MantisBT < 1.2.8 Multiple Local File Include and XSS Vulnerabilities

MantisBT is prone to multiple local file include and cross-site scripting XSS vulnerabilities. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-lat...

IceWarp Mail Server < 10.3.3 Multiple Vulnerabilities

IceWarp Mail Server is prone to multiple vulnerabilities. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

Apple Mac OS X PackageKit Format String Vulnerability

This host is missing an important security update according to Mac OS X 10.6.6 Update. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

OPENVAS SCAN / Greenbone Enterprise Appliance (GEA) / Greenbone Security Manager (GSM) / Greenbone OS (GOS) Detection Consolidation

Consolidation of OPENVAS SCAN / Greenbone Enterprise Appliance GEA / Greenbone Security Manager GSM / Greenbone OS GOS detections. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2011-2481: Undefined Security Weakness

Apache Tomcat 7.0.x before 7.0.17 permits web applications to replace an XML parser used for other web applications, which allows local users to read or modify the 1 web.xml, 2 context.xml, or 3 tld files of arbitrary web applications via a crafted application that is loaded earlier than the targ...

CVE-2011-2385: Undefined Security Weakness

The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System OTRS does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vector...

CVE-2011-1924

Buffer overflow in the policysummarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service directory authority crash via a crafted policy that triggers creation of a long port list...

CVE-2011-1924: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the policysummarize function in or/policies.c in Tor before 0.2.1.30 allows remote attackers to cause a denial of service directory authority crash via a crafted policy that triggers creation of a long port list...

Citrix Licensing Administration Console Security Bypass And Denial Of Service Vulnerabilities

This host is installed with Citrix Licensing Administration Console and is prone to security bypass and denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbcitrixlicensingadminconsolemultvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Citrix Licensing Administration Console Security...

PT-2011-2292

Name of the Vulnerable Software and Affected Versions Cisco Nexus 1000V Virtual Ethernet Module VEM versions 4.04 SV11 through SV13b Description The issue is related to the improper handling of dropped packets, which can be exploited by guest OS users to cause a denial of service. This can be...

CVE-2011-0720

Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors...

CVE-2011-0482: Incorrect Type Conversion or Cast

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of anchors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document...

PT-2011-1211

Name of the Vulnerable Software and Affected Versions GNU C Library glibc or libc6 versions 2.11.3 and earlier, 2.12.x through 2.12.2 Description The issue is related to the regcomp implementation, which allows context-dependent attackers to cause a denial of service application crash via a regul...

PT-2011-1632 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices with software prior to 8.23 Description: The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by requesting a document whose name contains spac...

Microsoft Windows Task Scheduler Elevation of Privilege Vulnerability (2305420)

This host is missing a critical security update according to Microsoft Bulletin MS10-092. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2010-5432

Name of the Vulnerable Software and Affected Versions DaDaBIK versions prior to 4.3 beta2 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via the select single parameter when the insert or edit feature is enabled. This is a cross-site scripting XSS...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : mysql-5.1, mysql-dfsg-5.0, mysql-dfsg-5.1 vulnerabilities (USN-1017-1)

It was discovered that MySQL incorrectly handled certain requests with the UPGRADE DATA DIRECTORY NAME command. An authenticated user could exploit this to make MySQL crash, causing a denial of service. This issue only affected Ubuntu 9.10 and 10.04 LTS. CVE-2010-2008 It was discovered that MySQL...

CVE-2010-3851

libguestfs before 1.5.23, as used in virt-v2v, virt-inspector 1.5.3 and earlier, and possibly other products, when a raw-format disk image is used, allows local guest OS administrators to read files from the host via a crafted 1 qcow2, 2 VMDK, or 3 VDI header, related to lack of support for a dis...

Pidgin Libpurple 'purple_base64_decode()' Denial of Service Vulnerabilities (Windows)

This host has Pidgin installed and is prone to Denial of Service vulnerabilities. OpenVAS Vulnerability Test $Id: gbpidginlibpurplemultdosvulnwin.nasl 5373 2017-02-20 16:27:48Z teissa $ Pidgin Libpurple 'purplebase64decode' Denial of Service Vulnerabilities Windows Authors: Antu Sanadi Copyright:...

Apache HTTP Server 'mod_proxy_http' 2.2.9 for Unix Timeout Handling Information Disclosure Vulnerability

Apache HTTP Server is prone to an information disclosure vulnerability that affects the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...