Phorum search.php location Parameter HTTP Response Splitting

The version of Phorum installed on the remote host does not properly sanitize input used in the Location response header. An attacker can exploit this flaw with a specially crafted request to inject malicious code into HTTP headers, which may allow execution of arbitrary HTML and script code in a...

Icecast XSL Parser Multiple Vulnerabilities (OF, ID)

The remote host is running a version of Icecast that suffers from two flaws in its XSL parser. - A Locally-Exploitable Buffer Overflow Vulnerability The XSL parser does not check the size of XSL 'when', 'if', and 'value-of' tag values before copying them into a finite buffer in process memory. An...

GLSA-200503-27 : Xzabite dyndnsupdate: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200503-27 Xzabite dyndnsupdate: Multiple vulnerabilities Toby Dickenson discovered that dyndnsupdate suffers from multiple overflows. Impact : A remote attacker, posing as a dyndns.org server, could execute arbitrary code with the...

PHP-Fusion < 5.0.2 setuser.php HTML Injection Vulnerability

Binary data 2726.prm...

HP-UX PHSS_27637 : HPSBUX0209-217 Sec. Vulnerability in Apache OpenSSL (rev.2)

s700800 11.04 Virtualvault 4.6 TGP IP Aliasing fix : Remotely exploitable potential vulnerabilities have been reported in CA-2002-21 and CVE-2002-0658. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS27637...

HP-UX Security patch : PHCO_27819

The remote host is missing HP-UX Security Patch number PHCO27819 . SSRT3618 Rev. 1 HP-UX shells %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17386; scriptversion"1.6";...

HP-UX Security patch : PHNE_17248

The remote host is missing HP-UX Security Patch number PHNE17248 . Security Vulnerability with rpc.pcnfsd %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17412; scriptversion"1.7";...

Phorum < 5.0.15 HTML Injection

Binary data 2705.prm...

GLSA-200503-17 : libexif: Buffer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200503-17 libexif: Buffer overflow vulnerability libexif contains a buffer overflow vulnerability in the EXIF tag validation code. When opening an image with a specially crafted EXIF tag, the lack of validation can cause...

Mozilla Thunderbird < 1.0.2 Multiple Vulnerabilities (deprecated)

Binary data 2703.prm...

CA License Service Multiple Vulnerabilities

The remote host is running the Computer Associate License Application. The remote version of this software is vulnerable to several flaws that could allow a remote attacker to execute arbitrary code on the remote host with SYSTEM privileges. C KK Liu Changes by Tenable: - Fixed the request -...

PhotoPost Multiple Vulnerabilities

Binary data 2694.prm...

IDA Pro Disassembler Software Detection

The remote host seems to be running the IDA Pro Disassembler program. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17258; scriptversion"1.16"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"IDA Pro Disassembler Software Detection"; scriptsummaryenglish:"IDA Pr...

SUSE-SA:2005:008: squid

The remote host is missing the patch for the advisory SUSE-SA:2005:008 squid. Squid is an Open Source web proxy. A remote attacker was potentially able to crash the Squid web proxy if the logfqdn option was set to 'on' and the DNS replies were manipulated. This is tracked by the Mitre CVE ID...

TrackerCam Multiple Remote Vulnerabilities

The remote host is running TrackerCam, a HTTP software that allows a user to publish a webcam feed thru a website. The remote version of this software is affected by multiple vulnerabilities : - Buffer overflows which may allow an attacker to execute arbitrary code on the remote host. - A directo...

HP-UX Security patch : PHCO_23321

The remote host is missing HP-UX Security Patch number PHCO23321 . Sec. Vulnerability in kermit1 REVISED01 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17077; scriptversion"1.7";...

HP-UX PHSS_31823 : s700_800 11.04 Virtualvault 4.7 IWS update

s700800 11.04 Virtualvault 4.7 IWS update : The ssllog function in modssl contains a flaw in versions prior to 2.8.19 that may allow execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch...

osCommerce contact_us.php enquiry Parameter XSS

The installed version of OSCommerce is vulnerable to a cross-site scripting XSS attack. An attacker, exploiting this flaw, would need to be able to coerce an unsuspecting user into visiting a malicious website. Upon successful exploitation, the attacker would potentially be able to steal...

HP-UX Security patch : PHSS_16147

The remote host is missing HP-UX Security Patch number PHSS16147 . Security Vulnerability in dtmail/rpc.ttdbserverd on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17096;...

HP-UX Security patch : PHCO_14254

The remote host is missing HP-UX Security Patch number PHCO14254 . Security Vulnerability with rpc.pcnfsd %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16563; scriptversion"1.7";...