1291 matches found
openSUSE Security Update : flash-player (openSUSE-SU-2011:0373-1)
Specially crafted Flash files could be exploited to execute arbitrary code CVE-2011-0611. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update flash-player-4399. The text description of this plugin...
SuSE 10 Security Update : dhcp (ZYPP Patch Number 7456)
A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0997 %NASLMINLEVEL 70300 C...
RHEL 5 / 6 : flash-plugin (RHSA-2011:0372)
The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:0372 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes one vulnerability in Ado...
Fedora 13 : kernel-2.6.34.7-63.fc13 (2010-18506)
Various security fixes and bug fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
Fedora 12 : horde-3.3.9-1.fc12 (2010-16592)
Fix 2 security bugs by upgrading to 3.3.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...
openSUSE Security Update : seamonkey (seamonkey-3428)
Mozilla SeaMonkey was updated to 2.0.10 to fix one critical security issue. MFSA 2010-73 / CVE-2010-3765: Morten Krkvik of Telenor SOC reported an exploit targeting particular versions of Firefox 3.6 on Windows XP that Telenor found while investigating an intrusion attempt on a customer network...
openSUSE Security Update : acroread (openSUSE-SU-2010:0359-1)
Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-1297, CVE-2010-1240, CVE-2010-1285, CVE-2010-1295, CVE-2010-2168, CVE-2010-2201, CVE-2010-2202, CVE-2010-2203, CVE-2010-2204, CVE-2010-2205, CVE-2010-2206, CVE-2010-2207, CVE-2010-2208,...
MS10-041: Vulnerability in Microsoft .NET Framework Could Allow Tampering (981343)
A data tampering vulnerability exists in the Microsoft .NET Framework that could allow an attacker to tamper with signed XML content without being detected. In custom applications, the security impact depends on the specific usage scenario. Scenarios in which signed XML messages are transmitted...
Symantec Alert Management System 2 RCE (SYM09-007)
Alert Management System 2 AMS2, an optional component included with multiple Symantec products, is installed on the remote Windows host. Versions prior to build 150 are affected by multiple stack-based buffer overflow conditions. A remote attacker can exploit these issues to crash the service or...
Linux Kernel 2.x sock_sendpage() Local Ring0 Root Exploit
No description provided by source. / dedicated to my best friend in the whole world, Robin Price the joke is in your hands just too easy -- some nice library functions for reuse here though credits to julien tinnes/tavis ormandy for the bug may want to remove the attributeregparm3 for 2.4 kernels...
Fedora 11 : squirrelmail-1.4.18-1.fc11 (2009-4875)
Tue May 12 2009 Michal Hlavinka - 1.4.18-1 - updated to 1.4.18 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
CVE-2009-1408
creationtimestamp| type| source ---|---|--- 2009-04-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8453...
Amaya 11.1 XHTML Parser Remote Buffer Overflow PoC
Exploit for unknown platform in category dos / poc ================================================== Amaya 11.1 XHTML Parser Remote Buffer Overflow PoC ================================================== =cicatriz ==advisories= / / / / // / / // / o / / .-/ =Amaya 11.1 XHTML Parser Buffer...
openSUSE 10 Security Update : NetworkManager-kde (NetworkManager-kde-6031)
The knetworkmanager configuration was too permissive and allowed any user to read secrets CVE-2009-0365. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update NetworkManager-kde-6031. The text...
ESET Remote Administrator < 3.0.105 Additional Report Settings XSS
ESET Remote Administrator is installed on the remote system. The installed version is less than version 3.0.105, and such versions are reportedly affected by an HTML injection vulnerability. An attacker can exploit this vulnerability to cause arbitrary HTML and script code to be executed with in...
CVE-2009-0405
creationtimestamp| type| source ---|---|--- 2009-01-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7901...
openSUSE 10 Security Update : acroread (acroread-5749)
The acroread package was update to fix several security vulnerabilities in the JavaScript engine. CVE-2008-2992, CVE-2008-2549, CVE-2008-4812, CVE-2008-4813, CVE-2008-4817, CVE-2008-4816, CVE-2008-4814, CVE-2008-4815 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
logzpodcast-sql.txt
Logz podcast CMS version 1.3.1 Remote sql inj download: http://sourceforge.net/project/showfiles.php?groupid=107225&packageid=178479&releaseid=635701 ---------------------------------------------------------- Discovered By: ZoRLu Date: 31.10.2008 Home: www.z0rlu.blogspot.com contact:...
MS08-059: Microsoft Host Integration Server (HIS) SNA RPC Request Remote Overflow (956695) (uncredentialed check)
The remote host has HIS Host Integration Server installed. The remote version of this product is affected by a code execution vulnerability in its RPC interface. An attacker could exploit this flaw to execute arbitrary code on the remote host by making rogue RPC queries. C Tenable Network Securit...