CVE-2013-1815

CVE-2013-1815 affects PackStack 2012.2.3 in Red Hat OpenStack Essex/Folsom, where the answer file could be created in insecure directories (e.g., /tmp or cwd), enabling local modification of deployed systems. The RHSA-2013:0671 advisory documents the fix: after the update, PackStack creates the a...

Debian Security Advisory DSA 2263-1 (movabletype-opensource)

The remote host is missing an update to movabletype-opensource announced via advisory DSA 2263-1. OpenVAS Vulnerability Test $Id: deb22631.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2263-1 movabletype-opensource Authors: Thomas Reinke Copyright:...

openSUSE Security Update : libvirt (openSUSE-SU-2011:0311-1)

several API calls did not honor the read-only flag connections. Attackers could exploit that to modify the state of the system or potentially execute code CVE-2011-1146. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Design/Logic Flaw

Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server...

Microsoft Security Bulletin MS08-019 – Important Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (949032)

Microsoft Security Bulletin MS08-019 – Important Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution 949032 Published: April 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves privately reported vulnerabilities in Microsoft Office Visio that...

Design/Logic Flaw

The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."...

IBM Lotus Domino 67 - HTTP webadmin.nsf Directory Traversal

IBM Lotus Domino 67 - HTTP webadmin.nsf Directory Traversal source: https://www.securityfocus.com/bid/9900/info It has been reported that Lotus Domino may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. The...

Seyeon FlexWATCH Network Video Server 2.2 - Unauthorized Administrative Access

source: https://www.securityfocus.com/bid/8942/info It has been reported that FlexWATCH Network Video Server may be prone to an access validation error that may allow a remote attacker to gain administrative access to the system. The problem is reported to present itself when an attacker attempts...

CVE-1999-0186

The CVE-1999-0186 entry concerns Solaris where an SNMP subagent uses a default community string, enabling remote attackers to execute arbitrary commands as root or modify system parameters. The NVD record shows a base score of 10.0 (HIGH) with Network attack vector, low complexity, and complete i...