573 matches found
Cisco UCS Central Software Arbitrary Command Execution Vulnerability
Cisco UCS Central Software is the United States Cisco Cisco company's set of global Cisco UCS Unified Computing System resources for server management and monitoring solutions. A security vulnerability exists in Cisco UCS Central Software version 1.31b and earlier. Due to the program failing to...
Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code
The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted media content, from a remote location...
Microsoft Windows Library Load Input Validation Remote Code Execution Vulnerability
Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in Microsoft Windows Vista SP2 and Server 2008 SP2, which stems from a program's failure to properly validate input before loading certain libraries. A remot...
Cisco Unified Communications Manager SQL Injection Vulnerability
Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. A security vulnerability exists in Cisco Unified Communications Manager 11.0 0.98000.225 that does not validate user input within a SQL query. An attacker sending a URL containing an SQL statement cou...
The vulnerability of the Junos operating system, which allows a hacker to trigger a service failure
The vulnerability of the PFE daemon in the Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to trigger a service failure through a specially crafted request...
The vulnerability of the iOS operating system, which allows a perpetrator to initiate certain processes
The vulnerability of the WebKit component of the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to initiate certain processes by manipulating URLs such as tel://, facetime://, and facetime-audio://...
The vulnerability of the multimedia player iTunes and the iOS operating system allows a hacker to execute arbitrary code or trigger a service failure.
The vulnerability of the WebKit component in the multimedia player iTunes and the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted...
The vulnerability of the multimedia player iTunes and the iOS operating system allows a hacker to execute arbitrary code or trigger a service failure.
The vulnerability of the WebKit component in the multimedia player iTunes and the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted...
Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2015-04659)
Microsoft Windows Server is a series of servers based on the windows operating system launched by the U.S. Microsoft Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows OLE due to the program failing to properly validate user input. An attacker could exploit this...
Cisco Network Analysis Module Cross-Site Scripting Vulnerability
Cisco is a leading global provider of networking solutions. A cross-site scripting vulnerability exists in Cisco Network Analysis Module due to a failure to adequately validate input. An attacker could exploit the vulnerability by convincing a NAM user to visit a malicious Web site...
newsPHP 2006 PRO index.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/18726/info NewsPHP 2006 PRO is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properl...
phpldapadmin 0.9.8 - template_engine.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17643/info PHPLDAPAdmin is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to execute...
Messageriescripthp 2.0 existepseudo.php pseudo Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these...
Brian Stanback bsguest.cgi 1.0 - Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2159/info An input validation vulnerability exists in Brian Stanback's bsguest.cgi, a script designed to coordinate guestbook submissions from website visitors. The script fails to properly filter ';' characters from the...
Oracle Linux 6 : kdelibs (ELSA-2011-1364)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1364 advisory. 6:4.3.4-11.4 - Resolves: bz743951, use ca-certificates' ca-bundle.crt 6:4.3.4-11.3 - Resolves: bz743515, CVE-2011-3365 - input validation failure Tenable has...
Oracle Linux 5 / 6 : kdelibs / and / kdelibs3 (ELSA-2011-1385)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1385 advisory. 3.5.10-24.1 - Resolves: bz746160, CVE-2011-3365, input validation failure in KSSL Tenable has extracted the preceding description block directly from the...
Ubuntu 12.04 LTS : linux-lts-quantal vulnerabilities (USN-1768-1)
Andrew Cooper of Citrix reported a Xen stack corruption in the Linux kernel. An unprivileged user in a 32bit PVOPS guest can cause the guest kernel to crash, or operate erroneously. CVE-2013-0190 A failure to validate input was discovered in the Linux kernel's Xen netback network backend driver. ...
RHEL 4 / 5 / 6 : kdelibs and kdelibs3 (RHSA-2011:1385)
The remote Redhat Enterprise Linux 4 / 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1385 advisory. - kdelibs: input validation failure in KSSL CVE-2011-3365 Note that Nessus has not tested for this issue but has instead relied only on the...
PT-2011-21: SQL injection vulnerability in OneOrZero AIMS
Positive Research Center has discovered multiply SQL injection vulnerabilities in OneOrZero AIMS. Application incorrectly validates input data. That allows attackers to conduct SQL injection attack. "SQL Injection" is a way to bypass network protection and attack the database. Settings transferre...
Messageriescripthp 2.0 - 'existeemail.php?email' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21513/info Messageriescripthp is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...