Sockso < 1.5.1 Directory Traversal Vulnerability - Active Check

Sockso is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Zend Server 5.6.0 - Multiple Remote Script Insertion Vulnerabilities

!-- Title: Zend Server 5.6.0 Multiple Remote Script Insertion Vulnerabilities Vendor: Zend Technologies Ltd. Product web page: http://www.zend.com Affected version: Zend Server 5.6.0 Zend Optimizer+ 4.1 Zend Code Tracing 1.0 Zend Data Cache 4.0 Zend Job Queue 4.0 Zend Debugger 5.3 Zend Java Bridg...

Core FTP Server 'Type' Command Remote Denial of Service Vulnerability

This host is running Core FTP Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbcoreftpservertypecmddosvuln.nasl 5977 2017-04-19 09:02:22Z teissa $ Core FTP Server 'Type' Command Remote Denial of Service Vulnerability Authors: Sooraj KS Copyright: Copyright...

Oracle Java SE i18n子组件远程安全漏洞

BUGTRAQ ID: 52161 CVE ID: CVE-2012-0507 Sun Java Runtime Environment是一款为JAVA应用程序提供可靠的运行环境的解决方案。 Oracle Java SE中的Java Runtime Environment在实现上存在远程漏洞，可通过多个协议利用，未经验证的攻击者可利用此漏洞影响i18n子组件，导致部分控制受影响组件。此漏洞可影响：7 Update 2、6 Update 30、5.0 Update 33 0 Oracle Sun JRE 1.6.x Oracle Sun JDK 1.6.x 厂商补丁： Oracle...

JDK: unspecified vulnerability fixed in 6u31 and 7u3 (2D)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

OpenJDK: mutable repository identifiers (CORBA, 7110704)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via...

OpenJDK: incomplete info in the deserialization exception (Serialization, 7110700)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality,...

FreePBX Remote Exploit

FreePBX web interface remote vulnerability The admin username and password for the web interface is stored in plain text in this publicly accessible file: http://yourip/admin/modules/framework/bin/genampconf.php Which allows a hacker to access the web GUI and view the secretspasswords for each...

Oracle Java SE JRE 2D子组件远程安全漏洞(CVE-2012-0497)

BUGTRAQ ID: 52009 CVE ID: CVE-2012-0497 Sun Java Runtime Environment是一款为JAVA应用程序提供可靠的运行环境的解决方案。 Oracle Java SE中的Java Runtime Environment在实现上存在远程漏洞，可通过多个协议利用，未经验证的攻击者可利用此漏洞影响2D子组件，导致完全控制受影响组件。此漏洞可影响：7 Update 2、6 Update 30 0 Oracle Sun JRE 1.6.x Oracle Sun JDK 1.6.x 厂商补丁： Oracle ------...

STHS v2 Web Portal 'team' parameter Multiple SQLi Vulnerabilities

STHS v2 Web Portal is prone to multiple SQL injection SQLi vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

Sonexis ConferenceManager Multiple Information Disclosure and Security Bypass Vulnerabilities

Sonexis ConferenceManager is prone to remote information-disclosure and security-bypass vulnerabilities. An attacker may exploit these issues to obtain sensitive information and bypass certain security restrictions. Sonexis ConferenceManager versions 10.0.40 and prior are vulnerable. OpenVAS...

Microsoft Windows ASX File Parsing Remote Buffer Overflow Vulnerability

Description Microsoft Windows is prone to a remote buffer-overflow vulnerability when handling a specially crafted media file. An attacker can exploit this issue by enticing an unsuspecting user to view a webpage containing malicious content or to open a malicious media file. Successful exploits...

Edraw Diagram Component 5 - ActiveX Control LicenseName() Method Buffer Overflow

Edraw Diagram Component 5 - ActiveX Control LicenseName Method Buffer Overflow source: https://www.securityfocus.com/bid/51866/info Edraw Diagram Component ActiveX control 'EDBoard.ocx' is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on...

Joomla! Component com_propertylab - id SQL Injection

Joomla! Component compropertylab - id SQL Injection source: https://www.securityfocus.com/bid/51729/info The 'compropertylab' component for Joomla! is prone to a remote SQL injection vulnerability. A successful exploit may allow an attacker to compromise the application, access or modify data, or...

[SECURITY] [DSA 2394-1] libxml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2394-1 [email protected] http://www.debian.org/security/ Luciano Bello January 27, 2012 http://www.debian.org/security/faq -...

EPractize Labs Subscription Manager 'showImg.php' PHP Code Injection Vulnerability

EPractize Labs Subscription Manager is prone to a remote PHP code- injection vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

miniCMS Multiple Remote PHP Code Injection Vulnerabilities

miniCMS is prone to multiple vulnerabilities that attackers can leverage to execute arbitrary PHP code because the application fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected application and possibly the underlying computer. miniCMS 1.0 and 2.0 are...

miniCMS Multiple Remote PHP Code Injection Vulnerabilities

miniCMS is prone to multiple vulnerabilities that attackers can leverage to execute arbitrary PHP code because the application fails to adequately sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Joomla Some Component LFI Vulnerability (Jan 2012) - Active Check

Joomla Some component is prone to local file inclusion LFI vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Linux Kernel IGMP Remote Denial Of Service Vulnerability

This host is running Linux and prone to remote denial of service vulnerability. OpenVAS Vulnerability Test $Id: gblinuxkerneligmpdosvuln.nasl 7141 2017-09-15 09:58:49Z cfischer $ Linux Kernel IGMP Remote Denial Of Service Vulnerability Authors: Sooraj KS Copyright: Copyright c 2012 Greenbone...