1340 matches found
Mandriva Update for perl MDVSA-2011:091 (perl)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CORE-2011-0103 - ZOHO ManageEngine ADSelfService multiple vulnerabilities
Core Security Technologies - Corelabs Advisory http://corelabs.coresecurity.com/ ZOHO ManageEngine ADSelfService multiple vulnerabilities 1. Advisory Information Title: ZOHO ManageEngine ADSelfService multiple vulnerabilities Advisory ID: CORE-2011-0103 Advisory URL:...
Core Security Technologies Advisory 2011.0103
Core Security Technologies - Corelabs Advisory http://corelabs.coresecurity.com/ ZOHO ManageEngine ADSelfService multiple vulnerabilities 1. Advisory Information Title: ZOHO ManageEngine ADSelfService multiple vulnerabilities Advisory ID: CORE-2011-0103 Advisory URL:...
CVE-2010-4729
Zikula
osCommerce v2.2 CSRF Vulnerability
Exploit for php platform in category web applications ================================== osCommerce v2.2 CSRF Vulnerability ================================== Exploit Title: osCommerce v2.2 Change Admin Pass Date: date Author: daandeveloper33 Software Link: http://oscommerce.com/ Version: v2.2...
CVE-2010-1870
The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 through 2.1.8.1, as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive whitelist, which allows remote attackers to modify server-side context objects and bypass the "" protection mechanis...
Sql injection
SQL injection vulnerability in archive.php in XlentProjects SphereCMS 1.1 alpha allows remote attackers to execute arbitrary SQL commands via encoded null bytes "%00" in the view parameter, which bypasses a protection mechanism...
CVE-2010-1078
SQL injection vulnerability in archive.php in XlentProjects SphereCMS 1.1 alpha allows remote attackers to execute arbitrary SQL commands via encoded null bytes "%00" in the view parameter, which bypasses a protection mechanism...
CVE-2009-4419
CVE-2009-4419 affects Intel Q35, GM45, PM45 Express, Q45, and Q43 Express chipsets in the SINIT Authenticated Code Module (ACM). The issue allows local users to bypass Trusted Execution Technology protection by modifying the MCHBAR register to point to an attacker-controlled region, preventing th...
CVE-2009-1936
functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass a protection mechanism to conduct remote file inclusion and directory traversal attacks, execute arbitrary PHP code, or read arbitrar...
Mandriva Linux Security Advisory : kernel (MDVSA-2008:105)
The CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled, does not honor the umask of a process, which allows local users to gain privileges. CVE-2007-3740 The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets,...
RedHat Update for kernel RHSA-2008:0237-01
Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2008:0237-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
RedHat Update for kernel RHSA-2008:0233-01
Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2008:0233-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
RedHat Update for kernel RHSA-2008:0211-01
Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2008:0211-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
CentOS Update for kernel CESA-2008:0211 centos3 i386
Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2008:0211 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
CentOS Update for kernel CESA-2008:0211 centos3 i386
Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2008:0211 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
CVE-2008-6059
xml/XMLHttpRequest.cpp in WebCore in WebKit before r38566 does not properly restrict access from web pages to the 1 Set-Cookie and 2 Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls, related to the HTTPOnly...
CVE-2009-0419
CVE-2009-0419 concerns information disclosure in Microsoft XML Core Services via Set-Cookie2 headers accessible from XMLHttpRequest. Connected documentation shows Microsoft MS08-069 (KB955218) addressing XML Core Services vulnerabilities, resolving an information-disclosure risk and guiding updat...
Cross site scripting
The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not properly handle some HTTP headers that appear after a CRLF sequence in a URI, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS or redirection attacks, as demonstrated by the 1 Location and 2...
CVE-2008-5554
The CVE-2008-5554 entry describes a vulnerability in Microsoft Internet Explorer 8.0 Beta 2 where the XSS Filter fails to properly handle certain HTTP headers that appear after a CRLF in a URI, permitting bypass of the XSS protection and enabling XSS or redirection via headers such as Location or...