MySQL 5.1 < 5.1.65 Multiple Vulnerabilities

The version of MySQL 5.1 installed on the remote host is earlier than 5.1.65 and is, therefore, affected by vulnerabilities in the following components : - Information Schema - Protocol - Server Optimizer - Server Replication C Tenable Network Security, Inc. include"compat.inc"; if description...

MySQL 5.1 < 5.1.64 Multiple Vulnerabilities

The version of MySQL 5.1 installed on the remote host is earlier than 5.1.64 and is, therefore, affected by vulnerabilities in the following components : - InnoDB - InnoDB Plugin - Server Full Text Search C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62637;...

MySQL Server 5.5.x <= 5.5.27 / 5.1.x <= 5.1.65 Multiple Unspecified Vulnerabilities

Binary data 801117.prm...

Apple TV < 5.1 Multiple Vulnerabilities

According to its banner, the remote Apple TV 2nd generation or later device has a version of iOS that is prior to 5.1. It is, therefore, reportedly affected by several vulnerabilities : - An uninitialized memory access issue in the handling of Sorenson encoded movie files could lead to arbitrary...

HP iNode Management Center iNodeMngChecker.exe Multiple Vulnerabilities

HP iNode Management Center is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Slackware Advisory SSA:2007-066-06 imagemagick

The remote host is missing an update as announced via advisory SSA:2007-066-06. OpenVAS Vulnerability Test $Id: esoftslkssa200706606.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Oracle MySQL 5.1.x 拒绝服务漏洞

BUGTRAQ ID: 55120 CVE ID: CVE-2012-2749 MySQL是一个小型关系型数据库管理系统，开发者为瑞典MySQLAB公司，在2008年1月16号被Sun公司收购。 MySQL 5.1.63之前的5.1.x版本和5.5.24之前的5.5.x版本在实现上存在安全漏洞，可允许已验证用户通过错误计算和排序索引造成拒绝服务，mysqld崩溃。 0 MySQL 5.1.x 厂商补丁： MySQL AB -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mysql.com/...

CVE-2012-4593

McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password requirement in certain situations involving attributes of the password file, which allows local users to bypass authentication by executing a command...

CVE-2012-2749

MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of service mysqld crash via vectors related to incorrect calculation and a sort order index...

CVE-2009-5026

The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running a newer version than the master, allows remote attackers to execute arbitrary SQL commands via custom comments...

CVE-2012-2102

CVE-2012-2102 affects MySQL 5.1.x (before 5.1.62) and 5.5.x (before 5.5.22). The issue allows a remote authenticated user to trigger a denial of service by deleting a row and issuing HANDLER READ NEXT, causing assertion failure and mysqld abort. Connected advisories indicate affected packages and...

Debian: Security Advisory (DSA-2496-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2496-1 (mysql-5.1)

The remote host is missing an update to mysql-5.1 announced via advisory DSA 2496-1. OpenVAS Vulnerability Test $Id: deb24961.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2496-1 mysql-5.1 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Design/Logic Flaw

The igmpsnooporibfillsourceupdate function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco Nexus 5000 series switches allows remote attackers to cause a denial of service device reload via IGMP packets, aka Bug ID CSCts46521...

Debian DSA-2512-1 : mono - missing input sanitising

Marcus Meissner discovered that the web server included in Mono performed insufficient sanitising of requests, resulting in cross-site scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...

MySQL Server 5.1 < 5.1.63 Multiple Vulnerabilities

Binary data 801134.prm...

Low: mysql51

Issue Overview: A flaw was found in the way MySQL processed HANDLER READ NEXT statements after deleting a record. A remote, authenticated attacker could use this flaw to provide such requests, causing mysqld to crash. This issue only caused a temporary denial of service, as mysqld was automatical...

Microsoft IIS - Short File/Folder Name Disclosure

PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19525.zip Paper: http://www.exploit-db.com/docs/19527.pdf Security Research - IIS Short File/Folder Name Disclosure Website : http://soroush.secproject.com/blog/ I. BACKGROUND --------------------- "IIS is a web...

Debian DSA-2496-1 : mysql-5.1 - several vulnerabilities

Due to the non-disclosure of security patch information from Oracle, we are forced to ship an upstream version update of MySQL 5.1. There are several known incompatible changes, which are listed in /usr/share/doc/mysql-server/NEWS.Debian.gz. Several issues have been discovered in the MySQL databa...

[SECURITY] [DSA 2496-1] mysql-5.1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2496-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 18, 2012 http://www.debian.org/security/faq -...