20292 matches found
HP LeftHand Virtual SAN Appliance hydra Ping Processing Buffer Overflow (CVE-2012-3285)
A stack buffer overflow vulnerability exists in HP LeftHand Virtual SAN Appliance. The vulnerability is due to insufficient input validation on target hostname or IP address of a Ping request sent to the hydra service which listens by default on port 13838/TCP. A remote attacker can exploit this...
VMware OVF Tool Format String Vulnerability (CVE-2012-3569)
A format string vulnerability has been reported in VMware OVF Tool...
PHP php_register_variable_ex Function Code Execution - Improved performance (CVE-2012-0830)
A memory corruption vulnerability has been reported in PHP. The vulnerability is due to improper handling of an error condition. A remote attacker could exploit this vulnerability by sending a malicious request to the target service. Successful exploitation would allow an attacker to inject and...
BlackBerry Enterprise Server TIFF Image Processing Vulnerabilities (KB33425)
The version of BlackBerry Enterprise Server on the remote host reportedly contains multiple remote code execution vulnerabilities in its image processing library : - The 'TIFFReadDirectory' function in 'tifdirread.c' is affected by a buffer overflow vulnerability that can be triggered via a...
CVE-2012-5938
The issue (CVE-2012-5938) affects IBM InfoSphere Information Server versions 8.1, 8.5, 8.7 and 9.1 on UNIX/Linux. During installation, files are created with insufficient permissions/ownership, allowing local users to bypass access restrictions via standard filesystem operations. The IBM Security...
CentOS 6 : krb5 (CESA-2013:0656)
Updated krb5 packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availab...
Cool PDF Image Stream Buffer Overflow Vulnerability
This Metasploit module exploits a stack buffer overflow in Cool PDF Reader prior to version 3.0.2.256. The vulnerability is triggered when opening a malformed PDF file that contains a specially crafted image stream. This Metasploit module has been tested successfully on Cool PDF 3.0.2.256 over...
CVE-2012-4223
CVE-2012-4223 entry is rejected and not used per initial description.
CVE-2012-4224
CVE-2012-4224 is rejected and does not represent an active vulnerability entry.
Symantec Messaging Gateway Save.do Cross Site Request Forgery - Improved Performance (CVE-2012-0308)
A cross-site request forgery CSRF vulnerability has been reported in Symantec Messaging Gateway. The vulnerability is due to errors while validating user input. A remote attacker can exploit this vulnerability by enticing a user to open a specially crafted URI. Successful exploitation would allow...
Security fix for the ALT Linux 7 package exim version 4.76-alt3
March 19, 2013 Michael Shigorin 4.76-alt3 - NMU: + applied CVE-2012-5671.patch + dropped mailq symlink duplicating sendmail-common's one ALT28006...
Ubuntu: Security Advisory (USN-1765-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RedHat Update for krb5 RHSA-2013:0656-01
Check for the Version of krb5 OpenVAS Vulnerability Test RedHat Update for krb5 RHSA-2013:0656-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
RHEL 6 : krb5 (RHSA-2013:0656)
Updated krb5 packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availab...
Fedora Update for krb5 FEDORA-2013-3116
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for krb5-devel CESA-2013:0656 centos6
Check for the Version of krb5-devel OpenVAS Vulnerability Test CentOS Update for krb5-devel CESA-2013:0656 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
[SECURITY] [DSA 2648-1] firebird2.5 security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2648-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 15, 2013 http://www.debian.org/security/faq -...
CVE-2012-5764: IBM WebSphere Commerce password information disclosure
IBM WebSphere Commerce (V7.0 Feature Pack 5 with Bazaarvoice) stores two plain text passwords in a configuration file that could be accessible to a local authenticated user. This could allow the attacker to obtain sensitive information and potentially launch further attacks against the affected s...
Samsung Kies < 2.5.0.12094_27_11 Multiple ActiveX Control Vulnerabilities
The version of Samsung Kies ActiveX controls installed on the remote host is affected by multiple vulnerabilities : - A vulnerability in GetDataTable method in 'DCAPARAGONGM.dll' is affected by a NULL pointer dereference that could be used to perform a denial of service of the program...