CVE-2011-4732

The Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving account/power-mode-logout...

CVE-2011-4727

The Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial of service parsing error or possibly have unspecified other impact via a crafte...

CVE-2011-4730

The vulnerability CVE-2011-4730 affects Parallels Plesk Panel 10.2.0_build1011110331.18, specifically its Server Administration Panel. The underlying issue is that the password form field is generated without disabling the browser autocomplete feature, which can allow an attacker to bypass authen...

CVE-2011-4732

The CVE-2011-4732 entry concerns Parallels Plesk Panel 10.2.0_build1011110331.18. The issue is that the Server Administration Panel omits the Content-Type header's charset parameter for certain resources, which may enable remote attackers to cause an unspecified impact via an interpretation confl...

CVE-2011-4731

The CVE-2011-4731 issue affects Parallels Plesk Panel 10.2.0_build1011110331.18, specifically the Server Administration Panel. A web page inadvertently includes an RFC 1918 internal IP address, enabling remote attackers to read the page and potentially obtain sensitive information (e.g., via admi...

CVE-2011-4728

The Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, as demonstrated by cookies us...

CVE-2011-4730

The Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in...

CVE-2011-4733

The Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving...

[SECURITY] Fedora 14 Update: phpMyAdmin-3.4.7.1-1.fc14

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

[SECURITY] Fedora 15 Update: phpMyAdmin-3.4.7-1.fc15

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index =3D es, users, permissions, while you still have the ability to...

[SECURITY] Fedora 15 Update: phpMyAdmin-3.4.5-1.fc15

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

Code injection

The Server Administration Console in NetSaro Enterprise Messenger Server 2.0 allows remote attackers to read application source code by appending a %00 character to a URL...

CVE-2011-3694

The CVE-2011-3694 entry concerns NetSaro Enterprise Messenger Server 2.0. The vulnerability is in the Server Administration Console, where appending a null byte (%00) to a URL can cause the server to disclose application source code. This is described consistently across the CVE listing and Red H...

Sybase M-Business Anywhere (AvantGo) SOAP Server Detection

The remote service is a Sybase M-Business Anywhere formerly AvantGo SOAP Server, which provides a web-based programming interface to server administration tasks in M-Business, such as configuration, group, user, and web channel management. C Tenable Network Security, Inc. include"compat.inc"; if...

TeamSpeak Server Administration Detection

TeamSpeak is a proprietary Voice over IP conferencing software. It is mainly used by gamers. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid35724; scriptversion "1.9"; scriptnameenglish: "TeamSpeak Server Administration Detection"; scriptsetattributeattribute:...

Fedora Update for fedora-ds-base FEDORA-2008-7813

Check for the Version of fedora-ds-base OpenVAS Vulnerability Test Fedora Update for fedora-ds-base FEDORA-2008-7813 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Novell QuickFinder Server - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/33708/info Novell QuickFinder Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

WebLogic simple catch the chicken law-vulnerability and early warning-the black bar safety net

This article has been published in the hacker X-Files for 2 0 0 8 year 1 1 issue of the magazine on After the author published on the blog, such as reproduced please retain this information! Tomcat is estimated to many people to bring a N meaty chicken server, directly scan weak passwords, into t...

[SECURITY] Fedora 8 Update: fedora-ds-base-1.1.2-1.fc8

Fedora Directory Server is an LDAPv3 compliant server. The base package in cludes the LDAP server and command line utilities for server administration...

[SECURITY] Fedora 9 Update: fedora-ds-base-1.1.2-1.fc9

Fedora Directory Server is an LDAPv3 compliant server. The base package in cludes the LDAP server and command line utilities for server administration...