AIX 530006 : U813593

The remote host is missing AIX PTF U813593 which is related to the security of the package devices.pci.14101103.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

Remote file inclusion

contrib/mxglancesdesc.php in the mxglance 2.3.3 module for mxBB places a critical security check within a comment because of a missing comment delimiter, which allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via a URL in the mxrootpath parameter...

CVE-2007-5178

contrib/mxglancesdesc.php in the mxglance 2.3.3 module for mxBB places a critical security check within a comment because of a missing comment delimiter, which allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via a URL in the mxrootpath parameter...

HP-UX Security Patch : PHSS_28878

X OV NNM6.2 Intermediate Patch, March 2003 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26670; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2007-4910

Unspecified vulnerability in netInvoicing before 2.7.3 has unknown impact and attack vectors, related to "security check soap"...

Design/Logic Flaw

Unspecified vulnerability in netInvoicing before 2.7.3 has unknown impact and attack vectors, related to "security check soap"...

CVE-2007-4910

Unspecified vulnerability in netInvoicing before 2.7.3 has unknown impact and attack vectors, related to "security check soap"...

CVE-2007-4910

CVE-2007-4910 concerns an unspecified vulnerability in netInvoicing prior to 2.7.3, with an unclear impact and attack vectors. The description links the issue to a component/string labeled “security check soap,” but concrete root-cause, affected modules, fixes, or exploit details are not provided...

AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit

Exploit for unknown platform in category web applications =============================================================== AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit =============================================================== !/usr/bin/php -q -d shortopentag=on ? echo "...

Solaris 9 (sparc) : 125713-02

NetConnect 3.2.3: srsexec patch for Solaris 8/9/10. Date this patch was last updated by Sun : Oct/22/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'...

Solaris 5.9 (x86) : 117884-02

Application Server 7.1x86: Java Mail Runtime Patch. Date this patch was last updated by Sun : Feb/18/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. i...

CVE-2006-4550

Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files via .. dot dot sequences in the format parameter with a leading ".", which bypasses a security check...

CVE-2006-4550

Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files via .. dot dot sequences in the format parameter with a leading ".", which bypasses a security check...

Security check of js_ValueToFunctionObject() can be circumvented — Mozilla

The security check in jsValueToFunctionObject can be bypassed by clever use of setTimeout and the new Firefox 1.5 array method ForEach. shutdown demonstrated how to leverage this into a privilege escalation vulnerability that would allow the installation of malware...

IMail < 7.06 Account Hijack Vulnerability

The remote host is running IMail web interface. In this version, the session is maintained via the URL. It will be disclosed in the Referer field if you receive an email with external links e.g. images SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a...

Login configurations

Provide the username/password for the common services: HTTP, FTP, NNTP, POP2, POP3, IMAP and SMB NetBios. SPDX-FileCopyrightText: 2005 Georges Dagousset Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Script injection from Firefox sidebar panel using data: — Mozilla

Sites can use the search target to open links in the Firefox sidebar. A missing security check allows the sidebar to inject data: urls containing scripts into any page open in the browser. This could be used to steal cookies, passwords or other sensitive data...

HP-UX PHNE_17190 : s700_800 11.00 sendmail(1m) 8.8.6 patch

s700800 11.00 sendmail1m 8.8.6 patch : sendmail release 8.8.6 causes Denial of Service failures. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE17190. The text itself is copyright C Hewlett-Packard...

HP-UX PHCO_22665 : HPSBUX0012-135 Sec. Vulnerability in kermit(1) (rev.2)

s700800 11.00 kermit1 patch : Kermit communications software contains a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO22665. The text itself is copyright C Hewlett-Packard Development...

HP-UX PHNE_16091 : s700_800 11.00 r-commands cumulative patch

s700800 11.00 r-commands cumulative patch : Various remote network commands have security defects. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE16091. The text itself is copyright C Hewlett-Packard...