Wireshark LDSS Dissector Buffer Overflow Vulnerability (Mac OS X)

This host is installed with Wireshark and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkldssdissectorbofvulnmacosx.nasl 6018 2017-04-24 09:02:24Z teissa $ Wireshark LDSS Dissector Buffer Overflow Vulnerability Mac OS X Authors: Rachana Shetty Copyright:...

UBUNTU-CVE-2011-2179

Multiple cross-site scripting XSS vulnerabilities in config.c in config.cgi in 1 Nagios 3.2.3 and 2 Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an a command action or a b hosts action...

SelectaPix 1.4.1 - 'uploadername' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47701/info SelectaPix is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

Fedora 12 : bournal-1.4.1-1.fc12 (2010-3221)

Sat Feb 27 2010 Fabian Affolter - 1.4.1-1 - Updated URL and source URL - Updated to new upstream version 1.4.1 to fix 568440 CVE-2010-0118, CVE-2010-0119 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

PR10-03: Authenticated Cross-Site Scripting (XSS) within the Apache Axis2 administration console

PR10-03: Authenticated XSS within the Apache Axis2 administration console Vulnerability found: 30th January 2010 Vendor informed: 1st February 2010 Vulnerability fixed: Severity: Medium Description: Axis2 is a web services/SOAP/WDSL engine, widely used within many commercial products Procheckup h...

Mango Blog 1.4.1 - '/archives.cfm/search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/39864/info Mango Blog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Dojo Toolkit 1.4.1 - '/doh/runner.html' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/38739/info Dojo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Bournal < 1.4.1 Privilege Escalation Vulnerability

Bournal is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Secunia Research: Bournal ccrypt Information Disclosure Security Issue

====================================================================== Secunia Research 22/02/2010 - Bournal ccrypt Information Disclosure Security Issue - ====================================================================== Table of Contents Affected...

Audiotran 1.4.1 - Direct RET Buffer Overflow

Exploit Title: Audiotran v1.4.1 direct RET BOF Date: 2010-1-16 Author: Jacky Software Link: http://www.e-soft.co.uk/Audiotran.htm Version: 1.4.1 Tested on: Windows XP SP2 CVE : if exists Code : Audiotran v1.4.1 Direct RET local BOF Vulnerability. Exploit Discovered by Sébastien Duquette Greetz to...

Audiotran 1.4.1 Buffer Overflow

!/usr/bin/ruby Exploit Title : Audiotran 1.4.1 Win XP SP2/SP3 English Buffer Overflow Date : January 9th, 2010 Author : Sébastien Duquette Software Link : http://www.e-soft.co.uk/Audiotran.htm Version : 1.4.1 OS : Windows Tested on : XP SP2/SP3 En VMware Type of vuln : Stack Overflow / SEH Greetz...

CVE-2009-1185

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space...

udev: Uncheck origin of NETLINK messages

udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space...

PT-2008-6746 · Php · Php

Name of the Vulnerable Software and Affected Versions: Sandbox version 1.4.1 Description: A remote file inclusion issue in lib/jpgraph/jpgraph errhandler.inc.php might allow remote attackers to execute arbitrary PHP code. The issue may be located in Aditus JpGraph rather than Sandbox...

CMS Made Simple 1.4.1 - Local File Inclusion

CMS Made Simple 1.4.1 - Local File Inclusion Type: Directory Traversal vulnerability Unix tested / Root privileges escalation Vendor: CMS Made Simple Software: CMS Made Simple 1.4.1 "Spring Garden" and probably others ... Author: M4ck-h@cK Date 29.11.2008 Home: sweet home contact: no, thx :...

gnutls security update

1.4.1-3.1 - fix chain verification issue CVE-2008-4989 470079...

ContentNow 1.4.1 (Upload/XSS) Multiple Remote Vulnerabilities

No description provided by source. =============================================================== ContentNow CMS Upload/XSS Multiple Remote Vulnerabilities =============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

Xorg / XFree86 file existence disclosure vulnerability

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists...

Debian Security Advisory DSA 1107-1 (gnupg)

The remote host is missing an update to gnupg announced via advisory DSA 1107-1. Evgeny Legerov discovered that gnupg, the GNU privacy guard, a free PGP replacement contains an integer overflow that can cause a segmentation fault and possibly overwrite memory via a large user ID strings. For the...

CVE-2007-5172

Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message...