CVE-2011-0528: Undefined Security Weakness

Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or modify the resources of other nodes via unspecified vectors...

CVE-2013-6728: Undefined Security Weakness

The charting component in IBM WebSphere Dashboard Framework WDF 6.1.5 and 7.0.1 allows remote attackers to view or delete image files by leveraging incorrect security constraints for a temporary directory...

Solaris 9 (sparc) : 113335-05

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Filesystem. Supported versions that are affected are 8 and 9. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized...

Microsoft Office Web Apps Remote Code Execution vulnerability (2904244)

This host is missing an important security update according to Microsoft Bulletin MS13-100. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Dredge School Administration System - DSMloader.php Account Information Disclosure

Dredge School Administration System - DSMloader.php Account Information Disclosure source: https://www.securityfocus.com/bid/64720/info Dredge School Administration System is prone to the following security vulnerabilities: 1. An SQL-injection vulnerability 2. A cross-site request forgery...

CVE-2013-3667

The software update mechanism as used in Bare Bones Software Yojimbo before 4.0, TextWrangler before 4.5.3, and BBEdit before 10.5.5 does not properly download and verify updates before installation, which allows attackers to perform "tampering or corruption" of the updates...

CVE-2013-3667

The software update mechanism as used in Bare Bones Software Yojimbo before 4.0, TextWrangler before 4.5.3, and BBEdit before 10.5.5 does not properly download and verify updates before installation, which allows attackers to perform "tampering or corruption" of the updates...

CVE-2013-4554: Undefined Security Weakness

Xen 3.0.3 through 4.1.x possibly 4.1.6.1, 4.2.x possibly 4.2.3, and 4.3.x possibly 4.3.1 does not properly prevent access to hypercalls, which allows local guest users to gain privileges via a crafted application running in ring 1 or 2...

PT-2013-4779

Name of the Vulnerable Software and Affected Versions IBM Cognos Command Center versions prior to 10.2 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for requests...

openSUSE: Security Advisory for Mozilla Firefox and others (openSUSE-SU-2013:0631-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-4956: Undefined Security Weakness

Puppet Module Tool PMT, as used in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, installs modules with weak permissions if those permissions were used when the modules were originally built, which might allow local users to rea...

File Checksums

Checks the checksums MD5 or SHA1of specified files. The SSH protocol is used to log in and to gather the needed information. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mozilla Thunderbird Multiple Vulnerabilities - August 13 (Windows)

The host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdmultvulnaug13win.nasl 6074 2017-05-05 09:03:14Z teissa $ Mozilla Thunderbird Multiple Vulnerabilities - August 13 Windows Authors: Thanga Prakash S Copyrigh...

[SECURITY] Fedora 18 Update: kmahjongg-4.10.5-1.fc18

KMahjongg is a tile matching game for one or two players, a variation usually known as Mahjong Solitaire. In KMahjongg the tiles are scrambled and stacked on top of each other to resemble a certain shape. The player is then expected to remove all the tiles off the game board by locating each tile...

Oracle Linux 5 : tog-pegasus (ELSA-2008-1001)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-1001 advisory. 2.7.0-2.0.1.el52.1 - Added pegasus-enterprise.patch to allow detection of enterprise-release 2.7.0-2.el52.1 - Fix local-or-remote-auth patch and enhanc...

Fedora Update for kactivities FEDORA-2013-10130

Check for the Version of kactivities OpenVAS Vulnerability Test Fedora Update for kactivities FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Microsoft Windows Kernel Information Disclosure Vulnerability (2839229)

This host is missing an important security update according to Microsoft Bulletin MS13-048. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2013-2194

Name of the Vulnerable Software and Affected Versions Drupal Boxes module versions 7.x-1.x before 7.x-1.1 Description A cross-site scripting issue exists, allowing remote authenticated users with administer or edit boxes permissions to inject arbitrary web script or HTML via the subject parameter...

CVE-2013-0226

The Keyboard Shortcut Utility module 7.x-1.x before 7.x-1.1 for Drupal does not properly check node restrictions, which allows 1 remote authenticated users with the "view shortcuts" permission to read nodes or 2 remote authenticated users with the "admin shortcuts" permission to read, edit, or...

Ubuntu Update for glance USN-1764-1

Check for the Version of glance OpenVAS Vulnerability Test $Id: gbubuntuUSN17641.nasl 8650 2018-02-03 12:16:59Z teissa $ Ubuntu Update for glance USN-1764-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...