4628 matches found
List all Installed ODBC Driver over WMI - Windows
List all installed ODBC Driver over WMI if IIS installed. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WMI Antivirus Status (win)
Tests WMI AntiVirus Status. OpenVAS Vulnerability Test $Id: GSHBWMIAntivir.nasl 8177 2017-12-19 13:39:45Z emoss $ WMI AntiVirus Test Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net Set in an Workgroup Environment under Vista with enabled UAC th...
IIS Samplefiles and Scripte (Windows)
The script detects if IIS Samplefiles and Scripte are installed. OpenVAS Vulnerability Test $Id: GSHBWMIIISSamplefiles.nasl 7067 2017-09-06 11:50:33Z teissa $ IIS Samplefiles and Scripte Windows Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net S...
Get all Windows Admin Users and Groups over WMI (win)
Get all Windows non System Services and Eventlog Servicestate over WMI. OpenVAS Vulnerability Test $Id: GSHBWMIgetAdminUsers.nasl 7279 2017-09-26 13:40:36Z cfischer $ Get all Windows Admin Users and Groups over WMI win Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks GmbH,...
List Windows AD ClientSiteName - Windows
The script List Windows AD ClientSiteName Windows. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IIS Samplefiles and Scripts - Windows
The script detects if IIS Samplefiles and Scripts are installed. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Real World Security – Andy Weeks Interview
Andy Weeks, manager of risk and compliance for enterprise information security, at Humana Inc., one of the larger companies in the world, knows a thing or two about large-scale security implementations. And in a company whose customer data is one of its main assets, security is a corporate...
Real World Security – Larry Whiteside Interview
Like every other security executive in the health care industry, Larry Whiteside, CISO of the Visiting Nurse Service of New York, spends much of his time dealing with compliance-related issues. But the distributed nature of his user population means that he has sensitive patient data on thousands...
CVE-2009-3029
Cross-site scripting XSS vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote authenticated users to inject arbitrary web script or HTML via "external client input" that triggers crafted error messages...
Cross site scripting
Cross-site scripting XSS vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote authenticated users to inject arbitrary web script or HTML via "external client input" that triggers crafted error messages...
CVE-2009-3030
CVE-2009-3030 relates to Symantec SecurityExpressions Audit and Compliance Server (versions 4.1 and 4.1.1 and earlier) and covers multiple XSS/HTML-injection issues. The documented vulnerabilities arise from insufficient input validation and failing to properly encode error messages, allowing rem...
CVE-2009-3029
CVE-2009-3029 (and related CVE-2009-3030) affects Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier. The vulnerability is a cross-site scripting issue in the console, where external client input is not properly sanitized and some error messages are not encoded, enab...
Symantec SecurityExpressions Audit and Compliance Server Multiple XSS
Symantec SecurityExpressions Audit and Compliance Server is installed on the remote host. The installed version is affected by multiple cross-site scripting vulnerabilities. - The web console fails to sanitize user-supplied input to certain unspecified parameters. An authorized user may be able t...
Symantec SecurityExpressions Audit and Compliance Server Multiple XSS
Binary data 5206.prm...
[SECURITY] Fedora 11 Update: firefox-3.5.3-1.fc11
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 10 Update: firefox-3.0.14-1.fc10
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Alex Howard on Compliance, Breach Notification and the Rockefeller Bill
Dennis Fisher talks with Alex Howard, associate editor of Searchcompliance.com, about the burden compliance places on security staffs, the growing tide of breach notification laws and the misunderstandings surrounding the Rockefeller bill and the Internet kill switch. Download Subscribe to the...
Oracle 11g (11.1.0.6) Password Policy and Compliance
Many security standards require the tracking of users' password history to prevent password re-use. In Oracle 11g 11.1.0.6, if a security administrator has enabled 11g passwords exclusively then tracking password history is broken. This can affect compliance. This was addressed by Oracle in their...
Oracle 11g (11.1.0.6) Password Policy and Compliance
Many security standards require the tracking of users' password history to prevent password re-use. In Oracle 11g 11.1.0.6, if a security administrator has enabled 11g passwords exclusively then tracking password history is broken. This can affect compliance. This was addressed by Oracle in their...