Microsoft Internet Explorer 'CSVGMaskElement' Double Free Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Microsoft Internet Explorer 10 is affected...

Microsoft Publisher CVE-2013-1323 Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of t...

Microsoft SharePoint CVE-2013-0080 Privilege Escalation Vulnerability

Description Microsoft SharePoint is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to escalate privileges and perform unauthorized actions. Technologies Affected Microsoft SharePoint Foundation 2010 SP1 Microsoft SharePoint Server 2010 SP1 Recommendations...

Several vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third-party TYPO3 extensions: fed, myquizpoll, push2rss3ds, slideshare, wecdiscussion Release Date: February 19, 2013 Please read first: This Collective Security Bulletin CSB is a listing of vulnerable extensions with neither significant...

Microsoft Internet Explorer CObjectElem Use-After-Free Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Siemens SIMATIC S7-1200 SSL Private Key Reuse Spoofing Vulnerability (SSA-240718)

Siemens SIMATIC S7-1200 devices are prone to a security vulnerability that may allow attackers to spoof SSL certificates. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

HP SiteScope Multiple Security Bypass Vulnerabilities

HP SiteScope is prone to multiple security bypass vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:hp:sitescope";...

Multiple F5 Networks Products - SSH vulnerability CVE-2012-1493

Multiple F5 Networks products are prone to an SSH vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Polycom Products Directory Traversal and Command Injection Vulnerabilities

Multiple Polycom products are prone to a directory-traversal vulnerability and a command-injection vulnerability because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with directory- traversal sequences '../' to retrieve arbitrary file...

OpenSAML XML Signature Wrapping Security Vulnerability

OpenSAML is prone to a security vulnerability involving XML signature wrapping. Successful exploits may allow unauthenticated attackers to construct specially crafted messages that can be successfully verified and contain arbitrary content. This may aid in further attacks. OpenVAS Vulnerability...

Papoo CMS Light Multiple Cross Site Scripting Vulnerabilities

Papoo CMS Light is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user- supplied input. An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of the affected site. This ma...

Dienstplan Predictable Random Password Generation Vulnerability

Dienstplan is prone to an insecure random password generation vulnerability. Successfully exploiting this issue may allow an attacker to guess randomly generated passwords. Versions prior to Dienstplan 2.3 are vulnerable. OpenVAS Vulnerability Test $Id: gbdienstplan49412.nasl 5747 2017-03-28...

Andy's PHP Knowledgebase 's' Parameter SQL Injection Vulnerability

Andy's PHP Knowledgebase is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities i...

phpMyAdmin Bookmark Security Bypass Vulnerability

phpMyAdmin is prone to a security bypass vulnerability that affects bookmarks. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Weborf 'get_param_value()' Function HTTP Header Handling Denial Of Service Vulnerability

Weborf is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users. Versions prior to Weborf 0.12.5 are vulnerable. OpenVAS Vulnerability Test $Id: gbweborf46054.nasl 7015 2017-08-28 11:51:24Z teissa...

Serv-U Empty Password Authentication Bypass Vulnerability

Serv-U is prone to an authentication-bypass vulnerability. Attackers can exploit this issue to gain unauthorized access to the affected application. However, this requires that the application has password-based authentication disabled. Serv-U 10.2.0.2 and versions prior to 10.3.0.1 are vulnerabl...

Perl CGI.pm MIME Boundary 'multipart_init' Unspecified Security Vulnerability

Perl CGI.pm is prone to an unspecified security vulnerability because the MIME part of the Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

Weborf HTTP Request Denial Of Service Vulnerability

Weborf is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users. Versions prior to Weborf 0.12.4 are vulnerable. OpenVAS Vulnerability Test $Id: gbweborf44506.nasl 6696 2017-07-12 11:30:15Z cfisch...

TFTgallery 'thumbnailformpost.inc.php' Local File Include Vulnerability

TFTgallery is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow t...

UseBB Forum and Topic Feed Security Bypass Vulnerability

UseBB is prone to a security-bypass vulnerability. Remote attackers can exploit this issue to gain access to restricted forum and feed content. Versions prior to UseBB 1.0.11 are vulnerable. OpenVAS Vulnerability Test $Id: gbusebb43292.nasl 5388 2017-02-21 15:13:30Z teissa $ UseBB Forum and Topic...