4395 matches found
Oracle Forms And Reports Database Disclosure
PARSEQUERY http://docs.oracle.com/cd/E1676401/bi.1111/b32121/pbrcla007.htmi640592 Description Use PARSEQUERY to parse an rwservlet query and display the constructed Reports Server command line. Syntax http://yourwebserver/reports/rwservlet/parsequery?server=servername&authid=username/password...
Adobe ColdFusion Unsupported Version Detection (credentialed check)
According to its version, the installation of Adobe ColdFusion running on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable Network...
Adobe ColdFusion Unsupported Version Detection
According to its version, the installation of Adobe ColdFusion running on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. %NASLMINLEVEL 70300...
Safari Unsupported
The remote Windows host has an install of Safari, a web browser. While there has been no formal announcement, Apple appears to have discontinued support for Safari on Windows and has not released any updates since version 5.1.7 in May 9, 2012. Lack of support implies that no new security patches...
Tenable Log Correlation Engine Server SEoL
According to its version, the installation of Tenable Log Correlation Engine LCE Server on the remote host is no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain...
Nessus Unsupported Version Detection (deprecated)
This plugin has been deprecated. For plugins which identify unsupported instances of this product, search the plugin feed for Nessus SEoL. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid71458; scriptversion"1.17";...
Tenable Passive Vulnerability Scanner Unsupported Version Detection (credentialed check)
According to its self-reported version number, the installation of Tenable Passive Vulnerability Scanner PVS on the remote host is no longer supported. The product name has subsequently been changed to Nessus Network Monitor NNM. Lack of support implies that no new security patches for the produc...
Tenable Passive Vulnerability Scanner Unsupported Version Detection (remote check)
According to its self-reported version number, the installation of Tenable Passive Vulnerability Scanner PVS on the remote host is no longer supported. The product name has subsequently been changed to Nessus Network Monitor NNM. Lack of support implies that no new security patches for the produc...
Tenable SecurityCenter Unsupported Version Detection
According to its version, the installation of Tenable SecurityCenter on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. %NASLMINLEVEL 70300 C...
CVE-2013-6427
upgrade.py in the hp-upgrade service in HP Linux Imaging and Printing HPLIP 3.x through 3.13.11 launches a program from an http URL, which allows man-in-the-middle attackers to execute arbitrary code by gaining control over the client-server data stream...
pacemaker security, bug fix, and enhancement update
1.1.10-14 - Log: crmd: Supply arguments in the correct order Resolves: rhbz996850 - Fix: Invalid formatting of log message causes crash Resolves: rhbz996850 1.1.10-13 - Fix: cman: Start clvmd and friends from the init script if enabled 1.1.10-12 - Fix: Consistently use 'Slave' as the role for...
Ruby: Ruby: Heap Overflow in Floating Point Parsing
Any time a string is converted to a floating point value, a specially crafted string can cause a heap overflow. This can lead to a denial of service attack via segmentation faults and possibly arbitrary code execution. Any program that converts input of unknown origin to floating point values...
SA-CONTRIB-2013-085 - Feed Element Mapper - Cross Site Scripting
Feed Element Mapper is an add-on module for FeedAPI that maps elements on a feed item such as tags or the author name to taxonomy or CCK fields. The module doesn't sufficiently filter text when displaying options to users. This vulnerability is mitigated by the fact that an attacker must have a...
Adobe Acrobat Unsupported Version Detection (Mac OS X)
According to its self-reported version, the installation of Adobe Acrobat on the remote Mac OS X host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenab...
Pulse Connect Secure Unsupported Version Detection
According to its self-reported version number, the installation of Pulse Connect Secure formerly known as Juniper IVE OS and Junos Pulse Secure IVE OS operating system on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released ...
Internet Systems Consortium Resolves Critical BIND Flaw
The Internet Systems Consortium ISC published a security advisory yesterday resolving a high priority, remotely exploitable denial-of-service vulnerability in BIND 9, the de facto software standard for implementing domain name system protocols online. There is a defect in BIND 9 that could...
Novell GroupWise Internet Agent Unsupported (deprecated)
This plugin has been deprecated in favor of a combined plugin for the detection of all unsupported GroupWise software. Please use the plugin groupwiseunsupported.nasl instead. %NASLMINLEVEL 999999 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2016/08/15. Deprecated by...
Novell iManager Unsupported Version
The remote host is running a version of Novell iManager prior to version 2.7. Such versions are no longer covered under general or extended support. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security...
CVE-2013-1570
Unspecified vulnerability in Oracle MySQL 5.6.10 and earlier allows remote attackers to affect availability via unknown vectors related to MemCached...
BlackBerry Enterprise Server Unsupported Version
The remote host has an unsupported version of BlackBerry Enterprise Server installed. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable Network Security, Inc...