9568 matches found
GLSA-200610-01 : Mozilla Thunderbird: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200610-01 Mozilla Thunderbird: Multiple vulnerabilities A number of vulnerabilities have been found and fixed in Mozilla Thunderbird. For details please consult the references below. Impact : The most severe vulnerabilities might...
UBB.threads doeditconfig Arbitrary Command Injection
The version of UBB.threads installed on the remote host fails to sanitize input to the 'thispath' and 'config' parameters of the 'admin/doeditconfig.php' script before using them to update the application's configuration file. Provided PHP's 'registerglobals' setting is enabled, an unauthenticate...
DokuWiki fetch.php Multiple Parameter imconvert Function Arbitrary Command Execution
The remote host is running DokuWiki, an open source wiki application written in PHP. The installed version of DokuWiki fails to properly sanitize input to the 'w' and 'h' parameters of the 'lib/exe/fetch.php' script before using it to execute a command when resizing images. An unauthenticated...
GLSA-200609-14 : ImageMagick: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200609-14 ImageMagick: Multiple Vulnerabilities Tavis Ormandy of the Google Security Team discovered a stack and heap buffer overflow in the GIMP XCF Image decoder and multiple heap and integer overflows in the SUN bitmap decoder...
ColdFusion MX Server Detection
The remote host is running Macromedia ColdFusion MX, a commercial application server and website development framework. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid22361; scriptversion"1.14";...
GLSA-200609-09 : FFmpeg: Buffer overflows
The remote host is affected by the vulnerability described in GLSA-200609-09 FFmpeg: Buffer overflows FFmpeg contains buffer overflows in the AVI processing code. Impact : An attacker could trigger the buffer overflows by enticing a user to load a specially crafted AVI file in an application usin...
Quicktime < 7.1.3 Multiple Vulnerabilities (Mac OS X)
The remote Mac OS X host is running a version of Quicktime prior to 7.1.3. The remote version of Quicktime is vulnerable to various integer and buffer overflows involving specially crafted image and media files. An attacker may be able to leverage these issues to execute arbitrary code on the...
HP OpenView BBC Service Detection
The remote host appears to be running an HP OpenView product. This specific service is an HTTP server. By sending special requests version, info, status, ping, services, ..., it is possible to obtain information about the remote host. C Tenable Network Security, Inc. include"compat.inc"; if...
phpLocal.txt
Affected versions: php 5.1.4 and older, 4.4.3 and possibly older Cause: when php-s sscanf functions format argument contains argument swap and extra arguments are given like. sscanf'foo ','$1s',$bar then it reads an pointer to pointer to zval structure past the end of argument array by one. Php...
MS06-047: Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (921645)
The remote host is running a version of Microsoft Visual Basic for Applications that is vulnerable to a buffer overflow when handling malformed documents. An attacker may exploit this flaw to execute arbitrary code on this host by sending a malformed file to a user of the remote host. C Tenable...
GLSA-200607-06 : libpng: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-200607-06 libpng: Buffer overflow In pngrutil.c, the function pngdecompresschunk allocates insufficient space for an error message, potentially overwriting stack data, leading to a buffer overflow. Impact : By enticing a user to...
MS06-034: Vulnerability in Microsoft IIS using ASP Could Allow Remote Code Execution (917537)
The remote host is running a version of Windows and IIS that is vulnerable to a flaw that could allow an attacker who has the privileges to upload arbitrary ASP scripts to it to execute arbitrary code. Specifically, the remote version of IIS is vulnerable to a flaw when parsing specially crafted...
IBM DB2 Administration Server Detection
The remote host is running an IBM DB2 Administration Server. DB2 is an enterprise relational database management system, and the Administration Server is used by DB2 to administer databases across a network. C Tenable, Inc. include"compat.inc"; if description scriptid22016; scriptversion"1.31";...
OpenOffice < 2.0.3 Multiple Vulnerabilities
The remote host is running a version of OpenOffice.org which is older than version 2.0.3. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it. The file could be crafted in...
Scout Portal Toolkit SPT--ForumTopics.php forumid Parameter SQL Injection
The remote host is running Scout Portal Toolkit, an open source toolkit for organizing collections of online resources / knowledge. The version of Scout Portal Toolkit installed on the remote host fails to sanitize user-supplied input to the 'forumid' parameter to the 'SPT--ForumTopics.php' scrip...
Wikka wikka.php Local File Inclusion
The remote host is running Wikka, a lightweight, open source wiki application written in PHP. The version of Wikka installed on the remote host has a programming error in the 'Method-method' in 'wikka.php'. By leveraging this issue, an unauthenticated attacker may be able to access arbitrary PHP...
MS06-021: Cumulative Security Update for Internet Explorer (916281)
The remote host is missing the IE cumulative security update 916281. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid21685;...
Rendezvous Daemon Detection
The remote host is running a Rendezvous daemon on the specified port. Rendezvous is a commercial messaging software product used for building distributed applications, and a Rendezvous daemon is the central communications component of the software. %NASLMINLEVEL 70300 C Tenable Network Security,...
WinGate POST Request Buffer Overflow
The remote host appears to be running WinGate Proxy Server, a Windows application for managing and securing Internet access. According to its banner, the version of WinGate installed on the remote host is affected by a buffer overflow vulnerability in its HTTP proxy service. An attacker with acce...