Lucene search
+L

3920 matches found

OpenVAS
OpenVAS
•added 2013/01/21 12:00 a.m.•45 views

CentOS Update for gnome-vfs2 CESA-2013:0131 centos5

Check for the Version of gnome-vfs2 OpenVAS Vulnerability Test CentOS Update for gnome-vfs2 CESA-2013:0131 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

4.3CVSS6.1AI score0.08437EPSS
SaveExploits2References2
OSV
OSV
•added 2012/12/04 12:00 a.m.•38 views

DSA-2581-1 mysql-5.1 - several

Bulletin has no description...

9CVSS5.3AI score0.23956EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2012/11/16 12:00 a.m.•47 views

CoSoSys Endpoint Protector Detection

The remote web server hosts CoSoSys Endpoint Protector, a web-based data loss prevention application. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62941; scriptversion"1.7"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"CoSoSys Endpoint Protector Detection";...

5.4AI score
SaveExploits0References1
ThreatPost
ThreatPost
•added 2012/11/14 8:01 p.m.•17 views

Stolen NASA Laptop Puts 'Large Number' of Employees at Risk

NASA has enacted new policies to protect employee and other sensitive information after a laptop was stolen from an employee’s locked vehicle, exposing records of personal information on a “large number” of NASA employees. The laptop was not protected by whole disk encryption, NASA officials said...

1.2AI score
SaveExploits0References3
ThreatPost
ThreatPost
•added 2012/10/31 5:03 p.m.•17 views

South Carolina Data Breach Casts Spotlight on Lack of Encryption, Stolen Credentials

South Carolina governor Nikki Haley said a mouthful this week when she spilled a dirty industry secret that Social Security numbers are generally not encrypted by state agencies. Reeling from a Department of Revenue data breach that leaked 3.6 million Social Security and credit card numbers as we...

0.3AI score
SaveExploits0References7
Packet Storm
Packet Storm
•added 2012/10/26 12:00 a.m.•44 views

Allscripts Homecare Client Local Memory Corruption

Title: Allscripts Homecare Client Local Memory Corruption tableinfo.ff2 Date: 10/25/12 Author: G13 Software Link: http://www.allscripts.com/en/solutions/post-acute-solutions/homecare/show/overview.html Version: 6.1.0, 7.0.1 Category: Application local Tested on: Windows 7 Pro 64 Bit dc585...

0.8AI score
SaveExploits0
htbridge
htbridge
•added 2012/09/12 12:00 a.m.•58 views

Untrusted Pointer Dereference Vulnerability in Corel WordPerfect X6

High-Tech Bridge Security Research Lab discovered an untrusted pointer dereference vulnerability in Corel WordPerfect. Opening of a malicious WPD WordPerfect Document causes immediate application crash, resulting in a loss of all unsaved current application data of the user. 1 Untrusted Pointer...

2.6CVSS5.5AI score0.0207EPSS
SaveExploits1Affected Software1
NVD
NVD
•added 2012/08/22 10:42 a.m.•20 views

CVE-2009-5117

The Web Post Protection feature in McAfee Host Data Loss Prevention DLP 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture mode is enabled, allows local users to obtain sensitive information from web traffic by reading unspecified files...

1.9CVSS5.8AI score0.00294EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2012/08/22 10:00 a.m.•38 views

CVE-2009-5117

The Web Post Protection feature in McAfee Host Data Loss Prevention DLP 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture mode is enabled, allows local users to obtain sensitive information from web traffic by reading unspecified files...

5.8AI score0.00294EPSS
SaveExploits0References2
CVE
CVE
•added 2012/08/22 10:00 a.m.•59 views

CVE-2009-5117

The CVE-2009-5117 entry concerns McAfee Host Data Loss Prevention (DLP) with its Web Post Protection feature. Versions 3.x prior to 3.0.100.10 and 9.x prior to 9.0.0.422, when HTTP Capture mode is enabled, may let local users obtain sensitive information from web traffic by reading unspecified fi...

1.9CVSS6AI score0.00294EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2012/08/22 12:00 a.m.•6 views

PT-2012-1282

Name of the Vulnerable Software and Affected Versions McAfee Host Data Loss Prevention DLP versions 3.x before 3.0.100.10 McAfee Host Data Loss Prevention DLP versions 9.x before 9.0.0.422 Description The issue allows local users to obtain sensitive information from web traffic by reading...

1.9CVSS0.00294EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/08/22 12:00 a.m.•6 views

CVE-2009-5117: Exposure of Sensitive Information to an Unauthorized Actor

The Web Post Protection feature in McAfee Host Data Loss Prevention DLP 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture mode is enabled, allows local users to obtain sensitive information from web traffic by reading unspecified files...

1.9CVSS5.8AI score0.00294EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2012/08/10 12:00 a.m.•54 views

Debian Security Advisory DSA 2496-1 (mysql-5.1)

The remote host is missing an update to mysql-5.1 announced via advisory DSA 2496-1. OpenVAS Vulnerability Test $Id: deb24961.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2496-1 mysql-5.1 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

6.8CVSS0.3AI score0.965EPSS
SaveExploits12
Packet Storm
Packet Storm
•added 2012/08/02 12:00 a.m.•38 views

Barracuda EMail Security 2.0.2 Filter Bypass / XSS

Title: ====== Barracuda EMail Security 2.0.2 - Multiple Web Vulnerabilities Date: ===== 2012-08-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=621 http://www.vulnerability-lab.com/getcontent.php?id=630 Barracuda Networks Security ID: BNSEC-304 VL-ID: ===== 621 Commo...

0.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2012/08/01 12:00 a.m.•35 views

Scientific Linux Security Update : openoffice.org on SL6.x i386/x86_64

An array index error and an integer signedness error were found in the way OpenOffice.org parsed certain Rich Text Format RTF files. An attacker could use these flaws to create a specially crafted RTF file that, when opened, would cause OpenOffice.org to crash or, possibly, execute arbitrary code...

9.3CVSS6.3AI score0.10731EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2012/06/26 12:00 a.m.•39 views

GLSA-201206-31 : Linux-PAM: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201206-31 Linux-PAM: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Linux-PAM. Please review the CVE identifiers referenced below for details. Impact : A local attacker could use specially crafted files ...

7.2CVSS5.6AI score0.00696EPSS
SaveExploits0References11
Saint
Saint
•added 2012/06/11 12:00 a.m.•56 views

Symantec Web Gateway access_log PHP Injection

Added: 06/11/2012 CVE: CVE-2012-0297 BID: 53444 OSVDB: 82023 Background Symantec Web Gateway protects organizations against multiple types of Web-based malware and prevents data loss over the Web. Problem Symantec Web Gateway fails to properly sanitize user-supplied input passed to...

10CVSS7.1AI score0.72955EPSS
SaveExploits23
OpenVAS
OpenVAS
•added 2012/04/30 12:00 a.m.•40 views

Debian Security Advisory DSA 2429-1 (mysql-5.1)

The remote host is missing an update to mysql-5.1 announced via advisory DSA 2429-1. OpenVAS Vulnerability Test $Id: deb24291.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2429-1 mysql-5.1 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

5.5CVSS5.9AI score0.03041EPSS
SaveExploits0
Packet Storm
Packet Storm
•added 2012/04/12 12:00 a.m.•22 views

Seditio 170 Cross Site Request Forgery / SQL Injection

============================================================ Vulnerable Software: Seditio 170 seditio-build170.20120302 Downloaded from:http://www.neocrome.net/files/code/seditio-build170.20120302.rar MD5 SUM:beb6adc6abb56f947698c1efdbae9430 seditio-build170.20120302.rar...

0.5AI score
SaveExploits0
Drupal
Drupal
•added 2012/04/11 12:00 a.m.•26 views

SA-CONTRIB-2012-059 - Autosave - Cross Site Request Forgery

CVE: CVE-2012-2097 This module enables snapshots of your node edit form to be saved in the background while you are editing to help prevent the data from being lost. The module doesn't sufficiently protect against a user being tricked into submitting saved results to a node. Versions affected...

6.8CVSS6.3AI score0.00933EPSS
SaveExploits1References11
Rows per page
Query Builder