CVE-2009-2993

The JavaScript for Acrobat API in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 does not properly implement the 1 Privileged Context and 2 Safe Path restrictions for unspecified JavaScript methods, which allows remote attackers to create arbitrary files, and...

OpenOffice.org Multiple Vulnerabilities - Oct09 (Windows)

The host has OpenOffice.org installed and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbopenofficemultvulnoct09.nasl 4869 2016-12-29 11:01:45Z teissa $ OpenOffice.org Multiple Vulnerabilities - Oct09 Windows Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networ...

OpenOffice.org Multiple Vulnerabilities (Oct 2009) - Windows

OpenOffice.org is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cyrus IMAPd buffer overflow vulnerability

Overview The Cyrus IMAP server contains a vulnerability that may allow an authenticated attacker to execute code. Description The Cyrus IMAP mail server supports the SIEVE mail filtering language. Cyrus IMAP versions 2.2 through 2.3.14 contain a buffer overflow vulnerability that may be triggered...

CVE-2008-7173

The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service physical damage, modify coffee settings, and possibly execute code via a crafted request. NOTE: this issue ...

Design/Logic Flaw

The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service physical damage, modify coffee settings, and possibly execute code via a crafted request. NOTE: this issue ...

CVE-2008-7173

The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service physical damage, modify coffee settings, and possibly execute code via a crafted request. NOTE: this issue ...

CVE-2008-7153

The CVE-2008-7153 entry describes a SQL injection in Docebo: the autoDetectRegion function in doceboCore/lib/lib.regset.php affects Docebo 3.5.0.3 and earlier, enabling remote attackers to execute arbitrary SQL via the Accept-Language HTTP header. The advisory notes this could be leveraged to run...

Gentoo Security Advisory GLSA 200907-13 (pulseaudio)

The remote host is missing updates announced in advisory GLSA 200907-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Cacti Multiple Input Validation Vulnerabilities

Cacti is prone to multiple unspecified input-validation vulnerabilities, including: - Multiple cross-site scripting vulnerabilities - Multiple SQL-injection vulnerabilities - An HTTP response-splitting vulnerability. Attackers may exploit these vulnerabilities to influence or misrepresent how web...

Mandriva Update for libmodplug MDKSA-2007:001 (libmodplug)

Check for the Version of libmodplug OpenVAS Vulnerability Test Mandriva Update for libmodplug MDKSA-2007:001 libmodplug Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Ubuntu Update for ktorrent vulnerability USN-436-2

Ubuntu Update for Linux kernel vulnerabilities USN-436-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN4362.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for ktorrent vulnerability USN-436-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for evolution vulnerabilities USN-615-1

Ubuntu Update for Linux kernel vulnerabilities USN-615-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6151.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for evolution vulnerabilities USN-615-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

DEBIAN-CVE-2008-3547

Buffer overflow in the server in OpenTTD 0.6.1 and earlier allows remote authenticated users to cause a denial of service persistent game disruption or possibly execute arbitrary code via vectors involving many long names for "companies and clients."...

CentOS Update for cups CESA-2008:1028 centos3 i386

Check for the Version of cups OpenVAS Vulnerability Test CentOS Update for cups CESA-2008:1028 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

DEBIAN-CVE-2009-0415

Untrusted search path vulnerability in trickle 1.07 allows local users to execute arbitrary code via a Trojan horse trickle-overload.so in the current working directory, which is referenced in the LDPRELOAD path...

MS Windows 2003 Token Kidnapping Local Exploit PoC

No description provided by source. From http://nomoreroot.blogspot.com/2008/10/windows-2003-poc-exploit-for-token.html It has been a long time since Token Kidnapping presentation http://www.argeniss.com/research/TokenKidnapping.pdf was published so I decided to release a PoC exploit for Win2k3 th...

FreeBSD Ports: sup

The remote host is missing an update to the system as announced in the referenced advisory. VID 2c5757f4-88bf-11d9-8720-0007e900f87b OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Code injection

The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with arbitrary extensions, and possibly execute arbitrary code, via a crafted feed that allows upload of files with arbitrary extensions...

Wireshark 1.0.0 - Multiple Denial of Service Vulnerabilities

Wireshark 1.0.0 - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/30020/info Wireshark is prone to multiple vulnerabilities, including an information-disclosure issue and denial-of-service issues. Exploiting these issues may allow attackers to obtain potential...