9427 matches found
DEBIAN-CVE-2009-0368
OpenSC before 0.11.7 allows physically proximate attackers to bypass intended PIN requirements and read private data objects via a 1 low level APDU command or 2 debugging tool, as demonstrated by reading the 4601 or 4701 file with the opensc-explorer or opensc-tool program...
OS Identification : FTP
Nessus was able to identify the remote operating system based on the response from the remote host's FTP banner. C Tenable, Inc. include"compat.inc"; if description scriptid35658; scriptversion"1.65"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/07/28"; scriptnameenglish:"OS...
Tencent FoxMail Detection (Windows SMB Login)
SMB login-based detection of Tencent FoxMail. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2006-4948
creationtimestamp| type| source ---|---|--- 2008-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7452 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16346 2018-05-29 15:50:33+00:00| seen|...
CVE-2008-3465
Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows context-dependent attackers to cause a denial of service or execute arbitrary code via a WMF file with a malformed file-size parameter,...
PHP php_getuid() invalid implementation
Under some conditions user's uid or gid may be incorrectly identified...
Polycom Videoconferencing Unit Detection
The remote web server provides an access to a Polycom videoconferencing unit. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid34851; scriptversion"1.11"; scriptnameenglish: "Polycom Videoconferencing Unit Detection"; scriptsetattributeattribute:"synopsis", value: "The...
CVE-2008-6038
creationtimestamp| type| source ---|---|--- 2008-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32403...
CVE-2008-4108
Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...
CVE-2008-2639
creationtimestamp| type| source ---|---|--- 2008-09-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6387 2010-11-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16380 2018-05-29 15:50:33+00:00| seen|...
SSO credentials not used in IssueViewURLHandler
panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-15048. panel A customer has created a SSO plugin and are facing some specific issues in this context. When they click on the printable link ...
CVE-2008-2004
CVE-2008-2004 concerns QEMU up to 0.9.1 where drive_init determines the raw-disk image format from the header. By altering the header to identify a different format, a local guest user can cause the host to disclose arbitrary host files when the guest is restarted. The vulnerability is tied to QE...
CVE-2008-2004
The driveinit function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted...
CVE-2008-0165
Cross-site request forgery CSRF vulnerability in Ikiwiki before 2.42 allows remote attackers to modify user preferences, including passwords, via the 1 preferences and 2 edit forms...
CVE-2008-1693
The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, relate...
Bomba Haber 2.0 - 'haberoku.php' SQL Injection
source: https://www.securityfocus.com/bid/28435/info Bomba Haber is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...
CVE-2008-1358
creationtimestamp| type| source ---|---|--- 2008-03-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5248 2010-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16482 2018-05-29 15:50:33+00:00| seen|...
Privileg escalation in Omegasoft Insel 7
Hi list, Omegasoft's Insel 7 stores Cookies on your computer for identifying the logged-in user. As these Cookies do not contain any password hash but only the username and some meaningless stuff you can easily get into the system with another login. this gets even more easy, as there is a...
PT-2008-1573 · Postgresql +1 · Postgresql +1
Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 7.3 through 7.3.20 PostgreSQL versions 7.4 through 7.4.18 PostgreSQL versions 8.0 through 8.0.14 PostgreSQL versions 8.1 through 8.1.10 PostgreSQL versions 8.2 through 8.2.5 Description: The issue allows remote attackers t...