PT-2016-2810

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 7.3 Description The issue is related to a password hashing error in the ssh network protocol. When SHA256 or SHA512 are used for user password hashing, a timing difference in responses can be leveraged by remote...

Potential Command Injection

Overview Versions 2.4.3 and earlier of hubot-scripts are vulnerable to a command injection vulnerablity in the hubot-scripts/package/src/scripts/email.coffee module. Mitigating Factors The email script is not enabled by default, it has to be manually added to hubot's list of loaded scripts...

Gentoo Security Advisory GLSA 201309-02

Gentoo Linux Local Security Checks GLSA 201309-02 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

PT-2017-9942 · Cairo +3 · Cairo +3

Name of the Vulnerable Software and Affected Versions: cairo version 1.14.6 Description: The issue is related to an integer overflow in the write png function, which can be triggered by remote attackers using a large svg file. This can cause a denial of service due to an invalid pointer...

SOL15404 - OpenSSL vulnerability CVE-2009-3245

Recommended action You can eliminate this vulnerability by running a version listed in the Versions known to be not vulnerable column in the previous table. If the Versions known to be not vulnerable column does not list a version that is higher than the version you are running, then no upgrade...

Adobe AIR Multiple Vulnerabilities-01 (Jun 2014) - Windows

Adobe Air is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:adobeair"; ifdescription...

PT-2014-18: Weak encryption of account data in Wonderware Information Server

The specialists of the Positive Research center have detected a Weak encryption of account data vulnerability in Wonderware Information Server. Encryption of WIS is insufficient. This vulnerability could allow elevation of privileges if an attacker decrypts the credentials. The system would need ...

PT-2014-54: Heap-based buffer overflow in Honeywell EPKS

The specialists of the Positive Research center have detected a Heap-based buffer overflow vulnerability in Honeywell EPKS. Heap-based buffer overflow was discovered in ripsd.exe module in function secGetContext which could lead to possible remote code execution or denial of service. How to fix...

KLA10281 OSI vulnerability in OpenVPN

An unspecified vulnerability was found in OpenVPN. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a timing attack. Original advisories - Related products OpenVPN CVE list CVE-2013-2061 warning Solution Update to...

BigAnt Messenger Server DUPF Arbitrary File Upload

Added: 04/01/2013 CVE: CVE-2012-6274 BID: 57214 OSVDB: 89342 Background BigAnt Messenger Server offers secure instant messaging, file transfer, voip, video chat, web conferencing and more. Problem BigAnt Server 2.97 and earlier does not require authentication for file uploading, and does not...

Mandriva Update for rdesktop MDVSA-2011:102 (rdesktop)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

AIX 610006 : U838326

The remote host is missing AIX PTF U838326 which is related to the security of the package devices.pciex.251430001410a303.rte.6.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 610004 : U833931

The remote host is missing AIX PTF U833931 which is related to the security of the package bos.dlc.8023 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Fedora Update for kernel FEDORA-2008-1422

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

PT-2009-44: Multiple vulnerabilities in Kayako Support Suite

Kayako Support Suite is a HelpDesk system. Vulnerability Description Positive Technologies Research Team discovered Local File Inclusion LFI vulnerabilities in Kayako Support Suite. A vulnerable function unset allows attackers to overwrite an arbitrary global and not overridden variable, which ca...

AIX 610000 : U817155

The remote host is missing AIX PTF U817155 which is related to the security of the package devices.isasio.chrp.8042.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Solaris 7 (sparc) : 104829-02

The remote host is missing Sun Security Patch number 104829-02 FLEXlm 4.1c: Patch for FLEXlm 4.1c and lit/littty. Date this patch was last updated by Sun : Thu Dec 23 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script ha...

[SA18975] POPFile Email Message Handling Denial of Service

TITLE: POPFile Email Message Handling Denial of Service SECUNIA ADVISORY ID: SA18975 VERIFY ADVISORY: http://secunia.com/advisories/18975/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: POPFile 0.x http://secunia.com/product/8275/ DESCRIPTION: A vulnerability has been reported i...

KLA10215 DoS vulnerability in IDA pro

An unspecified vulnerability was found in IDA Pro. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed dll name. Original advisories - Related products IDA-Pro CVE li...

Network Service Malformed Data Remote DoS

It appears to be possible to crash the remote service by sending it a few kilobytes of random data. An attacker may use this flaw to make this service crash continuously, preventing this service from working properly. It may also be possible to exploit this flaw to execute arbitrary code on this...