Vulnerabilities in Print Spooler Could Allow Remote Code Execution (961501)

This host is missing a critical security update according to Microsoft Bulletin MS09-022. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Apache Tomcat 6.0.18 - Form Authentication ExistingNon-Existing Username Enumeration

Apache Tomcat 6.0.18 - Form Authentication ExistingNon-Existing Username Enumeration source: https://www.securityfocus.com/bid/35196/info Apache Tomcat is prone to a username-enumeration weakness because it displays different responses to login attempts, depending on whether or not the username...

Lighttpd <= 1.4.23 'Trailing Slash' Information Disclosure Vulnerability

Lighttpd is prone to an information disclosure vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Sendmail 8.12.x - X-header Remote Heap Buffer Overflow (PoC)

Sendmail 8.12.x - X-header Remote Heap Buffer Overflow PoC source: https://www.securityfocus.com/bid/34944/info Sendmail is prone to a heap-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized buffer...

Nagios 3.0.6 - 'statuswml.cgi' Arbitrary Shell Command Injection

source: https://www.securityfocus.com/bid/35464/info Nagios is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Remote attackers can exploit this issue to execute arbitrary shell commands with the privileges of the user running th...

DotNetNuke 4.9.3 - 'ErrorPage.aspx' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35074/info DotNetNuke is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

Opera PDF Javascript Security Bypass Vulnerability (Windows)

The host is installed with Opera Web Browser and is prone to PDF Javascript Security Bypass Vulnerability. OpenVAS Vulnerability Test $Id: secpodoperapdfjsrestbypassvulnwin.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera PDF Javascript Security Bypass Vulnerability Windows Authors: Antu Sanadi...

Mozilla Firefox PDF JavaScript Restriction Bypass Vulnerability - Windows

Mozilla Firefox browser is prone to a PDF JavaScript restriction bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Eggdrop/Windrop 1.6.19 - ctcpbuf Remote Crash

eggdrop/windrop remote crash vulnerability This message: Message body More options Related messages: Next message Previous message Next in thread Replies From: Thomas Sader Date: Fri, 15 May 2009 05:54:08 +0200 Affected software ----------------- eggdrop 1.6.19 only, not 1.6.19+ctcpfix windrop...

Nortel Contact Center Manager - Administration Password Disclosure

Nortel Contact Center Manager - Administration Password Disclosure source: https://www.securityfocus.com/bid/34964/info Nortel Contact Center Manager Administration is prone to a password-disclosure vulnerability caused by a design error. Attackers can exploit this issue to gain access to the...

Microsoft Windows Media Player 11 - ScriptCommand Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/35335/info Microsoft Windows Media Player is prone to multiple information-disclosure vulnerabilities because it fails to properly restrict access to certain functionality when handling media files. An attacker can exploit these vulnerabilities to obtain...

PHP 5.3.2 - xml_utf8_decode() UTF-8 Input Validation

PHP 5.3.2 - xmlutf8decode UTF-8 Input Validation source: https://www.securityfocus.com/bid/44605/info PHP is prone to a vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow attackers to provide unexpected input and possibly bypass...

WebKit - XML External Entity Information Disclosure

WebKit - XML External Entity Information Disclosure source: https://www.securityfocus.com/bid/35321/info WebKit is prone to a remote information-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may aid in further attacks. NOTE: This issue was...

WebKit - JavaScript onload() Event Cross Domain Scripting

WebKit - JavaScript onload Event Cross Domain Scripting source: https://www.securityfocus.com/bid/35315/info WebKit is prone to a cross-domain scripting vulnerability because it fails to properly restrict the access of JavaScript code when loading new webpages. A remote attacker can exploit this...

WebKit - XML External Entity Information Disclosure

source: https://www.securityfocus.com/bid/35321/info WebKit is prone to a remote information-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may aid in further attacks. NOTE: This issue was previously covered in BID 35260 Apple Safari Prior to 4.0...

IceWarp Merak Mail Server 9.4.1 Groupware Component - Multiple SQL Injections

IceWarp Merak Mail Server 9.4.1 Groupware Component - Multiple SQL Injections source: https://www.securityfocus.com/bid/34820/info IceWarp Merak Mail Server is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL...

GlassFish Enterprise Server 2.1 - Admin Console /configuration/configuration.jsf URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied HTML and script code would run in the context of the affected site, potential...

GlassFish Enterprise Server 2.1 - Admin Console applicationsapplications.jsf URI Cross-Site Scripting

GlassFish Enterprise Server 2.1 - Admin Console applicationsapplications.jsf URI Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied...

GlassFish Enterprise Server 2.1 - Admin Console sysnetregistration.jsf URI Cross-Site Scripting

GlassFish Enterprise Server 2.1 - Admin Console sysnetregistration.jsf URI Cross-Site Scripting source: https://www.securityfocus.com/bid/34824/info GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input...

IceWarp Merak Mail Server 9.4.1 - cleanHTML() Cross-Site Scripting

IceWarp Merak Mail Server 9.4.1 - cleanHTML Cross-Site Scripting source: https://www.securityfocus.com/bid/34823/info IceWarp Merak Mail Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this...