NGS00141 Patch Notification: Websense Triton 7.6 - Stored XSS in report management UI

High risk Vulnerability in Websense Triton 15 December 2011 Ben Williams of NGS Secure has discovered a High risk vulnerability in Websense Impact: Stored XSS Versions affected include: Websense Web Security Gateway Anywhere v7.6 Websense Web Security Gateway v7.6 Websense Web Security v7.6...

NGS00140 Patch Notification: Websense Triton 7.6 - Unauthenticated remote command execution as SYSTEM

Critical Vulnerability in Websense Triton 15 December 2011 Ben Williams of NGS Secure has discovered a Critical vulnerability in Websense Impact: Unauthenticated remote command execution as SYSTEM Versions affected include: Websense Web Security Gateway Anywhere v7.6 Websense Web Security Gateway...

Microsoft Windows OLE Remote Code Execution Vulnerability (2624667)

This host is missing an important security update according to Microsoft Bulletin MS11-093. OpenVAS Vulnerability Test $Id: secpodms11-093.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows OLE Remote Code Execution Vulnerability 2624667 Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...

Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability (2620712)

This host is missing an important security update according to Microsoft Bulletin MS11-097. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel Privilege Elevation Vulnerability (2633171)

This host is missing an important security update according to Microsoft Bulletin MS11-098. OpenVAS Vulnerability Test $Id: secpodms11-098.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows Kernel Privilege Elevation Vulnerability 2633171 Authors: Madhuri D Copyright: Copyright c 2011 SecPod,...

InduSoft Web Studio Multiple Remote Code Execution Vulnerabilitites

This host is installed with Indusoft Web Studio and is prone to multiple remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbindusoftwebstudiomultremotecodeexecvuln.nasl 5367 2017-02-20 14:16:52Z cfi $ InduSoft Web Studio Multiple Remote Code Execution Vulnerabilitites Author...

InduSoft Web Studio Multiple Remote Code Execution Vulnerabilitites

Indusoft Web Studio is prone to multiple remote code execution vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : update-manager vulnerabilities (USN-1284-1)

David Black discovered that Update Manager incorrectly extracted the downloaded upgrade tarball before verifying its GPG signature. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to replace arbitrary files. CVE-2011-3152 David Black...

Microsoft Windows TCP/IP Remote Code Execution Vulnerability (2588516)

This host is missing a critical security update according to Microsoft Bulletin MS11-083. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

ESA-2011-035: RSA, The Security Division of EMC, announces the release of Hotfix 6 with security updates for RSA Key Manager Appliance 2.7 Service Pack 1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-035: RSA, The Security Division of EMC, announces the release of Hotfix 6 with security updates for RSA Key Manager Appliance 2.7 Service Pack 1 Advisories Updated October 28, 2011 Summary: RSA has delivered an update on RSA Key Manager...

Novell ZENworks Handheld Management ZfHSrvr.exe Multiple Remote Code Execution Vulnerabilities

The ZENworks Handheld Management Server process ZfHSrvr.exe contains multiple unspecified remote code execution vulnerabilities that allow an attacker to run arbitrary code on a victim within the context of the 'ZENworks Handheld Management Server' process. C Tenable Network Security, Inc...

OmniTouch Instant Communication Suite XSRF / XSS

TC-SA-2011-01: Multiple vulnerabilities in OmniTouch Instant Communication Suite Published: 2011/10/24 Advisory-Version: 1.0 References: - Alcatel Lucent Vulnerability Statement 2011003 Multiple vulnerabilities in OmniTouch Instant Communication Suite - CVE-2011-4058 - multiple XSS vulnerabilitie...

MS Windows Ancillary Function Driver Privilege Elevation Vulnerability (2592799)

This host is missing an important security update according to Microsoft Bulletin MS11-080. OpenVAS Vulnerability Test $Id: secpodms11-080.nasl 5362 2017-02-20 12:46:39Z cfi $ MS Windows Ancillary Function Driver Privilege Elevation Vulnerability 2592799 Authors: Antu Sanadi Copyright: Copyright ...

Novell GroupWise WebAccess Directory.Item Parameters XSS

The version of Novell GroupWise installed on the remote Windows host is earlier than 8.0.2 HP3. It is, therefore, reportedly affected by a cross-site scripting vulnerability because the application fails to sanitize user-supplied input to the 'Directory.Item.name' and 'Directory.Item.displayName'...

[security bulletin] HPSBMU02705 SSRT100622 rev.1 - HP Business Service Automation (BSA) Essentials, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03014398 Version: 1 HPSBMU02705 SSRT100622 rev.1 - HP Business Service Automation BSA Essentials, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be...

Microsoft Windows WINS Local Privilege Escalation Vulnerability (2571621)

This host is missing an important security update according to Microsoft Bulletin MS11-070. OpenVAS Vulnerability Test $Id: secpodms11-070.nasl 7582 2017-10-26 11:56:51Z cfischer $ Microsoft Windows WINS Local Privilege Escalation Vulnerability 2571621 Authors: Sooraj KS Copyright: Copyright c 20...

ESA-2011-018: Domain administration privilege enforcement bypass in EMC Avamar

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-018: Domain administration privilege enforcement bypass in EMC Avamar. EMC Identifier: ESA-2011-018 CVE Identifier: CVE-2011-1740 Severity Rating: CVSS v2 Base Score: 7.9 AV:A/AC:M/Au:N/C:C/I:C/A:C Affected products: EMC Avamar version 4.x EM...

Method not found

Challenge Cause There is most likely a conflict between .dll versions. Go to the folder where Veeam Backup & Replication is installed and make sure all .dll files have the same version: The conflict can happen if the hotfix was previously installed over the incorrect version, and new methods from...

ESA-2011-027: RSA, The Security Division of EMC, releases Security Patch for Adaptive Authentication (On-Premise)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-027: RSA, The Security Division of EMC, releases Security Patch for Adaptive Authentication On-Premise Advisories Updated August 11, 2011 Summary: An issue with Adaptive Authentication On-Premise was discovered which in certain circumstances...

Microsoft Windows DNS Server Remote Code Execution Vulnerability (2562485)

This host is missing a critical security update according to Microsoft Bulletin MS11-058. OpenVAS Vulnerability Test $Id: secpodms11-058.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows DNS Server Remote Code Execution Vulnerability 2562485 Authors: Veerendra G.G Copyright: Copyright c 2011...