Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances Advisory ID: cisco-sa-20090408-asa http://www.cisco.com/warp/public/707/cisco-sa-20090408-asa.shtml Revision 1.0 For Public...

CVE-2009-1158

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 7.0 before 7.086, 7.1 before 7.1282, 7.2 before 7.2426, 8.0 before 8.0424, and 8.1 before 8.1214, when H.323 inspection is enabled, allows remote attackers to cause a denial of service device reload via a...

Design/Logic Flaw

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 7.0 before 7.086, 7.1 before 7.1282, 7.2 before 7.2426, 8.0 before 8.0424, and 8.1 before 8.1214, when H.323 inspection is enabled, allows remote attackers to cause a denial of service device reload via a...

CVE-2009-1158

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 7.0 before 7.086, 7.1 before 7.1282, 7.2 before 7.2426, 8.0 before 8.0424, and 8.1 before 8.1214, when H.323 inspection is enabled, allows remote attackers to cause a denial of service device reload via a...

CVE-2009-1158

Cisco ASA/PIX 5500 Series are affected by CVE-2009-1158 due to crafted H.323 packets causing device reloads when H.323 inspection is enabled. The vulnerability affects ASA/PIX software versions 7.0 up to 8.1 before specific fixed releases. The Security Advisory documents the first fixed releases ...

CVE-2009-1158: Undefined Security Weakness

Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 Series devices 7.0 before 7.086, 7.1 before 7.1282, 7.2 before 7.2426, 8.0 before 8.0424, and 8.1 before 8.1214, when H.323 inspection is enabled, allows remote attackers to cause a denial of service device reload via a...

Joomla! Component MailTo - 'article' SQL Injection

Joomla Component MailTo SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, chs, redc00de -=Kosova Hackers Group=--=KHG-Crew=- ScriptName: "Joomla" Component: "MailTo commailto" Date: "April 2006" Exploit...

Joomla Component Maian Music 1.2.1 (category) SQL Injection Vuln

No description provided by source. Joomla Component MaianMusic SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, chs, redc00de -=Kosova Hackers Group=--=KHG-Crew=- ScriptName: "Joomla" Component: "MaianMusic...

Joomla! Component MailTo - article SQL Injection

Joomla! Component MailTo - article SQL Injection Joomla Component MailTo SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, chs, redc00de -=Kosova Hackers Group=--=KHG-Crew=- ScriptName: "Joomla" Component:...

Diskos CMS Manager (SQL/DB/Auth Bypass) Multiple Vulnerabilities

No description provided by source. Diskos CMS Manager & multiple vulnerabilitiesS Prodcut: Diskos CMS Manager Home : http://www.diskos.dk Vunlerability : SQL Injection & admin byapass & database disclosure Dork : "Powered By diskos" inurl:"side.asp?kat=1" Discovred by: AnGeL25dZ Contact :...

QuickTime < 7.6.6 Multiple Vulnerabilities

Binary data 801207.prm...

QuickTime < 7.6.6 Multiple Vulnerabilities

Binary data 5492.prm...

Diskos CMS Manager - SQL Injection / File Disclosure / Authentication Bypass

Diskos CMS Manager & multiple vulnerabilitiesS Prodcut: Diskos CMS Manager Home : http://www.diskos.dk Vunlerability : SQL Injection & admin byapass & database disclosure Dork : "Powered By diskos" inurl:"side.asp?kat=1" Discovred by: AnGeL25dZ Contact : [email protected] Greetz to : ALLAH All...

CVE-2009-0631

Cisco IOS 12.0–12.4 is affected when configured with (1) SLAs Responder, (2) SIP, (3) H.323 Annex E Call Signaling Transport, or (4) MGCP. A crafted UDP packet can cause the input queue on the inbound interface to become blocked, resulting in a denial of service. The connected sources confirm the...

CVE-2009-0631: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with 1 IP Service Level Agreements SLAs Responder, 2 Session Initiation Protocol SIP, 3 H.323 Annex E Call Signaling Transport, or 4 Media Gateway Control Protocol MGCP allows remote attackers to cause a denial of service...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the 1 err, 2 errorcode, and 3 login parameters...

CVE-2008-6465

Multiple cross-site scripting XSS vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the 1 err, 2 errorcode, and 3 login parameters...

CVE-2008-6465

CVE-2008-6465 affects Parallels H-Sphere 3.0.0 P9 and 3.1 P1. The NUCLEI template documents multiple cross-site scripting (XSS) flaws in login.php within webshell4, allowing an attacker to inject arbitrary script/HTML via the parameters (err, errorcode, login). Potential impact includes theft of ...

CVE-2008-6465

Multiple cross-site scripting XSS vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the 1 err, 2 errorcode, and 3 login parameters...

CVE-2008-6465: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the 1 err, 2 errorcode, and 3 login parameters...