890 matches found
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The numerous vulnerabilities in the ldap-gateways package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
There are multiple vulnerabilities in the openldap-gateways package of the Debian GNU/Linux operating system. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
AntLabs InnGate security vulnerability patch
ANTLabs today is expected to roll out patches for a vulnerability in its InnGate Internet gateways that are popular in hospitality and convention locations. The gateways provide temporary Internet access to hotel guests or conference attendees using kiosks, for example. The vulnerability...
CVE-2014-8385
Buffer overflow on Advantech EKI-1200 gateways with firmware before 1.63 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2014-8385
Buffer overflow on Advantech EKI-1200 gateways with firmware before 1.63 allows remote attackers to execute arbitrary code via unspecified vectors...
Clam AntiVirus: Denial of service
Background Clam AntiVirus is an open source GPL anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description A heap-based buffer overflow exists in the cliscanpe function in libclamav/pe.c in ClamAV. Impact A remote attacker could possibly cause a Denial of...
[SECURITY] Fedora 19 Update: zarafa-7.1.11-1.fc19
The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...
Payment Gateways Caller for WP e-Commerce 0.1.0 - load_merchant Parameter Traversal Local file Inclusion
The Payment Gateways Caller for WP e-Commerce WordPress plugin was affected by a loadmerchant Parameter Traversal Local file Inclusion security vulnerability...
Pre Multi-Vendor Shopping Malls SQL Injection Vulnerability & Auth Bypass Vulnerabilty.
No description provided by source. --------------------------------------------------------------------------- +Title Multi-Vendor Shopping Malls SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3...
2daybiz online classified system SQLi AND XSS Vulnerability
No description provided by source. Name : 2daybiz online classified system SQLi AND XSS Vulnerability Date : june, 16 2010 Vendor url :http://www.2daybiz.com/onlineclassifiedscript.html Critical Level : HIGH Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r...
Network Associates WebShield SMTP 4.5 Invalid Outgoing Recipient Field DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1999/info Network Associates WebShield SMTP is an email virus scanner designed for internet gateways. In the event that WebShield SMTP receives an outgoing email containing six %20 followed by any character within the...
Online Classified System Script SQL Injection and XSS Vulnerabilities
No description provided by source. 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Online Classified System Script SQLi and XSS Vulnerable Vendor...
NeoBill CMS 0.8 Alpha - Multiple Vulnerabilities
No description provided by source. Title: ====== NeoBill CMS v0.8 Alpha - Multiple Web Vulnerabilities Date: ===== 2012-08-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=685 VL-ID: ===== 685 Common Vulnerability Scoring System: ==================================== 3...
Clam Anti-Virus ClamAV 0.88.x UPX Compressed PE File Heap Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19381/info ClamAV is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. This issue occurs when the...
Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities
Mailspect Control Panel version 4.0.5 suffers from remote code execution, arbitrary file read, and cross site scripting vulnerabilities. Document Title: ============ Mailspect Control Panel version 4.0.5 Multiple Vulnerabilities Release Date: =========== June 21, 2014 Product & Service...
Digi International Gateways Vulnerable to Heartbleed
Wireless Web mesh gateways used everywhere from industrial control environments to home area networks are vulnerable to the Heartbleed OpenSSL vulnerability. The Industrial Control System Computer Emergency Response Team ICS-CERT issued an advisory Thursday warning SCADA and ICS managers with Dig...
CVE-2014-2714: Improper Input Validation
The Enhanced Web Filtering EWF in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 before 12.1X46-D10, as used in the SRX Series services gateways, allows remote attackers to cause a denial of service flow...
Juniper JunOS SRX服务网关动态VPN连接拒绝服务漏洞
CVE ID:CVE-2014-0612 Juniper JunOS SRX Branch Series Service Gateways是系列服务网关动态服务架构产品。 Juniper JunOS SRX Branch Series Service Gateways在动态VPN连接的实现上存在错误，这可导致未授权访问及拒绝服务攻击。 0 Juniper Networks JunOS SRX Branch Series Service Gateways 12.x Juniper Networks JunOS SRX Branch Series Service Gateways 11.x...
Array Networks vxAG 9.2.0.34 and vAPV 8.3.2.17 - Multiple Vulnerabilities
vAPV: Virtual Application Delivery Controllers for Cloud and Virtualized Environments Powered by Array's award-winning 64-bit SpeedCoretm architecture, vAPV virtual application delivery controllers extend Array's proven price-performance and rich feature set to public and private clouds and...
Array Networks vxAG 9.2.0.34 and vAPV 8.3.2.17 - Multiple Vulnerabilities
----------- Author: ----------- xistence ------------------------- Affected products: ------------------------- Array Networks vxAG 9.2.0.34 and vAPV 8.3.2.17 appliances ------------------------- Affected vendors: ------------------------- Array Networks http://www.arraynetworks.com/...