Apple Mac OS X Multiple Vulnerabilities -08 (Sep 2014)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-5178

CVE-2014-5178 affects Easy File Sharing (EFS) Web Server 6.8. The vulnerability is cross-site scripting (XSS) triggered by the content parameter during topic creation or when posting an answer, exploitable by remote authenticated users. The provided documents do not specify a patch or a remediati...

Kemana Directory 1.5.6 Remote Code Execution Vulnerability

Kemana Directory suffers from an authenticated arbitrary code execution. The vulnerability is caused due to the improper verification of uploaded files in several modules thru several POST parameters. This can be exploited to execute arbitrary PHP code by uploading a malicious PHP script file tha...

Kemana Directory 1.5.6 Remote Code Execution

Kemana Directory 1.5.6 Remote Code Execution Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with Kemana. Unique Kemana's features including: CMS engine based...

CVE-2012-5178

Cross-site request forgery CSRF vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that complete a purchase...

CVE-2012-5178

CVE-2012-5178 affects the Welcart WordPress plugin up to version 1.2.1 (pre-1.2.2). It is a CSRF vulnerability that allows an attacker to hijack a logged-in user’s authentication to complete a purchase. The issue arises in requests that finalize a purchase; no exploit details are provided in the ...

CVE-2011-5178

Infoblox NetMRI is affected by CVE-2011-5178: multiple cross-site scripting (XSS) vulnerabilities in netmri/config/userAdmin/login.tdf, exploitable via the (1) eulaAccepted or (2) mode parameter. Affected: NetMRI 6.0.2.42, 6.1.2, 6.2.1 and earlier. Root cause is input handling in the login page ...

CVE-2010-5178

ThreatFire 4.7.0.17 on Windows XP is affected by a race-condition vulnerability that can bypass kernel-mode hook handlers via KHOBE/argument-switch memory changes during hook execution, allowing local code execution that could evade signature-based detection. Affected component: ThreatFire’s hook...

Gentoo Security Advisory GLSA 200903-30 (opera)

The remote host is missing updates announced in advisory GLSA 200903-30. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200903-30 (opera)

The remote host is missing updates announced in advisory GLSA 200903-30. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

FreeBSD Ports: opera, linux-opera

The remote host is missing an update to the system as announced in the referenced advisory. VID 225bc349-ce10-11dd-a721-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 225bc349-ce10-11dd-a721-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: opera, linux-opera

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

DSquare Exploit Pack: D2SEC_OPERAHEAP

Name| d2secoperaheap ---|--- CVE| CVE-2008-5178 Exploit Pack| D2ExploitPack Description| Opera Web Browser file:// Heap Overflow Notes|...

CVE-2008-5178

Heap-based buffer overflow in Opera 9.62 on Windows allows remote attackers to execute arbitrary code via a long file:// URI. NOTE: this might overlap CVE-2008-5680...

CVE-2008-5178

Opera 9.62 on Windows is affected by a heap-based buffer overflow when processing long file:// URLs (CVE-2008-5178). Connected advisories (Gentoo GLSA 200903-30 and related Nessus/OpenVAS entries) confirm multiple CVEs in Opera from Dec 2008, including CVE-2008-5679, CV8-5680, CVE-2008-5681/2/3, ...

CVE-2008-5178

creationtimestamp| type| source ---|---|--- 2008-11-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7135...

CVE-2007-5178

contrib/mxglancesdesc.php in the mxglance 2.3.3 module for mxBB places a critical security check within a comment because of a missing comment delimiter, which allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via a URL in the mxrootpath parameter...

CVE-2007-5178

The CVE describes a vulnerability in the mx_glance 2.3.3 module for mxBB where a missing delimiter inside a security check placed within a comment enables remote file inclusion (RFI) and arbitrary PHP code execution via a URL in the mx_root_path parameter. Affected software is mx_glance 2.3.3 for...

CVE-2007-5178

contrib/mxglancesdesc.php in the mxglance 2.3.3 module for mxBB places a critical security check within a comment because of a missing comment delimiter, which allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via a URL in the mxrootpath parameter...

Ipswitch Instant Messaging Client Detection

The remote service is an Ipswitch IM Client, the client portion of Ipswitch Instant Messaging, a secure, instant messaging product targeted at businesses and running on Windows. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if...