9448 matches found
Novell eDirectory Multiple Vulnerabilities - Windows
Novell eDirectory is prone to cross-site scripting XSS, denial of service DoS and remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
IBM DB2 9.5 < 9.5 Fix Pack 2 Multiple Vulnerabilities
Binary data 4638.prm...
IBM DB2 9.5 < Fix Pack 2 Multiple Vulnerabilities
The installation of IBM DB2 9.5 running on the remote host does not have Fix Pack 2 applied. It is, therefore, affected by the following issues : - DB2 does not mark inoperative or drop views and triggers if the definer cannot maintain the objects IZ22307. - Password-related connection string...
SMB Registry : Windows Build Number and Service Pack Version
Detection of the installed Windows build number and Service Pack version. The script logs in via SMB, reads various registry keys to retrieve the Windows build number and Service Pack version. SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced...
PT-2008-5134 · Newsoft · Folder Lock
Name of the Vulnerable Software and Affected Versions: Folder Lock versions 5.9.5 and earlier Description: The issue concerns the use of weak encryption, specifically ROT-25, for password protection. This weakness allows local administrators to access sensitive information by reading and decrypti...
McAfee Encrypted USB Manager Remote Security Bypass Vulnerability
The host is running McAfee Encrypted USB Manager, which is prone to sensitive information disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodmcafeeencryptusbmngrsecbypassvuln900026.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: McAfee Encrypted USB Manager Remote Security Bypass...
Immunity Canvas: MS08_049
Name| ms08049 ---|--- CVE| CVE-2008-1457 Exploit Pack| CANVAS Description| EventSystem Service Overflow Notes| CVE Name: CVE-2008-1457 VENDOR: Microsoft Notes: Due to the fact that the svchost.exe instance where the EventSystem service is running is DEP protected, and that all loaded DLLs have GS...
Design/Logic Flaw
Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which allows remote attackers to execute arbitrary code via a crafted PICT file with an invalid bitsperpixel field, aka the "PICT Filter Parsing Vulnerability," a...
CVE-2008-3020
Microsoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse the length of a BMP file, which allows remote attackers to execute arbitrary code via a crafted BMP file, aka the "Malformed BMP Filter Vulnerability."...
CVE-2008-3019
CVE-2008-3019 describes a remote code execution vulnerability in Microsoft Office filters related to malformed Encapsulated PostScript (EPS) handling. A crafted EPS file could allow code execution when opened with affected Office products: Office 2000 SP3, XP SP3, and 2003 SP2, plus the Office Co...
CVE-2008-3020
CVE-2008-3020 is a remote code execution vulnerability in Microsoft Office filters, specifically in the BMPIMP32.FLT module used by Office BMP import handling. A crafted BMP image with a malformed header (e.g., an excessive number of colors) causes a heap buffer overflow/memory corruption in BMP ...
Security Update for 2007 Microsoft Office System (KB951596)
A security vulnerability exists in the Compatibility Pack for the 2007 Microsoft Office System that could allow arbitrary code to run when you open a maliciously modified file. This update resolves that vulnerability...
Security Update for 2007 Microsoft Office System (KB954038)
A security vulnerability exists in the Compatibility Pack for the 2007 Microsoft Office System that could allow arbitrary code to run when you open a maliciously modified file. This update resolves that vulnerability...
Microsoft Security Bulletin MS08-042 – Important Vulnerability in Microsoft Word Could Allow Remote Code Execution (955048)
Microsoft Security Bulletin MS08-042 – Important Vulnerability in Microsoft Word Could Allow Remote Code Execution 955048 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves a publicly reported vulnerability in Microsoft Word. This...
Microsoft Security Bulletin MS08-051 – Critical Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (949785) Microsoft Security Bulletin MS08-051 – Critical
Microsoft Security Bulletin MS08-051 – Critical Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution 949785 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves three privately reported vulnerabilities in Microsoft Office...
DSquare Exploit Pack: D2SEC_WEBEX
Name| d2secwebex ---|--- CVE| CVE-2008-3558 Exploit Pack| D2ExploitPack Description| WebEx Meeting Manager atucfobj.dll ActiveX Stack Overflow Notes|...
IBM DB2 9.5 < 9.5 Fix Pack 1 Multiple Vulnerabilities
Binary data 4612.prm...
DSquare Exploit Pack: D2SEC_K9WEB
Name| d2seck9web ---|--- CVE| CVE-2007-2952 Exploit Pack| D2ExploitPack Description| Blue Coat K9 Web Protection 'Referer' Header Stack Overflow Vulnerability Notes|...
IBM DB2 < 9.5 Fix Pack 1 Multiple Vulnerabilities
The installation of IBM DB2 9.5 running on the remote host does not have any Fix Packs applied. It is, therefore, affected by one or more of the following issues : - There is a security vulnerability in the 'NNSTAT' procedure on Windows platforms only that allows low- privileged users to overwrit...
IBM WebSphere应用服务程序存在未明漏洞
BUGTRAQ ID: CNCAN ID：CNCAN-2008072105 IBM WebSphere Application Server是一款商业性质的WEB应用服务程序。 IBM WebSphere应用服务程序"PropFilePasswordEncoder"工具存在未明错误。 目前没有详细漏洞细节提供。 IBM WebSphere Application Server 5.x 可采用Fix Pack 19 5.1.1.19： http://www-1.ibm.com/support/docview.wss?uid=swg27006879...