509 matches found
mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality and availability
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0113...
httpd: mod_proxy_ajp worker moved to error state when timeout exceeded
The modproxyajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long request-processing time, which allows remote attackers to cause a denial of service worker consumption via an expensive request...
IBM WebSphere Application Server WS-Security XML Encryption Weakness Vulnerability
The host is running IBM WebSphere Application Server and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbibmwasxmlencryptioninfodisclosurevuln.nasl 7006 2017-08-25 11:51:20Z teissa $ IBM WebSphere Application Server WS-Security XML Encryption Weakness...
Zenoss Server Multiple Vulnerabilities
The host is running Zenoss Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbzenossservmultvuln.nasl 5388 2017-02-21 15:13:30Z teissa $ Zenoss Server Multiple Vulnerabilities Authors: Rachana Shetty Copyright: Copyright c 2010 SecPod, http://www.secpod.com This...
Symantec Altiris NS Key Unauthorized Access Vulnerability
This host is installed with Symantec Altiris Notification Server and is prone to unauthorized access vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecaltirisnsunauthaccessvuln.nasl 6000 2017-04-21 11:07:29Z cfi $ Symantec Altiris NS Key Unauthorized Access Vulnerability Authors: Rachana...
PT-2005-1609
Name of the Vulnerable Software and Affected Versions Exchange Server versions 2000 through 2003 Description A heap-based buffer overflow issue exists in the SvrAppendReceivedChunk function in xlsasink.dll, which is part of the SMTP service. This allows remote attackers to execute arbitrary code ...
Half-Life StatsMe 2.6.x Plugin - MakeStats Format String
// source: https://www.securityfocus.com/bid/6578/info // The Half-Life StatsMe plug-in is prone to an exploitable format string vulnerability. This issue may be exploited by an attacker who can authenticate with the rcon-password of the Half-Life server to execute arbitrary code in the context o...
CVE-2002-1064
Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid usernames, which allows remote attackers to identify valid users on the server...
