UBUNTU-CVE-2012-1179

The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service host OS crash by leveraging administrative access to the guest OS, related to the pmdnoneorclearbad function and page faults for huge pages. A privileged user in the KVM guest can use this flaw to...

CsForum 0.8 Cross Site Scripting

Title: ====== CsForum v0.8 - Cross Site Scripting Vulnerability Date: ===== 2012-04-05 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=496 VL-ID: ===== 496 Introduction: ============= Forum very simple installation, this script is very light and yet it has several...

CsForum v0.8 - Cross Site Scripting Vulnerability

Document Title: =============== CsForum v0.8 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=496 Release Date: ============= 2012-04-04 Vulnerability Laboratory ID VL-ID: ==================================== 496 Produ...

DirectAdmin v1.403 - Cross Site Scripting Vulnerability

Document Title: =============== DirectAdmin v1.403 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=486 Release Date: ============= 2012-04-02 Vulnerability Laboratory ID VL-ID: ==================================== 486...

Medium: systemtap

Issue Overview: An invalid pointer read flaw was found in the way SystemTap handled malformed debugging information in DWARF format. When SystemTap unprivileged mode was enabled, an unprivileged user in the stapusr group could use this flaw to crash the system or, potentially, read arbitrary kern...

RedHat Update for systemtap RHSA-2012:0376-01

Check for the Version of systemtap OpenVAS Vulnerability Test RedHat Update for systemtap RHSA-2012:0376-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Moderate: Red Hat Security Advisory: systemtap security update

Updated systemtap packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Pandora FMS 4.0.1 Local File Inclusion

Title: ====== Pandora FMS v4.0.1 - Local File Include Vulnerability Date: ===== 2012-02-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=435 VL-ID: ===== 435 Introduction: ============= Pandora FMS is a monitoring Open Source software. It watches your systems and...

Syneto Unified Threat Management 1.3.31.4.2 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

Syneto Unified Threat Management 1.3.31.4.2 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/51597/info Syneto Unified Threat Management is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properl...

Syneto UTM WAF v1.4.2 - Multiple Web Vulnerabilities

Document Title: =============== Syneto UTM WAF v1.4.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=373 Release Date: ============= 2012-01-20 Vulnerability Laboratory ID VL-ID: ==================================== 373...

Syneto Unified Threat Management 1.3.3/1.4.2 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/51597/info Syneto Unified Threat Management is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will...

razorCMS 1.2 Path Traversal

Exploit Title: razorCMS 1.2 Path Traversal Google Dork: "Powered by razorCMS" Date: January 10, 2012 Author: chap0 Software Link: http://www.razorcms.co.uk/archive/core/ Version: 1.2 Tested on: Ubuntu Patch: Upgrade to latest release 1.2.1 Greetz To: RazorCMS is vulnerable to Path Traversal, when...

PT-2011-43: Database information disclosure in Kayako Fusion

A vulnerability has been discovered in Kayako Fusion, which can be exploited by a malicious person with a 'staff' privileged user account. The vulnerability exists in the logic of report generation, which is based on Kayako Query Language KQL. An authorized 'staff' user can generate a report...

Ubuntu 10.04 LTS : linux-mvl-dove vulnerabilities (USN-1240-1)

Ryan Sweat discovered that the kernel incorrectly handled certain VLAN packets. On some systems, a remote attacker could send specially crafted traffic to crash the system, leading to a denial of service. CVE-2011-1576 Vasiliy Kulikov and Dan Rosenberg discovered that ecryptfs did not correctly...

SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities

Document Title: =============== SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=195 Release Date: ============= 2011-09-27 Vulnerability Laboratory ID VL-ID: ====================================...

Microsoft Office Shared Component CVE-2011-1980 DLL Loading Arbitrary Code Execution Vulnerability

Description Microsoft Office is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link Libra...

[PT-2011-23] Database information disclosure in GLPI

---------------------------------------------------------------------- PT-2011-23 Positive Technologies Security Advisory Database information disclosure in GLPI ---------------------------------------------------------------------- --- Vulnerable software GLPI Version 0.80.1 and earlier...

CentOS Update for libvirt CESA-2010:0615 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

broadcast-dhcp-discover NSE Script

Sends a DHCP request to the broadcast address 255.255.255.255 and reports the results. By default, the script uses a static MAC address DE:AD:CO:DE:CA:FE in order to prevent IP pool exhaustion. The script reads the response using pcap by opening a listening pcap socket on all available ethernet...

Rosoft MediaPlayer v4.4.4 - Buffer Overflow Vulnerability

Document Title: =============== Rosoft MediaPlayer v4.4.4 - Buffer Overflow Vulnerability Release Date: ============= 2011-06-21 Vulnerability Laboratory ID VL-ID: ==================================== 94 Product & Service Introduction: =============================== Ever since we released our ve...