2672 matches found
VMSA-2011-0003 : Third-party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
a. vCenter Server and vCenter Update Manager update Microsoft SQL Server 2005 Express Edition to Service Pack 3 Microsoft SQL Server 2005 Express Edition SQL Express distributed with vCenter Server 4.1 Update 1 and vCenter Update Manager 4.1 Update 1 is upgraded from SQL Express Service Pack 2 to...
RoomWizard Credential Disclosure
% Advisory Name: RoomWizard Default Password and Sync Connector Credential Leak % Date: 2010-08-16 % Appliance/SW: RoomWizard Web-based room scheduling system % Versions: Tested on Firmware 3.2.3 Model RW10 % Author: Sean Lam % Vendor Status: Vendor Contacted % CVE Candidate: CVE-2010-0214 %...
GetSimple CMS 2.01 / 2.02 Credential Disclosure
Researcher: Michael Brooks Affecting: GetSimple CMS 2.01 and 2.02 Fixed:2.03 Vulnerability: Administrative Credentials Disclosure Vendor's Homepage: http://code.google.com/p/get-simple-cms download url for 2.01: http://www.box.net/get-simple/1/30435008/399754548 download svn for 2.02beta: svn...
vBulletin 3.8.6 Credential Disclosure
Versions Affected: 3.8.6 Only! Info: Content publishing, search, security, and morevBulletin has it all. Whether its available features, support, or ease-of-use, vBulletin offers the most for your money. Learn more about what makes vBulletin the choice for people who are serious about creating...
Drupal Twitter Module Credential Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The full text of this advisory can also be found at http://www.madirish.net/?article=447 Description of Vulnerability: - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL that...
BEA WebLogic Admin Console Cross Site Scripting (CVE-2005-1747)
BEA WebLogic Server is an enterprise-class Java Application Server platform. WebLogic is typically used as the platform for large enterprise web applications. To reduce management complexity in large installations, WebLogic Servers are grouped into domains. A WebLogic Server domain is a logically...
Samba < 3.0.37 / 3.2.15 / 3.3.8 / 3.4.2 Multiple Vulnerabilities
Binary data 5194.prm...
HyperVM - File Permissions Credential Disclosure
HyperVM is a virtualization application that runs off a host node and can provide several Virtual Private Servers. There is a previously unreported vulnerability in HyperVM/Kloxo. It was originally documented in ISSUE 14 by an anonymous author: http://www.milw0rm.com/exploits/8880 It turns out th...
HyperVM - File Permissions Credential Disclosure
HyperVM - File Permissions Credential Disclosure HyperVM is a virtualization application that runs off a host node and can provide several Virtual Private Servers. There is a previously unreported vulnerability in HyperVM/Kloxo. It was originally documented in ISSUE 14 by an anonymous author:...
Debian Security Advisory DSA 1856-1 (mantis)
The remote host is missing an update to mantis announced via advisory DSA 1856-1. OpenVAS Vulnerability Test $Id: deb18561.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1856-1 mantis Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
fetchmail security announcement fetchmail-SA-2009-01 (CVE-2009-2666)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 fetchmail-SA-2009-01: Improper SSL certificate subject verification Topics: Improper SSL certificate subject verification Author: Matthias Andree Version: 1.0 Announced: 2009-08-06 Type: Allows undetected Man-in-the-middle attacks against SSL/TLS...
openSUSE Security Update : gvim (gvim-561)
The VI Improved editor vim was updated to version 7.2.108 to fix various security problems and other bugs. CVE-2008-4677: The netrw plugin sent credentials to all servers. CVE-2009-0316: The python support used a search path including the current directory, allowing code injection when python cod...
Default credentials
The CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows attackers to discover a 1 username or 2 password via unspecified vectors...
openSUSE 10 Security Update : gvim (gvim-6023)
The VI Improved editor vim was updated to version 7.2.108 to fix various security problems and other bugs. CVE-2008-4677: The netrw plugin sent credentials to all servers. CVE-2009-0316: The python support used a search path including the current directory, allowing code injection when python cod...
pPIM 1.0 Multiple Remote Vulnerabilities
No description provided by source. - -= pPIM Multiple Vulnerabilities =- Version Tested: pPIM 1.0 Vendor notified Full details can also be found at http://www.lampsecurity.org/node/18 Author: Justin C. Klein Keane [email protected] Description pPIM...
pPIM 1.0 - Multiple Vulnerabilities
-= pPIM Multiple Vulnerabilities =- Version Tested: pPIM 1.0 Vendor notified Full details can also be found at http://www.lampsecurity.org/node/18 Author: Justin C. Klein Keane Description pPIM http://www.phlatline.org/index.php?page=prod-ppim is a Personal Information Management application...
ZDI-08-025: Symantec Altiris Deployment Solution Domain Credential Disclosure Vulnerability
ZDI-08-025: Symantec Altiris Deployment Solution Domain Credential Disclosure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-025 May 15, 2008 -- Affected Vendors: Symantec -- Affected Products: Symantec Altiris Deployment Solution -- TippingPointTM IPS Customer Protection:...
Docebo <= 3.5.0.3 (lib.regset.php/non-blind) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================== Docebo = 4.1 PHP 5.X needed by Docebo regardless of php.ini settings no benchmark quickly coded to perform credentials disclosure...
Firefly Media Server Limited Directory Traversal Admin Credential Disclosure
The remote host is running Firefly Media Server, also known as mt-daapd, a media streaming server. The version of Firefly Media Server installed on the remote Windows host allows an attacker to retrieve arbitrary files, possibly bypassing authentication, from the parent directory of Firefly's...
Eurologon CMS files.php Arbitrary File Download Vulnerability
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...