Lucene search
+L

2913 matches found

Veeam
Veeam
added 2012/09/18 12:0 a.m.16 views

Failed to parse "-quiescedsnap"

Challenge After you upgrade to VMware vSphere 4.1 Update 3, a new line is added to virtual machine configuration files .vmx. The line makes the VM configuration files invalid. As a result, Veeam Backup & Replication jobs fail. Solution The issue has been resolved in build 6.1.0.205. For details,...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2012/09/18 12:0 a.m.36 views

SuSE 10 Security Update : IBM Java (ZYPP Patch Number 8283)

IBM Java 1.5.0 was updated to SR14 fixing bugs and security issues. http://www.ibm.com/developerworks/java/jdk/alerts/ Also three bugs have been fixed : - fix bnc771808: create symlink /usr/bin/javaws properly - fix bnc666744: mark all configuration files as %confignoreplace - fix bnc773021: add...

10CVSS8.3AI score0.05983EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2012/09/17 12:0 a.m.30 views

SuSE 10 Security Update : IBM Java (ZYPP Patch Number 8281)

IBM Java 1.4.2 was updated to SR13 FP13 fixing bugs and security issues. http://www.ibm.com/developerworks/java/jdk/alerts/ Also the following bug has been fixed : - fix bnc666744: mark all configuration files as %confignoreplace %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

10CVSS7.9AI score0.05983EPSS
SaveExploits0References8
OpenVAS
OpenVAS
added 2012/09/10 12:0 a.m.21 views

Slackware: Security Advisory (SSA:2006-081-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.6CVSS6.4AI score0.28144EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2012/09/06 12:0 a.m.16 views

Mandrake Linux Security Advisory : joe (MDKSA-2001:026)

The joe text editor looks for configuration files in the current working directory, the user's home directory, and finally in /etc/joe. A malicious user could create their own .joerc configuration file and attempt to get other users to use it. If this were to happen, the user could potentially...

4.6CVSS5.6AI score0.00742EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2012/09/06 12:0 a.m.21 views

Mandrake Linux Security Advisory : joe (MDKSA-2000:072)

When exiting joe in a non-standard way such as a system crash, closing an xterm, or a network connection going down, joe will unconditionally append its open buffers to the file DEADJOE. This can be exploited by the creation of DEADJOE symlinks in directories where root would normally use joe. In...

5.5CVSS5.5AI score0.0056EPSS
SaveExploits1References1
Packet Storm
Packet Storm
added 2012/09/05 12:0 a.m.28 views

QNAP Turbo NAS 3.7.3 File Disclosure

Vulnerability: Multiple Path Injection Product: QNAP Turbo NAS Vendor: QNAP Version affected: = 3.7.3 build 20120801 Status: Unpatched Website: http://web.qnap.com/prodetailfeature.asp?pid=202 Discovered by: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it This...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
added 2012/08/30 12:0 a.m.18 views

Fedora Update for perl-Config-IniFiles FEDORA-2012-7763

Check for the Version of perl-Config-IniFiles OpenVAS Vulnerability Test Fedora Update for perl-Config-IniFiles FEDORA-2012-7763 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

3.6CVSS6.4AI score0.00504EPSS
SaveExploits2References2
Zero Day Initiative
Zero Day Initiative
added 2012/08/29 12:0 a.m.23 views

(0Day) HP SiteScope SOAP Call loadFileContent Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists because HP SiteScope allows unauthenticated SOAP calls to be made to the SiteScope service. One ...

10CVSS8.4AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2012/08/29 12:0 a.m.63 views

(0Day) HP SiteScope SOAP Call getFileInternal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP SiteScope. Authentication is not required to exploit this vulnerability. The specific flaw exists because HP SiteScope allows unauthenticated SOAP calls to be made to the SiteScope service. One ...

10CVSS8.4AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2012/08/22 12:0 a.m.30 views

Cisco AnyConnect VPN Client Arbitrary Program Instantiation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco AnyConnect VPN Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists due to...

9CVSS2.5AI score0.03885EPSS
SaveExploits0References1
Ubuntu
Ubuntu
added 2012/08/20 10:1 p.m.52 views

USN-1543-1: Config-IniFiles vulnerability

It was discovered that the perl Config::IniFiles module created temporary files in an unsafe manner. A local user with write access to the directory containing a configuration file that Config-IniFiles manipulates could exploit this to overwrite arbitrary files...

3.6CVSS5.4AI score0.00504EPSS
SaveExploits2
Symantec
Symantec
added 2012/08/14 12:0 a.m.39 views

Microsoft Windows Print Spooler CVE-2012-1851 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the Print Spooler service. Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges, which can result in the complete compromise of affected computers. Technologies Affected...

10CVSS4.1AI score0.65637EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.19 views

Scientific Linux Security Update : lynx on SL3.x, SL4.x, SL5.x i386/x86_64

An arbitrary command execution flaw was found in the Lynx 'lynxcgi:' URI handler. An attacker could create a web page redirecting to a malicious URL that could execute arbitrary code as the user running Lynx in the non-default 'Advanced' user mode. CVE-2008-4690 Note: In these updated lynx...

10CVSS7.9AI score0.0506EPSS
SaveExploits2References3
RedHat Linux
RedHat Linux
added 2012/07/03 8:58 a.m.38 views

Moderate: Red Hat Security Advisory: mod_cluster security update

Updated modcluster packages that fix one security issue are now available for JBoss Enterprise Application Platform 5.1.2 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CV...

4.3CVSS5.8AI score0.02592EPSS
SaveExploits0References5
OSV
OSV
added 2012/06/27 9:55 p.m.3 views

DEBIAN-CVE-2012-2451

The Config::IniFiles module before 2.71 for Perl creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack. NOTE: some of these details are obtained from third party information. NOTE: it has been reported that this might only be...

3.6CVSS6.7AI score0.00504EPSS
SaveExploits2References1
securityvulns
securityvulns
added 2012/06/25 12:0 a.m.28 views

Western Digital ShareSpace information leakage

It's possible to access configuration files via Web interface...

2.8AI score
SaveExploits0References1
Prion
Prion
added 2012/06/21 3:55 p.m.12 views

Code injection

libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted configuration files and execute arbitrary code via the GSSAPIMECHCONF environment variable, as demonstrated using mount.nfs...

6.2CVSS7.5AI score0.0044EPSS
SaveExploits0References12Affected Software2
Debian CVE
Debian CVE
added 2012/06/21 3:0 p.m.49 views

CVE-2011-2709

libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted configuration files and execute arbitrary code via the GSSAPIMECHCONF environment variable, as demonstrated using mount.nfs...

6.2CVSS7AI score0.0044EPSS
SaveExploits0
Cvelist
Cvelist
added 2012/06/21 3:0 p.m.32 views

CVE-2011-2709

libgssapi and libgssglue before 0.4 do not properly check privileges, which allows local users to load untrusted configuration files and execute arbitrary code via the GSSAPIMECHCONF environment variable, as demonstrated using mount.nfs...

6.9AI score0.0044EPSS
SaveExploits0References12
Rows per page
Query Builder