Ubuntu 13.10 : neutron vulnerability (USN-2194-1)

Aaron Rosen discovered that OpenStack Neutron did not properly perform authorization checks when creating ports when using plugins relying on the l3-agent. A remote authenticated attacker could exploit this to access the network of other tenants. Note that Tenable Network Security has extracted t...

Xangati software release contains relative path traversal and command injection vulnerabilities

Overview Xangati's software release contains relative path traversal CWE-23 and command injection CWE-78 vulnerabilities. Description Xangati's software release contains relative path traversal CWE-23 and command injection CWE-78 vulnerabilities.CWE-23: Relative Path Traversal -CVE-2014-0358 The...

GroundWork monarch_scan.cgi OS Command Injection Vulnerability

This Metasploit module exploits a vulnerability found in GroundWork 6.7.0. This software is used for network, application and cloud monitoring. The vulnerability exists in the monarchscan.cgi, where user controlled input is used in the perl qx function, which allows any remote authenticated...

GroundWork monarch_scan.cgi OS Command Injection

This module exploits a vulnerability found in GroundWork 6.7.0. This software is used for network, application and cloud monitoring. The vulnerability exists in the monarchscan.cgi where user controlled input is used in the perl qx function. This allows any remote authenticated attacker, regardle...

Ubuntu Update for libvirt USN-1180-1

Ubuntu Update for Linux kernel vulnerabilities USN-1180-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11801.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for libvirt USN-1180-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Oracle Secure Backup Administration preauth Variable Command Injection (CVE-2010-0906)

Oracle Secure Backup is a backup solution allowing for centralized tape backup management. The server allowsfor single point of management of data present on network attached storage NAS devices and distributed hostswhich may have different operating systems. A command execution vulnerability...

Ubuntu Update for PostgreSQL vulnerabilities USN-942-1

Ubuntu Update for Linux kernel vulnerabilities USN-942-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9421.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for PostgreSQL vulnerabilities USN-942-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ultimate Bulletin Board 6.06.2 - UBBER Cookie HTML Injection

Ultimate Bulletin Board 6.06.2 - UBBER Cookie HTML Injection source: https://www.securityfocus.com/bid/8212/info Ultimate Bulletin Board has been reported prone to a HTML injection vulnerability. The issue likely presents itself due to a lack of sanitization performed on cookie data. It has been...