PT-2011-2574 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.35-rc5 Description: The issue is related to the br mdb ip get function in the Linux kernel, which allows remote attackers to cause a denial of service NULL pointer dereference and system crash via an IGMP...

PT-2011-2010 · Sudo · Sudo

Name of the Vulnerable Software and Affected Versions: sudo versions prior to 1.7.4p5-1.fc14 Description: The issue arises from improper interpretation of a system group in the sudoers file, allowing local users to gain root privileges via a sudo command. This is a result of a regression related ...

Contents-Mall vulnerability in password handling

Overview Contents-Mall contains a vulnerability in the way it handles passwords. Contents-Mall is a shopping cart software for digital contents. Contents-Mall contains a vulnerability in the way it handles passwords. Impact The administrative password may be disclosed. As a result, information...

MantisBT < 1.2.4 Multiple Vulnerabilities

MantisBT is prone to multiple vulnerabilities. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for ImageMagick FEDORA-2010-19056

Check for the Version of ImageMagick OpenVAS Vulnerability Test Fedora Update for ImageMagick FEDORA-2010-19056 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

RedHat Update for thunderbird RHSA-2010:0968-01

Check for the Version of thunderbird OpenVAS Vulnerability Test RedHat Update for thunderbird RHSA-2010:0968-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

KLA10187 CI vulnerability in HP Insight Diagnostics

XSS vulnerability was found in the HP Insight Diagnostics. By exploiting this vulnerability malicious users can inject web script. This vulnerability can be exploited from remote by unknown vectors. Original advisories - Related products HP-Insight-Diagnostics CVE list CVE-2010-4111 warning...

FreeBSD Ports: bzip2

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

JVN#69191943: AD-EDIT2 vulnerable to cross-site scripting

AD-EDIT2 is a Contents Management System CMS software. AD-EDIT2 contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by the developer...

KLA10413 ACE vulnerability in Avast! Free Antivirus

An untrusted path vulnerability was found in Avast! Free Antivirus. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a library hijack. Original advisories - Exploitation Public exploits exist for this vulnerability...

AIX 610003 : U835963

The remote host is missing AIX PTF U835963 which is related to the security of the package devices.pciex.2514310025140100.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

PT-2010-4095 · Cacti · Cacti

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 0.8.7g Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the filter parameter in utilities.php. Recommendations: For versions...

Fedora Update for freeciv FEDORA-2010-12256

Check for the Version of freeciv OpenVAS Vulnerability Test Fedora Update for freeciv FEDORA-2010-12256 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Splunk 4.0 - 4.1.2 XSS Vulnerability

Splunk is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:splunk:splunk";...

KLA10331 SB vulnerability in Snare

A CSRF vulnerability was found in Snare. By exploiting this vulnerability malicious users can hijack administrator auth. This vulnerability can be exploited remotely. Original advisories - Related products Snare-for-Windows Epilog-for-Windows CVE list CVE-2010-2594 high Solution Update to latest...

Pacific Timesheet Cross-Site Request Forgery Vulnerability

This host is running Pacific Timesheet and is prone to cross-site request forgery vulnerability. OpenVAS Vulnerability Test $Id: gbpacifictimesheetcsrfvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Pacific Timesheet Cross-Site Request Forgery Vulnerability Authors: Veerendra G.G Copyright: Copyrigh...

AIX 610003 : U831222

The remote host is missing AIX PTF U831222 which is related to the security of the package bos.net.tcp.server You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Mandriva Update for php MDVSA-2010:068 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2010:068 php Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

ATOK screen lock bypass vulnerability

Overview ATOK from JustSystems Corporation contains a screen lock bypass vulnerability. ATOK from JustSystems Corporation is a software for Japanese Kana-Kanji conversion. ATOK contains an issue with the restriction of launching external applications, which may lead to a screen lock bypass...

Visualization Library Multiple Unspecified Vulnerabilities (Linux)

The host is running Visualization Library and is prone to multiple vulnerabilities. Openvas Vulnerability Test $Id: gbvisualizationlibrarymultvulnlin.nasl 5388 2017-02-21 15:13:30Z teissa $ Visualization Library Multiple Unspecified Vulnerabilities Linux Authors: Rachana Shetty Copyright: Copyrig...