Microsoft Visual Studio Team Foundation Server XSS (MS12-061; CVE-2012-1892)

A reflected XSS vulnerability has been reported in Visual Studio Team Foundation Server...

Slackware Advisory SSA:2004-111-01 xine security update

The remote host is missing an update as announced via advisory SSA:2004-111-01. OpenVAS Vulnerability Test $Id: esoftslkssa200411101.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Ubuntu Update for gimp USN-1559-1

Ubuntu Update for Linux kernel vulnerabilities USN-1559-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15591.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for gimp USN-1559-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

MS12-061: Vulnerability in Visual Studio Team Foundation Server Could Allow Elevation of Privilege (2719584)

The remote host is running a version of Microsoft Visual Studio Team Foundation Server 2010 that is affected by a cross-site scripting vulnerability. An attacker who successfully exploited this vulnerability could take any action that the targeted user could take on the site. C Tenable Network...

MS12-061:Vulnerability in Visual Studio Team Foundation Server could allow elevation of privilege: September 11, 2012

None None...

Fedora Update for libtasn1 FEDORA-2012-4357

Check for the Version of libtasn1 OpenVAS Vulnerability Test Fedora Update for libtasn1 FEDORA-2012-4357 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Apache Fixes Two Security Flaws in Version 2.4.3

The Apache Software Foundation has fixed two vulnerabilities in its ubiquitous Web server, including a cross-site scripting bug that could enable an attacker to upload files to a remote server. The new version of the Apache HTTP Server also includes updates that resolve dozens of other,...

Scientific Linux Security Update : ca-certificates on SL6.x

This package contains the set of CA certificates chosen by the Mozilla Foundation for use with the Internet Public Key Infrastructure PKI. It was found that a Certificate Authority CA issued fraudulent HTTPS certificates. This update removes that CA's root certificate from the ca-certificates...

EFF: New Cybersecurity Bill Better, Still Unnecessary

The controversial Lieberman-Collins Cybersecurity Act has been scrapped and replaced by a new bill that online rights advocates still consider unnecessary, but which they also acknowledge is a vast improvement on the slew of other bills that have cropped up in recent months. Thankfully, the...

CVE-2012-1861

CVE-2012-1861 is an XSS vulnerability in Microsoft SharePoint 2010 (Gold/SP1), SharePoint Foundation 2010 (Gold/SP1), and Office Web Apps 2010 (Gold/SP1) where attacker-controlled JavaScript in a URL can execute in the user’s browser. Public sources (OpenVAS/Nessus/Tenable entry MS12-050) referen...

Microsoft SharePoint CVE-2012-1863 Cross Site Scripting Vulnerability

Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...

RedHat Update for ca-certificates RHSA-2011:1248-01

Check for the Version of ca-certificates OpenVAS Vulnerability Test RedHat Update for ca-certificates RHSA-2011:1248-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Apache Sling 2.1.0 Denial Of Service

CVE-2012-2138 : Apache Sling denial of service vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: org.apache.sling.servlets.post bundle up to 2.1.0 Description: The @CopyFrom operation of the Sling POST servlet allows for copying a parent node to one of it...

Microsoft SharePoint Server and Foundation Detection (Windows SMB Login)

SMB login-based detection of Microsoft SharePoint Server and Microsoft SharePoint Foundation. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft SharePoint Privilege Elevation Vulnerabilities (2663841)

This host is missing an important security update according to Microsoft Bulletin MS12-011. OpenVAS Vulnerability Test $Id: secpodms12-011.nasl 5366 2017-02-20 13:55:38Z cfi $ Microsoft SharePoint Privilege Elevation Vulnerabilities 2663841 Authors: Madhuri D Copyright: Copyright c 2012 SecPod,...

PHP < 5.2.6 Multiple Vulnerabilities

PHP is prone to multiple vulnerabilities. Copyright C 2012 NopSec Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...

Microsoft Lync Version Detection

Detects the installed version of Microsoft Lync. The script logs in via smb, searches for Microsoft Lync in the registry and gets the version from Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Debian Security Advisory DSA 2465-1 (php5)

The remote host is missing an update to php5 announced via advisory DSA 2465-1. OpenVAS Vulnerability Test $Id: deb24651.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2465-1 php5 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2012-2334 Vulnerabilities related to malformed Powerpoint files in OpenOffice.org 3.3.0

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2012-2334 Vulnerabilities related to malformed Powerpoint files in OpenOffice.org 3.3.0 Reference: http://www.openoffice.org/security/cves/CVE-2012-2334.html Severity: Important Vendor: The Apache Software Foundation Versions Affected:...

CVE-2012-1149 OpenOffice.org integer overflow error in vclmi.dll module when allocating memory for an embedded image object

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2012-1149 OpenOffice.org integer overflow error in vclmi.dll module when allocating memory for an embedded image object Reference: http://www.openoffice.org/security/cves/CVE-2012-1149.html Severity: Important Vendor: The Apache Software...