Lucene search
+L

3217 matches found

securityvulns
securityvulns
added 2010/02/10 12:0 a.m.53 views

Microsoft Data Analyzer ActiveX Control memory corruption

No description provided...

9.3CVSS2.4AI score0.28762EPSS
SaveExploits2References1Affected Software1
OpenVAS
OpenVAS
added 2010/02/10 12:0 a.m.44 views

Microsoft Data Analyzer ActiveX Control Vulnerability (978262)

This host is missing a critical security update according to Microsoft Bulletin MS10-008. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS5AI score0.28762EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2010/02/09 12:0 a.m.43 views

MS10-008: Cumulative Security Update of ActiveX Kill Bits (978262)

The Microsoft Data Analyzer ActiveX control has a remote code execution vulnerability. The system may also have one or more vulnerable third-party ActiveX controls installed. A remote attacker could exploit these issues by tricking a user into requesting a maliciously crafted web page, resulting ...

9.3CVSS5.7AI score0.28762EPSS
SaveExploits4References4
Symantec
Symantec
added 2010/02/09 12:0 a.m.20 views

Microsoft Data Analyzer 'max3activex.dll' ActiveX Control Remote Code Execution Vulnerability

Description The Microsoft Data Analyzer is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context of the application...

SaveExploits0References1Affected Software11
Check Point Advisories
Check Point Advisories
added 2010/02/09 12:0 a.m.43 views

Microsoft Data Analyzer ActiveX Control Remote Code Execution (MS10-008; CVE-2010-0252)

Microsoft Data Analyzer is a data analysis software for Microsoft Office XP. Microsoft Data Analyzer allows analyzing and visualizing data and data trends, and is integrated with SQL Server Analysis Services. Reports and graphs generated could be saved as Excel or PowerPoint files. A remote code...

9.3CVSS7.9AI score0.28762EPSS
SaveExploits2
NVD
NVD
added 2010/02/05 10:30 p.m.22 views

CVE-2003-1577

Sun ONE aka iPlanet Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files, and conduct cross-site scripting XSS attacks involving the iPlanet Log Analyzer, via an HTTP request in...

2.6CVSS5.8AI score0.01077EPSS
SaveExploits1References3
Fedora
Fedora
added 2009/12/23 9:33 p.m.28 views

[SECURITY] Fedora 12 Update: wireshark-1.2.5-3.fc12

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

9.3CVSS1.7AI score0.06768EPSS
SaveExploits3
Packet Storm
Packet Storm
added 2009/12/11 12:0 a.m.31 views

Netflow Looping Denial Of Service

Automated Looping Problem on NetFlow Analyzer 7 professional Plus code by Asheesh kumar Mani Tripathi Credit by Asheesh Anaconda Company AKSIT Services Vulnerable Software:ManageEngine NetFlow Analyzer 7 professional Plus Date:19-Nov-2009 Tested on Window os Browser Mozilla/IE8 About...

SaveExploits0
OpenVAS
OpenVAS
added 2009/12/10 12:0 a.m.38 views

Debian Security Advisory DSA 1942-1 (wireshark)

The remote host is missing an update to wireshark announced via advisory DSA 1942-1. OpenVAS Vulnerability Test $Id: deb19421.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1942-1 wireshark Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

9.3CVSS0.8AI score0.09698EPSS
SaveExploits5
Fedora
Fedora
added 2009/12/04 11:39 p.m.56 views

[SECURITY] Fedora 10 Update: wireshark-1.2.1-1.fc10

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

10CVSS1.7AI score0.1523EPSS
SaveExploits6
Fedora
Fedora
added 2009/12/01 4:46 a.m.14 views

[SECURITY] Fedora 11 Update: awstats-6.95-1.fc11

Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...

0.5AI score
SaveExploits0
Fedora
Fedora
added 2009/12/01 4:44 a.m.38 views

[SECURITY] Fedora 10 Update: awstats-6.95-1.fc10

Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...

4.3CVSS0.5AI score0.05597EPSS
SaveExploits2
Fedora
Fedora
added 2009/12/01 4:24 a.m.199 views

[SECURITY] Fedora 12 Update: awstats-6.95-1.fc12

Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...

0.5AI score
SaveExploits0
Packet Storm
Packet Storm
added 2009/11/26 12:0 a.m.44 views

eIQNetworks ESA License Manager LICMGR_ADDLICENSE Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'eIQNetworks...

10CVSS0.73149EPSS
SaveExploits12
Packet Storm
Packet Storm
added 2009/11/26 12:0 a.m.35 views

eIQNetworks ESA Topology DELETEDEVICE Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'eIQNetworks...

10CVSS0.4AI score0.73149EPSS
SaveExploits12
Prion
Prion
added 2009/11/06 3:30 p.m.27 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in jspui/index.jsp in ManageEngine Netflow Analyzer 7.5 build 7500 allow remote attackers to inject arbitrary web script or HTML via the 1 view and 2 section parameters. NOTE: the provenance of this information is unknown; the details are obtained...

4.3CVSS5.8AI score0.01642EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2009/11/06 3:0 p.m.64 views

CVE-2009-3903

CVE-2009-3903 : ManageEngine NetFlow Analyzer 7.5 build 7500 contains XSS in jspui/index.jsp. The vulnerability allows remote injection of arbitrary web script/HTML via the GET/POST parameters (view, section). No remediation details are provided in the supplied documents.

4.3CVSS6.2AI score0.01642EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2009/11/06 3:0 p.m.32 views

CVE-2009-3903

Multiple cross-site scripting XSS vulnerabilities in jspui/index.jsp in ManageEngine Netflow Analyzer 7.5 build 7500 allow remote attackers to inject arbitrary web script or HTML via the 1 view and 2 section parameters. NOTE: the provenance of this information is unknown; the details are obtained...

6.2AI score0.01642EPSS
SaveExploits1References4
Fedora
Fedora
added 2009/11/04 12:2 p.m.41 views

[SECURITY] Fedora 11 Update: wireshark-1.2.2-1.fc11

Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains command-line utilities, contains plugins and documentation for wireshark. A graphical user interface is packaged separately to GTK+ package...

7.8CVSS1.7AI score0.09698EPSS
SaveExploits6
ThreatPost
ThreatPost
added 2009/09/17 4:47 p.m.9 views

Microsoft Releases New SDL Security Tools

Microsoft’s Security Development Lifecycle SDL team has released two new security tools to help developers test and verify the security of software programs. The tools — BinScope Binary Analyzer and MiniFuzz File Fuzzer — are available for download at no cost. The BinScope Binary Analyzer can be...

0.4AI score
SaveExploits0References5
Rows per page
Query Builder