4492 matches found
CVE-2011-4073
Openswan pluto IKE daemon (versions 2.3.0–2.6.36) is affected by a use-after-free in the cryptographic helper handler. This remote authenticated vulnerability can crash the daemon (DoS) via vectors in quick_outI1_continue and quick_outI1. A patch exists in Openswan 2.6.37+; upgrade to mitigate. I...
CVE-2010-5024
SQL injection vulnerability in manage/adduser.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the userid parameter. NOTE: some of these details are obtained from third party information...
Design/Logic Flaw
The BlackBerry Collaboration Service in Research In Motion RIM BlackBerry Enterprise Server BES 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows remote authenticated users to log into arbitrary user accounts associated with the same organization, and send messages, read messages,...
X.org: multiple GLX input sanitization flaws
The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service server crash and possibly execute arbitrary code via 1 a crafted request that triggers a client swap in glx/glxcmdsswap.c; or 2 a crafted length or 3 a negative value in the screen field in a...
X.org: multiple GLX input sanitization flaws
The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service server crash and possibly execute arbitrary code via 1 a crafted request that triggers a client swap in glx/glxcmdsswap.c; or 2 a crafted length or 3 a negative value in the screen field in a...
PT-2011-4376 · Cisco · Cisco Asa +1
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.0 through 7.08.12 Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.1 through 7.25.2 Cisco Adaptive Security Appliances ASA 5500 series devices versions...
OpenSSH < 4.9 'ForceCommand' Directive Bypass
According to its banner, the version of OpenSSH installed on the remote host is earlier than 4.9. It may allow a remote, authenticated user to bypass the 'sshdconfig' 'ForceCommand' directive by modifying the '.ssh/rc' session file. C Tenable, Inc. include"compat.inc"; if description scriptid4407...
Design/Logic Flaw
Unspecified vulnerability on HP NonStop Servers with software H06.x through H06.23.00 and J06.x through J06.12.00, when Samba is used, allows remote authenticated users to execute arbitrary code via unknown vectors...
CVE-2011-2411
Unspecified vulnerability on HP NonStop Servers with software H06.x through H06.23.00 and J06.x through J06.12.00, when Samba is used, allows remote authenticated users to execute arbitrary code via unknown vectors...
CVE-2011-2543
Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users to cause a denial of service endpoint reboot or process crash or possibly execute arbitrary code via a long location parameter to the getxml program, aka Bug...
CVE-2011-2543
CVE-2011-2543 affects Cisco TelePresence System Integrator C Series 4.x up to TC4.2.0. A buffer overflow in the cuil component triggered by a long location parameter to getxml (via the locally listening tshell) allows remote authenticated users to cause a denial of service (endpoint reboot or pro...
JAKCMS PRO 2.2.5 Arbitrary File Upload
Exploit Title: JAKCMS PRO = 2.2.5 Remote Arbitrary File Upload Exploit Google Dork: "Powered By JAKCMS" Date: 21/09/2011 Author: EgiX Software Link: http://www.jakcms.com/ Version: 2.2.5 Tested on: Windows 7 and Debian 6.0.2 ?php / -------------------------------------------------------- JAKCMS P...
Arbitrary file deletion
Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Office Groove Data Bridge Server 2007 SP2, Office Groove Management Server 2007 SP2, Groove Server 2010 Gold and...
Authentication flaw
EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not prevent reuse of authentication information during a session, which allows remote authenticated users to bypass intended access restrictions via vectors related to knowledge of the...
Remote Authentication Message Check
In order to avoid false positives, this plugin determines if the remote system accepts any kind of login. Some SSH implementations claim that a login has been accepted when it has not. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55900; scriptversion"1.11";...
UBUNTU-CVE-2011-2907
Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBSOHOST variable to the qsub program...
IBM JDK Class file parsing denial-of-service
The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service JVM segmentation fault, and possibly memory consumption or an infinite loop via a crafted...
DEBIAN-CVE-2011-2511
Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service libvirtd crash and possibly execute arbitrary code via a crafted VirDomainGetVcpus RPC call that triggers memory corruption...
Directory traversal
Multiple directory traversal vulnerabilities in the relational schema implementation in phpMyAdmin 3.4.x before 3.4.3.2 allow remote authenticated users to include and execute arbitrary local files via directory traversal sequences in an export type field, related to 1...
libvirt: integer overflow in VirDomainGetVcpus
Integer overflow in libvirt before 0.9.3 allows remote authenticated users to cause a denial of service libvirtd crash and possibly execute arbitrary code via a crafted VirDomainGetVcpus RPC call that triggers memory corruption...