CVE-2007-4910

Unspecified vulnerability in netInvoicing before 2.7.3 has unknown impact and attack vectors, related to "security check soap"...

CVE-2007-4910

CVE-2007-4910 concerns an unspecified vulnerability in netInvoicing prior to 2.7.3, with an unclear impact and attack vectors. The description links the issue to a component/string labeled “security check soap,” but concrete root-cause, affected modules, fixes, or exploit details are not provided...

CVE-2007-4910: Undefined Security Weakness

Unspecified vulnerability in netInvoicing before 2.7.3 has unknown impact and attack vectors, related to "security check soap"...

AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit

Exploit for unknown platform in category web applications =============================================================== AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit =============================================================== !/usr/bin/php -q -d shortopentag=on ? echo "...

Solaris 9 (sparc) : 125713-02

NetConnect 3.2.3: srsexec patch for Solaris 8/9/10. Date this patch was last updated by Sun : Oct/22/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'...

Solaris 5.9 (x86) : 117884-02

Application Server 7.1x86: Java Mail Runtime Patch. Date this patch was last updated by Sun : Feb/18/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. i...

CVE-2006-4550

Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files via .. dot dot sequences in the format parameter with a leading ".", which bypasses a security check...

CVE-2006-4550

Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files via .. dot dot sequences in the format parameter with a leading ".", which bypasses a security check...

Security check of js_ValueToFunctionObject() can be circumvented — Mozilla

The security check in jsValueToFunctionObject can be bypassed by clever use of setTimeout and the new Firefox 1.5 array method ForEach. shutdown demonstrated how to leverage this into a privilege escalation vulnerability that would allow the installation of malware...

IMail < 7.06 Account Hijack Vulnerability

The remote host is running IMail web interface. In this version, the session is maintained via the URL. It will be disclosed in the Referer field if you receive an email with external links e.g. images SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a...

Login configurations

Provide the username/password for the common services: HTTP, FTP, NNTP, POP2, POP3, IMAP and SMB NetBios. SPDX-FileCopyrightText: 2005 Georges Dagousset Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

CVE-2005-3416: Undefined Security Weakness

phpBB 2.0.17 and earlier, when registerglobals is enabled and the sessionstart function has not been called to handle a session, allows remote attackers to bypass security checks by setting the $SESSION and $HTTPSESSIONVARS variables to strings instead of arrays, which causes an arraymerge functi...

Script injection from Firefox sidebar panel using data: — Mozilla

Sites can use the search target to open links in the Firefox sidebar. A missing security check allows the sidebar to inject data: urls containing scripts into any page open in the browser. This could be used to steal cookies, passwords or other sensitive data...

HP-UX PHSS_26478 : HPSBUX0203-189 Sec, Vulnerability in VVOS Web proxy (rev.1)

s700800 11.04 HP Praesidium Webproxy 1.0 server update : Security Vulnerability using HP Praesidium Webproxy 1.0. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS26478. The text itself is copyright C...

HP-UX Security Patch : PHNE_28810

sendmail1m 8.9.3 patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid16574; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...

HP-UX PHNE_14479 : s700_800 11.00 ftpd(1M) and ftp(1) patch

s700800 11.00 ftpd1M and ftp1 patch : ftp client interprets server provided filenames which can cause commands to be run on the client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE14479. The text itself...

HP-UX PHCO_22665 : HPSBUX0012-135 Sec. Vulnerability in kermit(1) (rev.2)

s700800 11.00 kermit1 patch : Kermit communications software contains a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO22665. The text itself is copyright C Hewlett-Packard Development...

HP-UX PHCO_22096 : HPSBUX0008-118 Sec. Vulnerability in newgrp(1) (rev.1)

s700800 11.00 cumulative newgrp1 patch : Security vulnerability in the newgrp1 command. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO22096. The text itself is copyright C Hewlett-Packard Development...

HP-UX PHNE_17190 : s700_800 11.00 sendmail(1m) 8.8.6 patch

s700800 11.00 sendmail1m 8.8.6 patch : sendmail release 8.8.6 causes Denial of Service failures. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE17190. The text itself is copyright C Hewlett-Packard...

HP-UX PHSS_21663 : HPSBUX0001-108 Sec. Vulnerability with Aserver (rev. 04)

s700800 11.00 AudioSubsystem June 2000 Periodic Patch : /opt/audio/bin/Aserver can be used to gain root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS21663. The text itself is copyright C...