Code injection

TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the 1 cookieName to lib/banners/bannerlib.php; 2 printpages or 3 printstructures parameter to a tiki-printmultipages.php or b tiki-printpages.php; or 4...

Fedora 15 : groff-1.21-4.fc15 (2012-8590)

older security fixes : - CVE-2009-5044: insecure temporary file handling in pdfroff - CVE-2009-5080: improper handling of failed attempts to create temporary directories in eqn2graph/pic2graph/grap2graph - CVE-2009-5081: roff2.pl and groffer.pl use easy-to-guess temporary file names Note that...

Note the dog design defect causes can delete the website of any picture-vulnerability warning-the black bar safety net

The path to improper handling resulting in a registered user can delete the site on any picture Detailed description: To register a user, after login click on upload avatar, for example, the address is: http://www.badguest.cn /jishigou30s/index. php? mod=settings&code=face In the end...

Opera Large Integer Argument Denial of Service Vulnerability (Linux)

The host is installed with Opera and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gboperalargeintargdosvulnlin.nasl 6022 2017-04-25 12:51:04Z teissa $ Opera Large Integer Argument Denial of Service Vulnerability Linux Authors: Rachana Shetty Copyright: Copyright c...

CVE-2012-0830

The phpregistervariableex function in phpvariables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885...

Design/Logic Flaw

functions.php in WHMCompleteSolution WHMCS 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty templating system by submitting a crafted ticket, related to improper handling of characters in the subject field...

CVE-2011-5061

functions.php in WHMCompleteSolution WHMCS 4.0.x through 5.0.x allows remote attackers to trigger arbitrary code execution in the Smarty templating system by submitting a crafted ticket, related to improper handling of characters in the subject field...

CVE-2011-4616

Cross-site scripting XSS vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of greater than and less than characters...

CVE-2011-4616

Cross-site scripting XSS vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of greater than and less than characters...

CVE-2011-4616

Cross-site scripting XSS vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of greater than and less than characters...

CVE-2011-4616

Cross-site scripting XSS vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of greater than and less than characters...

Opera Multiple Vulnerabilities - December11 (Mac OS X)

The host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulndec11macosx.nasl 7029 2017-08-31 11:51:40Z teissa $ Opera Multiple Vulnerabilities - December11 Mac OS X Authors: Rachana Shetty Copyright: Copyright c 2011 Greenbone Networks...

Citrix XenApp and XenDesktop XML Service Interface Stack Buffer Overflow

A code execution vulnerability has been reported in Citrix XenApp and XenDesktop server. The vulnerability is due to the improper handling of NFuse RequestValidateCredentials requests. A remote attacker may exploit this vulnerability by sending a malicious packet to the target service. Successful...

CVE-2011-3489

RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service crash via a crafted rna packet with a long string to TCP port 4446 that triggers 1 "a memset zero overflow" or 2 an out-of-bounds read, related to improper handling of ...

Mozilla Firefox SSL Certificate Spoofing Vulnerability - Windows

Mozilla Firefox is prone to SSL certificate spoofing vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Tivoli Directory Server DIGEST-MD5 Denial of Service Vulnerability

The host is running IBM Tivoli Directory Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbibmtivolidirserverdigestmd5dosvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ IBM Tivoli Directory Server DIGEST-MD5 Denial of Service Vulnerability Authors: Sooraj KS...

Google Chrome information disclosure vulnerability

Overview Google Chrome contains an information disclosure vulnerability. Google Chrome contains an information disclosure vulnerability caused by the improper handling of XML files. Takayoshi Isayama from Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC...

Microsoft IE cross-domain IFRAME gadgets keystrokes steal Vulnerability

This host is installed with Internet Explorer and is prone to cross-domain iframe gadgets keystrokes steal vulnerability. OpenVAS Vulnerability Test $Id: secpodmsieiframeinfodiscvulnjune10.nasl 5394 2017-02-22 09:22:42Z teissa $ Microsoft IE cross-domain IFRAME gadgets keystrokes steal...

Beanstalkd Job Data Remote Command Execution Vulnerability

This host is running Beanstalkd and is prone to remote command execution vulnerability. OpenVAS Vulnerability Test $Id: secpodbeanstalkdremotecmdexecvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Beanstalkd Job Data Remote Command Execution Vulnerability Authors: Sooraj KS Copyright: Copyright c 20...

Mozilla Firefox 'IFRAME' Denial Of Service vulnerability (Windows)

The host is installed with Mozilla Firefox browser and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbmozillafirefoxiframedosvulnwin.nasl 5323 2017-02-17 08:49:23Z teissa $ Mozilla Firefox 'IFRAME' Denial Of Service vulnerability Windows Authors: Antu Sanadi...