2902 matches found
FreeBSD : horde -- XSS vulnerability in help window (67)
The following package needs to be updated: horde-devel %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkged1d404d278411d9b954000bdb1444a4.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...
FreeBSD : postgresql-contrib -- insecure temporary file creation (153)
The following package needs to be updated: postgresql-contrib %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg6a164d842f7f11d9a9e70001020eed82.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML :...
Skype buffer overflow
callto: URL buffer overflow...
Nortel Multiple Default Accounts
It is possible to log into the remote host by using a default set of credentials. An attacker may use these to gain access to the remote host. These credentials are commonly found on Nortel Accelar routing switches. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Cisco Security Advisory: Crafted Timed Attack Evades Cisco Security Agent Protections
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================== Crafted Timed Attack Evades Cisco Security Agent Protections ============================================================ Document ID: 63326 Revision 1.0: FINAL For Public Release 2004 November 11 1600...
Aztek Forum 4.0 - Multiple Input Validation Vulnerabilities
Aztek Forum 4.0 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/11654/info Aztek Forum is reported prone to multiple input validation vulnerabilities. These issues may allow an attacker to carry out cross-site scripting and possibly other attacks. All version...
Multiple vulnerabilities in Icewarp Web Mail 5.2.8 : New face of old problems.
TITLE: Multiple vulnerabilities in Icewarp Web Mail 5.2.8 : New face of old problems. BACKGROUND Merak Mail Server, with the revolutionary Merak Mail Server GroupWare Server, cutting-edge Merak Mail Server Instant Antispam and much more, is the fastest, most stable, secure and 100 virus free mail...
[SA12980] Phorum Unspecified Cross-Site Scripting and SQL Injection
TITLE: Phorum Unspecified Cross-Site Scripting and SQL Injection SECUNIA ADVISORY ID: SA12980 VERIFY ADVISORY: http://secunia.com/advisories/12980/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Phorum 5.x...
best software SalesLogix 2000.0 - Multiple Vulnerabilities
best software SalesLogix 2000.0 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/11450/info Best Software SalesLogix is affected by multiple vulnerabilities. These issues are due to design errors that reveal sensitive information, access control validation issues that allow...
sudo -- environmental variable CDPATH is not cleared
A sudo bug report says: sudo doesn't unset the CDPATH variable, which leads to possible security problems...
Multiple Cyrus-SASL bugs
Buffer overflow in digestmda5.c and during environment parsing. User supplied modules are loaded into suid application...
sysstat symbolic links problem
unsafe isag utility temporary files creation...
YaBB Multiple Vulnerabilities
Binary data 2305.prm...
mambo45.jose.txt
--------------------------------------------------------------------------- Two Vulnerabilities in Mambo --------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2004 Location: Basque Country...
phpMyBackupPro < 1.0.0 Unspecified Input Validation Issues
The remote host seems to be using phpMyBackupPro. It is reported that the remote version of this software is prone to multiple security weaknesses regarding user input validation. An attacker may use these issues to gain access to the application or to access the underlying database. %NASLMINLEVE...
getinternet.txt
CRIOLABS - Software: getInternet - Type: E-business:Internet - Company: getSolutions - Date: 09-9-2004 Software: getInternet Platform: ASP, Microsoft SQL Comments: Administration section Not Tested Description getInternet will allow you to maintain, manage and control all of the content on your...
Twin FTP Server directory traversal
No description provided...
Microsoft Internet Explorer window.createPopup() method creates chromeless windows
Overview The Internet Explorer IE window.createPopup method creates chromeless popup windows. These windows can be used to spoof the user interface in Internet Explorer, any Windows application, or the Windows desktop. Description The visible area of a web browser window can be categorized into t...
