Oracle Database Multiple Vulnerabilities (January 2011 CPU)

The remote Oracle database server is missing the January 2011 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Client System Analyzer - Cluster Verify Utility - Database Vault - Oracle Spatial - Scheduler Agent - UIX %NASLMINLEVEL...

Fedora Update for wireshark FEDORA-2011-0167

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2011-0167 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

[SECURITY] Fedora 14 Update: wireshark-1.4.2-2.fc14

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

Wireshark 1.4.3 & Wireshark 1.2.14 Latest Version !

"Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education." This update fixes many vulnerabilities such as the one with MAC-LTE dissector and the ENTTEC dissector. The following protocols have been updated – AMQP, ASN.1...

Adaptive Security Analyzer IIS : A Tool to Protect Windows Based Web Servers !

Adaptive Security Analyzer IIS or the ASA IIS protects Windows-based web servers from known and unknown vulnerabilities like Directory Traversal, Buffer Overflow, Parser Evasion, High-bit Shellcode, Remote Data Services, In addition to the above, it also protects them from various types of intern...

Microsoft Data Analyzer 'max3activex.dll' ActiveX控件远程代码执行漏洞

Bugraq ID: 38045 CVE ID：CVE-2010-0252 CNCVE ID：CNCVE-20100252 Microsoft Data Analyzer是一款用于Microsoft Office的数据分析软件。 Microsoft Data Analyzer ActiveX control max3activex.dll存在一个未明错误，构建恶意WEB页，诱使用户访问，可导致系统状态破坏，执行任意代码。 Microsoft Windows XP Tablet PC Edition SP3 Microsoft Windows XP Tablet PC Edition SP...

ManageEngine EventLog Analyzer Multiple Cross-site Scripting (XSS) Vulnerabilities

Title: ManageEngine EventLog Analyzer Multiple Cross-site Scripting XSS Vulnerabilities Risk CVSS2 Base Score: Low 3.9 Solutionary ID: SERT-VDN-1001 CVE ID: Pending Solutionary disclosure URL: http://www.solutionary.com/index/SERT/Vuln-Disclosures/ManageEngine-XSS-vulnerabilities.html Product:...

ManageEngine EventLog Analyzer 6.1 - Multiple Cross-Site Scripting Vulnerabilities

ManageEngine EventLog Analyzer 6.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/45334/info ManageEngine EventLog Analyzer is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker m...

ManageEngine EventLog Analyzer 6.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45334/info ManageEngine EventLog Analyzer is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

The Windows System State Analyzer tool !

It has been a long time since Microsoft came out with this nifty little tool that could help you find what has changed on a system. It allows you to take snapshots and compare them before and after taking the snapshot. The basic functionality of the System State Analyzer tool is to allow you to...

[eVuln.com] Cookie authentication bypass in Alguest

New eVuln Advisory: Cookie authentication bypass in Alguest Summary: http://evuln.com/vulns/152/summary.html Details: http://evuln.com/vulns/152/description.html -----------Summary----------- eVuln ID: EV0152 Software: Alguest Vendor: n/a Version: 1.1c-patched Critical Level: high Type:...

[SECURITY] [DSA-2127-1] New wireshark packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2127-1 [email protected] http://www.debian.org/security/ Stefan Fritsch November 28, 2010 http://www.debian.org/security/faq -...

DSA-2127-1 wireshark - denial of service

Bulletin has no description...

[eVuln.com] URL and Title XSS in AxsLinks

New eVuln Advisory: URL and Title XSS in AxsLinks http://evuln.com/vulns/139/summary.html -----------Summary----------- eVuln ID: EV0139 Software: AxsLinks Vendor: AXScripts Version: 0.3 Critical Level: medium Type: Cross Site Scripting Status: Unpatched. No reply from developers PoC: Not availab...

[eVuln.com] report.cgi SQL inj in Hot Links SQL (CGI version)

New eVuln Advisory: report.cgi SQL inj in Hot Links SQL http://evuln.com/vulns/141/summary.html -----------Summary----------- eVuln ID: EV0141 Software: Hot Links SQL 3 Vendor: Mrcgiguy Version: 3.2.0 Critical Level: medium Type: SQL injection Status: Unpatched. No reply from developers PoC:...

Hot Links SQL report.cgi SQL Injection

New eVuln Advisory: report.cgi SQL inj in Hot Links SQL http://evuln.com/vulns/141/summary.html -----------Summary----------- eVuln ID: EV0141 Software: Hot Links SQL 3 Vendor: Mrcgiguy Version: 3.2.0 Critical Level: medium Type: SQL injection Status: Unpatched. No reply from developers PoC:...

Wireshark 1.4.2 & Wireshark 1.2.13 - new version released !

"Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education." The following protocols have been updated – AgentX, ANCP, DIAMETER, HTTP, IP, LDSS, MIME, NBNS, PROFINET, SIP, TCP, Telnet, ZigBee. This update also fixes many...

Ethereal-Network Peotocol Analyzer v099.0 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =============================================================== Ethereal-Network Peotocol Analyzer v099.0 DLL Hijacking Exploit ===============================================================...

eIQNetworks ESA - License Manager LICMGR_ADDLICENSE Overflow (Metasploit)

$Id: eiqnetworksesa.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

CVE-2010-2366

Cross-site scripting XSS vulnerability in futomi CGI Cafe Access Analyzer CGI Professional, and Standard 4.0.2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...