnerability is part of a family of IMC issues (CVE-2011-1848 to CV...

Debian Security Advisory DSA 2191-1 (proftpd-dfsg)

The remote host is missing an update to proftpd-dfsg announced via advisory DSA 2191-1. OpenVAS Vulnerability Test $Id: deb21911.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2191-1 proftpd-dfsg Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft In...

OPEN IT OverLook 'title.php' Cross Site Scripting Vulnerability

OverLook is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openit:overlook";...

OPEN IT OverLook 'title.php' Cross Site Scripting Vulnerability

This host is running OverLook and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodoverlookxssvuln.nasl 5668 2017-03-21 14:16:34Z cfi $ OPEN IT OverLook 'title.php' Cross Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...

Cross site scripting

Cross-site scripting XSS vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitrary web script or HTML via the frame parameter...

CVE-2010-4792

Cross-site scripting XSS vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitrary web script or HTML via the frame parameter...

CVE-2010-4792

OPEN IT OverLook 5.0 contains a cross-site scripting (XSS) vulnerability in title.php that can be triggered via the frame parameter to inject arbitrary web script/HTML. This is the same issue described across multiple sources (OpenVAS NASL, NVD listing). The CVSS base score is 4.3 (Medium) with n...

Google Chrome 'WebKit' CSS Implementation DoS Vulnerability (Windows)

The host is installed Google Chrome and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromecssimpdosvulnwin.nasl 7015 2017-08-28 11:51:24Z teissa $ Google Chrome 'WebKit' CSS Implementation DoS Vulnerability Windows Authors: Madhuri D Copyright: Copyright c...

MIT Kerberos kadmind版本字符串处理远程拒绝服务漏洞

Bugtraq ID: 47310 Kerberos是一款广泛使用的使用强壮的加密来验证客户端和服务器端的网络协议。MIT Kerberos 5是开源Kerberos实现。 处理部分报文时kadmind存在一个错误，向TCP 749端口发送查询版本的特制报文可使进程释放非法内存指针，使守护程序崩溃。 MIT Kerberos 5 1.8.3 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian...

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-1230) Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel due to a NULL-pointer dereference. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete...

Audio Editor Pro 5.0 Buffer Overflow

Title: Audio Editor Pro v5.0 .ogg Buffer Overflow Vulnerability Author : anT!-Tr0J4n Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Greetz : GlaDiatOr ; Coffin Of Evil ;The Sword ; R3d-D3v1L thanks : 1337day team : r0073r, Sid3^effects ,L0rd CruSad3r ,SeeMe ,gunslinger ,Sn!pEr.S!Te ,...

Victory FTP Server 5.0 - Denial of Service

Victory FTP Server 5.0 - Denial of Service !/usr/bin/python xxx xxx xxxxxxxxxxx xxxxxxxxxxx xxxxxxxxxxx xxx xxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxx xxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxxxx xxx xxx xxx xxx xxx xxx xxxxxx xxx xxx xxx xxx xxx xxx xxx xxxxxxxx xxxxxxxx xxxxxxxxx...

Mandriva Update for mysql MDVA-2011:005 (mysql)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

MDVA-2011:005 : mysql

This is a maintenance and bugfix release that upgrades mysql to the latest 5.0 and 5.1 versions which solves numerous upstream bugs. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:...

CVE-2011-0738

MyProxy 5.0 through 5.2, as used in Globus Toolkit 5.0.0 through 5.0.2, does not properly verify the 1 hostname or 2 identity in the X.509 certificate for the myproxy-server, which allows remote attackers to spoof the server and conduct man-in-the-middle MITM attacks via a crafted certificate whe...

Debian DSA-2155-1 : freetype - several vulnerabilities

Two buffer overflows were found in the Freetype font library, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2155. The text itself is...

HDWiKi V 5.0 local include vulnerability 0Day-vulnerability warning-the black bar safety net

Release date: 2011-01. 2 3 Publishing author: HYrz Affected versions: HDWiKi V 5.0 Official website: http://kaiyuan.hudong.com Vulnerability type: a file that contains Vulnerability description: From the source code see there is indeed a problem,we just Upload a picture of the Trojan can be norma...

Fedora Update for php FEDORA-2011-0329

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

MySQL Mysqld Multiple Denial Of Service Vulnerabilities

MySQL is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mysql:mysql";...

Code injection

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service server crash via a query that uses the 1 GREATEST or 2 LEAST function with a mixed list of numeric and LONGBLOB arguments, which is not properly handled when the...