Drupal 6.x < 6.36 OpenID Security Bypass

The remote web server is running a version of Drupal that is 6.x prior to 6.36. It is, therefore, potentially affected by a security bypass vulnerability due to a flaw in the OpenID module. A remote attacker can exploit this flaw to log in as other users, including administrators. Note that victi...

Microsoft Internet Explorer Multiple Vulnerabilities (3049563)

This host is missing a critical security update according to Microsoft Bulletin MS15-043. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Horizon View Multiple Vulnerabilities (VMSA-2015-0003) (VMSA-2015-0008) (POODLE)

The VMware Horizon View installed on the remote Windows host is version 5.x prior to 5.3.4 or version 6.x prior to 6.1. It is, therefore, affected by the following vulnerabilities : - A man-in-the-middle MitM information disclosure vulnerability, known as POODLE, exists due to the way SSL 3.0...

Ericsson Drutt MSDP (Instance Monitor) - Directory Traversal

+------------------------------------------------------------------------------------------------------+ + Ericsson Drutt MSDP Instance Monitor - Directory Traversal Vulnerability and Arbitrary File Access +...

Debian Security Advisory DSA 3189-1 (libav - security update)

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. A full list of the changes is available at http://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v0.8.17 OpenVAS Vulnerability Test $Id: deb3189.nasl 6609 2017-07-07 12:05:59...

Apache Tomcat Version 6.x Detection

Binary data 8927.prm...

VMware Player 6.x < 6.0.5 Multiple Vulnerabilities (VMSA-2015-0001) (Windows)

The version of VMware Player installed on the remote host is version 6.x prior to 6.0.5. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists that allows a local attacker to escalate privileges or cause a denial of service via an arbitrary write to a file...

Security fix for the ALT Linux 5 package glibc version 6:2.11.2-alt1.M51.2

6:2.11.2-alt1.M51.2 built Jan. 28, 2015 Gleb Fotengauer-Malinovskiy in task 139340 Jan. 28, 2015 Gleb Fotengauer-Malinovskiy - Backported upstream fix for Sourceware15014 CVE-2015-0235...

CMS Papoo 6.0.0 Rev. 4701 - Persistent Cross-Site Scripting

Advisory: Persistent XSS Vulnerability in CMS Papoo Light v6 Advisory ID: SROEADV-2014-01 Author: Steffen Rösemann Affected Software: CMS Papoo Version 6.0.0 Rev. 4701 Vendor URL: http://www.papoo.de/ Vendor Status: fixed CVE-ID: - ========================== Vulnerability Description:...

Microsoft Internet Explorer Multiple Vulnerabilities (3008923)

This host is missing a critical security update according to Microsoft Bulletin MS14-080. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Internet Explorer Multiple Vulnerabilities (3003057)

This host is missing a critical security update according to Microsoft Bulletin MS14-065. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Debian DSA-3003-1 : libav - security update

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. A full list of the changes is available at http://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v0.8 .15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

HP Smart Update Manager 6.x < 6.4.1 Multiple Vulnerabilities

The version of HP Smart Update manager running on the remote host is prior to 6.4.1. It is, therefore, affected by the following vulnerabilities : - An error exists in the function 'ssl3readbytes' that can allow data to be injected into other sessions or allow denial of service attacks. Note that...

Oracle Java APPLET Tag Children Property Memory Corruption

No description provided by source. Source: http://skypher.com/index.php/2010/10/13/issue-18-oracle-java-applet-childre/ SCRIPT o=document.createElementapplet; setTimeoutfunction x=o.children; location.reload; , 1; /SCRIPT Tested with: Windows XP sp3 5.1.2600 MSIE 7.0.5730.13 MSIE 8.0.6001.18702 S...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2011:0957-2)

Mozilla Firefox was updated to version 6. It brings new features, fixes bugs and security issues. Following security issues were fixed: http://www.mozilla.org/security/announce/2011/mfsa2011-29.html Mozilla Foundation Security Advisory 2011-29 MFSA 2011-29 dbg114-MozillaFirefox-5020...

SuSE 11.3 Security Update : IBM Java 6 (SAT Patch Number 9256)

BM Java 6 was updated to version 6 SR16 to fix several security issues and various other bugs. More information can be found at: http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Input validation

Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors...

Oracle Java SE 5.x, 6.x, 7.x, 8.x Multiple Vulnerabilities (cpuapr2014) - Windows

Oracle Java SE is prone to multiple vulnerabilities. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Imageview - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/65059/info Imageview is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker may leverage this issue to upload arbitrary files to the...

Security fix for the ALT Linux 7 package glibc version 6:2.17-alt6

Jan. 11, 2014 Dmitry V. Levin 6:2.17-alt6 - Backported upstream fixes for sw bugs: 14547, 14699, 15003, 15014, 15073, 15122, 15160, 15234, 15330, 15465, 15736, 15754, 15759, 15855, 15856, 15857, 15917, 16038, 16072 including fixes for CVE-2012-4412, CVE-2012-4424, CVE-2013-4237, CVE-2013-4332,...