552 matches found
PT-2012-5455 · Intel +2 · Ibacm +2
Name of the Vulnerable Software and Affected Versions: ibacm versions prior to 1.0.6 Description: The issue arises from improper management of reference counts for multicast connections, allowing remote attackers to cause a denial of service by crashing the ibacm service through a crafted join...
WordPress Plugin simplemail 1.0.6 - Persistent Cross-Site Scripting
!/usr/bin/python ''' Author: loneferret of Offensive Security Product: SimpleMail Version: 1.0.6 free version Vendor Site: http://codecanyon.net/item/wp-simplemail/1130008?ref=tinsley Software Download: http://wordpress.org/extend/plugins/wp-simplemail/ Timeline: 29 May 2012: Vulnerability report...
RedHat Update for icedtea-web RHSA-2011:1441-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2011-4105
LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on /.Xauthority...
icedtea-web security update
1.0.6-1 - Updated to 1.0.6 - Resolves: rhbz744738 - Resolves: rhbz745414...
WordPress Plugin Media Library Categories 1.0.6 - SQL Injection
WordPress Plugin Media Library Categories 1.0.6 - SQL Injection Exploit Title: Media Library Categories = 1.0.6 SQL Injection Vulnerability Date: 2011-08-06 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link:...
Wireshark Infiniband Dissector Denial of Service Vulnerability (Windows)
This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodwiresharkinfinibanddosvulnwin.nasl 5148 2017-01-31 13:16:55Z teissa $ Wireshark Infiniband Dissector Denial of Service Vulnerability Windows Authors: Nikita MR Copyright: Copyrigh...
PT-2009-3042 · Max · Max.Blog
Name of the Vulnerable Software and Affected Versions: Max.Blog version 1.0.6 Description: The issue concerns improper access restriction in the delete.php file, allowing remote attackers to delete arbitrary blog posts by making a direct request. Recommendations: For Max.Blog version 1.0.6,...
Max.Blog <= 1.0.6 (offline_auth.php) Offline Authentication Bypass
No description provided by source. Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: Offline Authentication Bypass Exploitation: Remote Dork: intext:"Powered by Max.Blog" Date: 27 Jan 2009 Discovered by: Salvatore "drosophila" Fresta...
Max.Blog 1.0.6 - 'offline_auth.php' Offline Authentication Bypass
Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog Salvatore "drosophila" Fresta - Max.Blog...
PT-2008-5267 · Opendb · Opendb
Name of the Vulnerable Software and Affected Versions: OpenDb version 1.0.6 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the user id parameter in an edit action to "user admin.php", the title parameter to "listings.php", and the...
OpenDB 1.0.6 - 'user_admin.php?user_id' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30989/info Open Media Collectors Database OpenDb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser ...
OpenDB 1.0.6 - 'user_profile.php?redirect_url' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30989/info Open Media Collectors Database OpenDb is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser ...
Mozilla Firefox <= 1.0.6 (Host:) Buffer Overflow DoS String
No description provided by source. !-- Mozilla Firefox = 1.0.6 Host: Buffer Overflow DoS String Formatted for your tesing /str0ke Tom Ferris www.security-protocols.com Versions Affected: Firefox Win32 1.0.6 and prior Firefox Linux 1.0.6 and prior Firefox 1.5 Beta 1 Deer Park Alpha 2...
CVE-2008-1382
libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a PNG file with zero length "unknown" chunks, which trigger an access of uninitialized memory...
Debian Security Advisory DSA 061-1 (gnupg)
The remote host is missing an update to gnupg announced via advisory DSA 061-1. OpenVAS Vulnerability Test $Id: deb0611.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 061-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 915-1 (helix-player)
The remote host is missing an update to helix-player announced via advisory DSA 915-1. An integer overflow has been discovered in helix-player, the helix audio and video player. This flaw could allow a remote attacker to run arbitrary code on a victims computer by supplying a specially crafted...
UseBB Version 1.0.4 Path Disclosure Vulnerability
netVigilance Security Advisory 16 UseBB Version 1.0.4 Path Disclosure Vulnerability Description: UseBB is an Open Source forum package developed in PHP and using the popular MySQL database back-end to store data. Unlike other popular forum systems, UseBB does not strive to have as many features a...
CVE-2007-0616
CVE-2007-0616 affects zenphoto versions 1.0.4 up to 1.0.6, via zen/template-functions.php. The vulnerability is a directory traversal in index.php where the album parameter can contain ".." sequences, enabling remote attackers to list arbitrary directories. Root cause: inadequate validation of th...