Lucene search
+L

1704 matches found

OpenVAS
OpenVAS
•added 2012/07/30 12:00 a.m.•15 views

CentOS Update for xulrunner CESA-2011:0373 centos5 x86_64

Check for the Version of xulrunner OpenVAS Vulnerability Test CentOS Update for xulrunner CESA-2011:0373 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

7.4AI score
SaveExploits0References2
Atlassian
Atlassian
•added 2011/07/01 10:40 a.m.•28 views

Web Sudo should be able to be subverted for non browsers (eg scripts) via a HTTP header

We do this for XSRF protection. Basically you should be able to subvert the web sudo mechanism via a HTTP header. This posts shows the use case https://answers.atlassian.com/questions/1273/jira-jelly-runner-via-cron-in-v4-3-4 I believe it just as secure since web sudo is really design to stop som...

0.5AI score
SaveExploits0
Atlassian
Atlassian
•added 2011/07/01 10:40 a.m.•45 views

Web Sudo should be able to be subverted for non browsers (eg scripts) via a HTTP header

We do this for XSRF protection. Basically you should be able to subvert the web sudo mechanism via a HTTP header. This posts shows the use case https://answers.atlassian.com/questions/1273/jira-jelly-runner-via-cron-in-v4-3-4 I believe it just as secure since web sudo is really design to stop som...

0.5AI score
SaveExploits0Affected Software1
Ubuntu
Ubuntu
•added 2010/12/09 11:01 p.m.•86 views

USN-1019-1: Firefox and Xulrunner vulnerabilities

Jesse Ruderman, Andreas Gal, Nils, Brian Hackett, and Igor Bukanov discovered several memory issues in the browser engine. An attacker could exploit these to crash the browser or possibly run arbitrary code as the user invoking the program. CVE-2010-3776, CVE-2010-3777, CVE-2010-3778 It was...

9.3CVSS8.4AI score0.08669EPSS
SaveExploits2
securityvulns
securityvulns
•added 2010/05/13 12:00 a.m.•48 views

HP Performance Center Agent / HP Load Runner Agent code execution

Code execution via TCP/54345 service...

10CVSS2.9AI score0.77647EPSS
SaveExploits5References3
Positive Technologies
Positive Technologies
•added 2008/06/12 12:00 a.m.•13 views

PT-2008-2565 · Backweb +1 · Backweb +1

Name of the Vulnerable Software and Affected Versions: BackWeb versions prior to 8.1.1.87 Logitech Desktop Manager versions prior to 2.56 Description: The issue is related to multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control. This allows remote attackers to...

9.3CVSS7.7AI score0.08395EPSS
SaveExploits1References12
CERT
CERT
•added 2008/06/10 12:00 a.m.•54 views

BackWeb Lite Install Runner ActiveX stack buffer overflows

Overview The BackWeb Lite Install Runner ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description BackWeb Lite Install Runner is an ActiveX control that is used to install software on...

9.3CVSS7.3AI score0.08395EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2008/01/10 12:00 a.m.•28 views

openSUSE 10 Security Update : epiphany (epiphany-4870)

This update brings the Mozilla XUL runner engine to security update version 1.8.1.10 MFSA 2007-37 / CVE-2007-5947: The jar protocol handler in Mozilla Firefox retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inne...

9.3CVSS8.6AI score0.05443EPSS
SaveExploits1References3
CVE
CVE
•added 2005/09/08 4:00 a.m.•55 views

CVE-2005-2862

The CVE-2005-2862 entry concerns an ADSL Road Runner modem in the Annex A family. A service listening on port 224 permits remote login with a blank password, enabling unauthorized access and partial impact to confidentiality, integrity, and availability. Public references show the vulnerability d...

7.5CVSS7.4AI score0.01332EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2005/09/08 4:00 a.m.•36 views

CVE-2005-2862

ADSL Road Runner modem in the Annex A family has a service running on port 224, which allows remote attackers to login to the modem with a blank password and gain unauthorized access...

7AI score0.01332EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/09/08 12:00 a.m.•9 views

CVE-2005-2862: Undefined Security Weakness

ADSL Road Runner modem in the Annex A family has a service running on port 224, which allows remote attackers to login to the modem with a blank password and gain unauthorized access...

7.5CVSS5.8AI score0.01332EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2003/10/06 12:00 a.m.•47 views

Conexant Access Runner DSL Console login bypass vulnerability

A vulnerability has been discovered in the Conexant Access Runner DSL Console Port 3.21. This vulnerability will let a remote attacker bypass the login screen and have full admin rights even if admin password is set. The login bypass works in the following way: When at login screen you may press...

1.6AI score
SaveExploits0
securityvulns
securityvulns
•added 2003/10/06 12:00 a.m.•35 views

Conexant Access Runner unauthorized access

During second authentication attempt it's possible to bypass authentication...

3.8AI score
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
•added 2003/10/06 12:00 a.m.•26 views

conexant.txt

From: Chris Norton To: [email protected] Subject: Conexant Access Runner DSL Console login bypass vulnerability A vulnerability has been discovered in the Conexant Access Runner DSL Console Port 3.21. This vulnerability will let a remote attacker bypass the login screen and have full admi...

7.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2001/09/08 12:00 a.m.•59 views

DoS против Canon Image Runner

Принтер чуствителен к сканированию портов...

1AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
•added 2001/09/08 12:00 a.m.•49 views

Canon Image Runner service DoS

"Kutzler, Paul" wrote: sure..... i was using the lan guard port scanner..... scanning for a port to send direct printing to and when I scanned up that high it would just freeze up...... -----Original Message----- From: Blue Boar mailto:[email protected] Sent: Friday, September 07, 2001 3:03 PM...

0.1AI score
SaveExploits0
NVD
NVD
•added 2001/06/18 4:00 a.m.•15 views

CVE-2001-0397

Buffer overflow in Silent Runner Collector SRC 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long SMTP HELO command...

7.5CVSS7.8AI score0.01791EPSS
SaveExploits0References1
CVE
CVE
•added 2001/05/24 4:00 a.m.•56 views

CVE-2001-0397

CVE-2001-0397 describes a buffer overflow in Silent Runner Collector (SRC) 1.6.1 that can be triggered by a long SMTP HELO command. The vulnerability allows remote attackers to cause a denial of service and, potentially, execute arbitrary commands. CVSS v2 base metrics are provided: AV:N/AC:L/Au:...

7.5CVSS8.1AI score0.01791EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2001/05/24 4:00 a.m.•32 views

CVE-2001-0397

Buffer overflow in Silent Runner Collector SRC 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long SMTP HELO command...

7.8AI score0.01791EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/05/24 12:00 a.m.•3 views

CVE-2001-0397: Undefined Security Weakness

Buffer overflow in Silent Runner Collector SRC 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long SMTP HELO command...

7.5CVSS6.2AI score0.01791EPSS
SaveExploits0References1
Rows per page
Query Builder