Ubuntu Update for thunderbird USN-1925-1

Check for the Version of thunderbird OpenVAS Vulnerability Test $Id: gbubuntuUSN19251.nasl 8542 2018-01-26 06:57:28Z teissa $ Ubuntu Update for thunderbird USN-1925-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Mozilla: Local Java applets may read contents of local file system (MFSA 2013-75)

Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access by Java applets, which allows user-assisted remote attackers to read arbitrary files by leveraging...

USN-1925-1: Thunderbird vulnerabilities

Jeff Gilbert and Henrik Skupin discovered multiple memory safety issues in Thunderbird. If the user were tricked in to opening a specially crafted message with scripting enabled, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute...

KLA10188 Multiple vulnerabilities in HP Insight Diagnostics

Multiple critical vulnerabilities have been found in HP Insight Diagnostics. Malicious users can exploit these vulnerabilities to inject code or write local files. Below is a complete list of vulnerabilities 1. Improper PHP include restrictions can be exploited via a path parameter; 2. A path...

Multiple DVR HTTP Server Directory Traversal Vulnerability - Active Check

The thttpd running on the remote DVR is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Acme thttpd HTTP Server - Directory Traversal

source: https://www.securityfocus.com/bid/60010/info thttpd is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files within the context of the web server. Information...

Server: Multiple directory traversals

Multiple directory traversal vulnerabilities in 1 apps/filestrashbin/index.php via the "dir" GET parameter and 2 lib/files/view.php via undefined vectors in all ownCloud versions prior to 5.0.6 and other versions before 4.0.15, allow authenticated remote attackers to get access to arbitrary local...

Apache mod_security security vulnerabilities

Local files access, resources exhausiton...

Sophos Web Protection Appliance multiple security vulnerabilities

Local files access, commands executions, crossite scripting...

Directory traversal

Directory traversal vulnerability in DUSAP.php in Novell ZENworks Mobile Management before 2.7.1 allows remote attackers to include and execute arbitrary local files via the language parameter...

CVE-2013-1082

Directory traversal vulnerability in DUSAP.php in Novell ZENworks Mobile Management before 2.7.1 allows remote attackers to include and execute arbitrary local files via the language parameter...

CVE-2013-1082

Novell ZENworks Mobile Management (ZMM) DUSAP.php is vulnerable to a directory traversal-based local file inclusion (LFI) via the language parameter, allowing remote unauthenticated attackers to include and execute arbitrary local files. The issue affects ZMM versions 2.7.0 and 2.6.1 (likely earl...

CVE-2013-1081

Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management ZMM 2.6.1 and 2.7.0 allows remote attackers to include and execute arbitrary local files via the language parameter...

Directory traversal

Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management ZMM 2.6.1 and 2.7.0 allows remote attackers to include and execute arbitrary local files via the language parameter...

CVE-2013-1081

CVE-2013-1081 describes a directory traversal vulnerability in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0, where the MDM.php script fails to properly validate the language parameter, allowing remote attackers to include and execute arbitrary local files. Documents indicate this is an...

CVE-2012-5624

The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force the read of arbitrary local files and possibly obtain sensitive information via a file: URL to a QML application...

Mac OS X Safari .webarchive File Format UXSS

Generates a .webarchive file for Mac OS X Safari that will attempt to inject cross-domain Javascript UXSS, silently install a browser extension, collect user information, steal the cookie database, and steal arbitrary local files. When opened on the target machine the webarchive file must not hav...

Linksys E1500/E2500 - Multiple Vulnerabilities

Device Name: Linksys E1500 / E2500 Vendor: Linksys ============ Device Description: ============ The Linksys E1500 is a Wireless-N Router with SpeedBoost. It lets you access the Internet via a wireless connection or through one of its four switched ports. You can also use the Linksys E1500 to sha...

F5 Networks BIG-IP - XML External Entity Injection

F5 Networks BIG-IP - XML External Entity Injection source: https://www.securityfocus.com/bid/57496/info F5 Networks BIG-IP is prone to an XML External Entity injection vulnerability. Attackers can exploit this issue to obtain potentially sensitive information from local files on computers running...

F5 Networks BIG-IP - XML External Entity Injection

source: https://www.securityfocus.com/bid/57496/info F5 Networks BIG-IP is prone to an XML External Entity injection vulnerability. Attackers can exploit this issue to obtain potentially sensitive information from local files on computers running the vulnerable application and to carry out other...