Fedora 15 : drupal7-7.6-1.fc15 (2011-9845)

Remember to log in as the admin user prior to RPM upgrade to perform DB upgrade. - Advisory ID: DRUPAL-SA-CORE-2011-003 - Project: Drupal core 1 - Version: 7.x - Date: 2011-July-27 - Security risk: Less critical 2 - Exploitable from: Remote - Vulnerability: Access bypass -------- DESCRIPTION Note...

HP Network Automation CVE-2011-2402跨站脚本漏洞

Bugtraq ID: 48922 CVE ID：CVE-2011-2402 HP Network Automation是一款自动化网络配置管理工具。 运行在Linux, Solaris和Windows平台下的HP Network Automation存在安全漏洞，允许攻击者进行跨站脚本攻击，攻击者可以获得敏感信息或劫持用户会话。 HP Network Automation 9.10 HP Network Automation 9.0 HP Network Automation 7.6 HP Network Automation 7.5 HP Network Automation 7.2...

Spring Source OXM Remote OS Command Injection when XStream and IBM JRE are used

Reference: http://static.springsource.org/spring/docs/3.0.x/spring-framework-reference/html/oxm.htmld0e26722 Product: Spring Source OXM Object/XML Mapping Vendor: VMware Vulnerable Version: 3.0.4 only when XStream and IBM JRE are used Status: Fixed Vendor Notification: 12 October 2010 Vendor Fix:...

CVE-2011-1421

EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to gain privileges via unknown vectors...

CVE-2011-1421

EMC NetWorker 7.5.x (before 7.5.4.3) and 7.6.x (before 7.6.1.5) are affected when the client push feature is enabled. The issue is weak permissions set on an unspecified file, enabling local users to gain elevated privileges. Exploitation details are not provided in the sources. Remediation is to...

Windows Fax Cover Page Editor Remote Code Execution Vulnerability (2527308)

This host is missing a critical security update according to Microsoft Bulletin MS11-024. OpenVAS Vulnerability Test $Id: secpodms11-024.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Fax Cover Page Editor Remote Code Execution Vulnerability 2527308 Authors: Antu Sanadi Updated By: Antu sanadi...

Advisory: Apple QuickTime Image Description Atom Sign Extension Memory Corruption

INTRODUCTION ============ According to QuickTime's specification, The sample description atom STSD stores information that allows QuickTime to decode samples in the media. It has the following structure: 0 DWORD Size 4 DWORD Type 8 BYTE Version 9 BYTE3 FLAGS 12 DWORD Number of entries 16 DWORD...

Solaris Update for pam_roles.so 127033-01

Check for the Version of pamroles.so OpenVAS Vulnerability Test Solaris Update for pamroles.so 127033-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for hplip MDKSA-2007:201 (hplip)

Check for the Version of hplip OpenVAS Vulnerability Test Mandriva Update for hplip MDKSA-2007:201 hplip Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

QuickTime < 7.6 Multiple Vulnerabilities

Binary data 4817.prm...

FreeBSD Security Advisory (FreeBSD-SA-06:13.sendmail.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:13.sendmail.asc ADV FreeBSD-SA-06:13.sendmail.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

PHP-Nuke Platinium 7.6.b.5 - Remote Code Execution

Date: 02/07/08 Note I modified a bit phpsploit for this exploit, because PHP Nuke plays with REQUESTURI var ... Requirements registerglobals=On phpreter phpreter is really easy to use: You can change mode using "mode=", with = sql, php or cmd If you want to understand how it work ... read the cod...

Immunity Canvas: CITECT_SCADA

Name| citectscada ---|--- CVE| CVE-2008-2639 Exploit Pack| CANVAS Description| CitectSCADA ODBC Buffer Overflow Notes| CVE Name: CVE-2008-2639 VENDOR: Citect Repeatability: References: http://www.coresecurity.com/content/citect-scada-odbc-service-vulnerability CVE Url:...

CVE-2008-1680

CVE-2008-1680 affects PHP-Nuke Platinum 7.6.b.5, where a direct request to maintenance/index.php allows remote attackers to disclose configuration information, including settings such as magic_quotes_gpc. The issue is categorized as information disclosure with a CVSS v2 base score of 5.0 (Network...

Fedora 8 : glib2-2.14.6-1.fc8 (2008-1533)

PCRE 7.6 fixed following bug: A character class containing a very large number of characters with codepoints greater than 255 in UTF-8 mode, of course caused a buffer overflow. The GLib release 2.14.6 updates the included copy of PCRE to version 7.6. Note that Tenable Network Security has extract...

CVE-2007-6004

Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in an artikel action or 2 the katid parameter in a produk action...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in an artikel action or 2 the katid parameter in a produk action...

CVE-2007-6004

CVE-2007-6004 affects Toko Instan 7.6. Multiple SQL injection weaknesses exist in index.php, exploitable via (1) id parameter in an artikel action and (2) katid parameter in a produk action, enabling remote arbitrary SQL execution. No remediation details are provided in the supplied documents.

CVE-2007-6004

Multiple SQL injection vulnerabilities in index.php in Toko Instan 7.6 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in an artikel action or 2 the katid parameter in a produk action...

Toko Instan 7.6 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= Toko Instan 7.6 Multiple Remote SQL Injection Vulnerabilities ============================================================= Indonesian Newhack Security Advisory...