9427 matches found
CVE-2007-6353
Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow...
CVE-2006-2938
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-2937. Reason: This candidate was withdrawn by its CNA. it was incorrectly used to identify CVE-2006-2937. Notes: none...
OS Identification : RDP
Binary data osfingerprintrdp.nbin...
GLSA-200710-14 : DenyHosts: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200710-14 DenyHosts: Denial of Service Daniel B. Cid discovered that DenyHosts used an incomplete regular expression to parse failed login attempts, a different issue than GLSA 200701-01. Impact : A remote unauthenticated attacker...
DenyHosts: Denial of service
Background DenyHosts is designed to monitor SSH servers for repeated failed login attempts. Description Daniel B. Cid discovered that DenyHosts used an incomplete regular expression to parse failed login attempts, a different issue than GLSA 200701-01. Impact A remote unauthenticated attacker can...
PHP-Fusion module Expanded Calendar 2.x - SQL Injection
?php printr" / Expanded Calendar 2.x PHP-Fusion module User pass disclosure exploit Found by Matrix86 of Rbt-4 Crew Site: www.rbt-4.net Mail: infoatrbt-4dotnet Bug found in /infusions/calendareventspanel/showsingle.php Line: 27 Vulnerability type: Sql injection Unpatched! Patch: Line 26:...
proxy.org Client Detection
Binary data 4160.prm...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2000-1205. Reason: This candidate is a duplicate of CVE-2000-1205. Notes: All CVE users should reference CVE-2000-1205 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-5645. Reason: This candidate is a duplicate of CVE-2006-5645, due to a typo. Notes: All CVE users should reference CVE-2006-5645 instead of this candidate. All references and descriptions in this candidate have been removed t...
CVE-2007-3930
Interpretation conflict between Microsoft Internet Explorer and DocuWiki before 2007-06-26b allows remote attackers to inject arbitrary JavaScript and conduct cross-site scripting XSS attacks when spellchecking UTF-8 encoded messages via the spellutf8test function in lib/exe/spellcheck.php, which...
CVE-2007-3730
The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 does not log the source IP address or attempted username for login attempts, which might help remote attackers to avoid identification...
[SECURITY] Fedora 7 Update: file-4.21-1.fc7
The file command is used to identify a particular file according to the type of data contained by the file. File can identify many different file types, including ELF binaries, system libraries, RPM packages, and different graphics formats. You should install the file package, since the file...
CVE-2007-3472
Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to have unspecified attack vectors and impact...
OS Identification : SNMP
Nessus was able to identify the operating system type and version by examining the SNMP data returned by the remote server. C Tenable, Inc. Nessus was able to identify the operating system type and version by examining the SNMP data returned by the remote server. include"compat.inc"; if descripti...
OS Identification : SinFP
This script attempts to identify the operating system type and version by using the same technique as SinFP. C Tenable, Inc. SinFP is a fingerprinting tool written by GomoR and available at http://www.gomor.org/cgi-bin/sinfp.pl This plugin is a white-room reimplementation of the SinFP methodology...
OS Identification : MSRPC
This plugin attempts to identify the operating system type and version by connecting to the remote Microsoft Remote Procedure Call MSRPC server. C Tenable, Inc. include"compat.inc"; if description scriptid25248; scriptversion"1.45"; scriptsetattributeattribute:"pluginmodificationdate",...
OS Identification : SMB
This plugin attempts to identify the Operating System type and version by connecting to the remote SMB server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25252; scriptversion"1.20"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/01/05";...
Remote listeners enumeration (Linux / AIX)
By logging into the remote host with the supplied credentials, Nessus was able to obtain the name of the process listening on the remote port. Note that the method used by this plugin only works for hosts running Linux or AIX. TRUSTED...