7185 matches found
Enterasys Dragon Enterprise Reporting detection
The remote host is running the Enterasys Dragon Enterprise Reporting on this port. OpenVAS Vulnerability Test $Id: enterasysdragonreportingdetect.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Enterasys Dragon Enterprise Reporting detection Authors: David Maciejak Copyright: Copyright C 200...
Websense Reporting Console Detection (HTTP)
The remote host appears to be running Websense, connections are allowed to the web reporting console. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
PHP-Nuke 7.8 - SQL Injection / Remote Command Execution
?php 20.05 23/10/2005 ---phpnuke78xpl.php PHPNuke 7.8 with all security fixes/patches "Downloads","WebLinks" & "YourAccount" modules SQL Injection / remote commands execution exploit yet not tested 7.9, but OK... by rgod site: http://rgod.altervista.org make these changes in php.ini if you have...
bluecoat7111.txt
Blue Coat Reporter 7.1.1.1 - multiple remote vulnerabilities ============================================================ Blue Coat Reporter ================== "Blue Coat Reporter 7 provides identity-based reporting on Web communications enabling enterprises to evaluate Web policies and manage...
Enterasys Dragon Enterprise Reporting Detection
The reporting console for Dragon, a network intrusion detection system distributed by Enterasys, is running on this port. C Tenable Network Security, Inc. Changes by Tenable: - Changed family 8/31/09 - rewritten 2009-11-17 include"compat.inc"; ifdescription scriptid18532; scriptversion"2.9";...
CVE-2005-1706
Unknown vulnerability in MailScanner 4.41.3 and earlier, related to "incomplete reporting of viruses in zip files," allows remote attackers to bypass virus detection...
Oracle Reports Server test.jsp Multiple Parameter XSS
The remote host is running Oracle Report Server, a reporting application. The remote version of this software contains to a cross-site scripting vulnerability that may allow an attacker to use the remote host to perform a cross-site scripting attack. %NASLMINLEVEL 70300 C Tenable Network Security...
[SA14515] Drupal Unspecified Cross-Site Scripting Vulnerability
---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...
report bug bug reporting application weak permissions
Per-user configuration file is world readable and may contain sensitive information, such as SMTP server password...
squid -- correct handling of oversized HTTP reply headers
The squid patches page notes: This patch addresses a HTTP protocol mismatch related to oversized reply headers. In addition it enhances the cache.log reporting on reply header parsing failures to make it easier to track down which sites are malfunctioning. It is believed that this bug may lead to...
Squid < 2.5.STABLE7 Report Information Disclosure
Binary data 2491.prm...
CVE-2004-2748
viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via an invalid profileid parameter, which leaks the pathname in an error message...
Debian DSA-477-1 : xine-ui - insecure temporary file creation
Shaun Colley discovered a problem in xine-ui, the xine video player user interface. A script contained in the package to possibly remedy a problem or report a bug does not create temporary files in a secure fashion. This could allow a local attacker to overwrite files with the privileges of the...
Mozilla Firefox Error Reporting Version Check (deprecated)
Binary data 2285.prm...
RHEL 2.1 : rxvt (RHSA-2003:055)
Updated rxvt packages are available which fix a number of vulnerabilities in the handling of escape sequences. Updated 12 March 2003 Added packages for Red Hat Enterprise Linux ES and Red Hat Enterprise Linux WS Rxvt is a color VT102 terminal emulator for the X Window System. A number of issues...
CVE-2004-0518
CVE-2004-0518 affects AppleFileServer on Mac OS X 10.3.4. The vulnerability is associated with the use of SSH and reporting errors; impact and attack vectors are unknown. CVSS2 base score 7.5 (HIGH) with network attack vector, low complexity, no authentication required, and partial confidentialit...
[Full-Disclosure] Format String Vulnerability in Tripwire
SUMMARY ------- Tripwiretm is a Security, Intrusion Detection, Damage Assessment and Recovery, Forensics software. A vulnerability in the product allows a user on the local machine under certain circumstances to execute arbitrary code with the rights of the user running the program typically root...
DSA-477 xine-ui - insecure temporary file creation
Bulletin has no description...
WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure
WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure source: https://www.securityfocus.com/bid/9460/info The WebTrends Reporting Center management interface discloses installation path information when an invalid argument for an interface URI parameter is requested. This...
WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure
source: https://www.securityfocus.com/bid/9460/info The WebTrends Reporting Center management interface discloses installation path information when an invalid argument for an interface URI parameter is requested. This information may permit an attacker to enumerate the layout of the underlying...