Sun Java System Application Server Local Vulnerability

Sun Java System Application Server is prone to a local vulnerability. The SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Reader < 9.3 / 8.2 Multiple Vulnerabilities (APSB10-02)

The version of Adobe Reader installed on the remote host is earlier than 9.3 / 8.2. Such versions are reportedly affected by multiple vulnerabilities : - A use-after-free vulnerability in 'Multimedia.api' can lead to code execution. CVE-2009-4324 - An array boundary issue in 'U3D' support can lea...

GeoVision Digital Video Surveillance System (geohttpserver) DT Vuln

Exploit for unknown platform in category remote exploits =================================================================== GeoVision Digital Video Surveillance System geohttpserver DT Vuln =================================================================== Hi. There is a Directory traversal...

GeoVision Digital Video Surveillance System 8.2 - Arbitrary File Disclosure

GeoVision Digital Video Surveillance System 8.2 - Arbitrary File Disclosure Hi. There is a Directory traversal vulnerability in Geovision Digital Video Surveillance System geohttpserverversion 8.2. POC: http://remotehost/../../../../../../windows/system32/whatever.something PATCH: Vendor has...

GeoVision Digital Video Surveillance System 8.2 - Arbitrary File Disclosure

Hi. There is a Directory traversal vulnerability in Geovision Digital Video Surveillance System geohttpserverversion 8.2. POC: http://remotehost/../../../../../../windows/system32/whatever.something PATCH: Vendor has published the new version 8.3 Regards, Dejan Levaja NSS d.o.o...

GeoVision Directory Traversal

Hi. There is a Directory traversal vulnerability in Geovision Digital Video Surveillance System geohttpserverversion 8.2. POC: http://remotehost/../../../../../../windows/system32/whatever.something PATCH: Vendor has published the new version 8.3 Regards, Dejan Levaja NSS d.o.o...

dvbbs 8.2 - login.asp Multiple SQL Injections

dvbbs 8.2 - login.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/29429/info The 'dvbbs' program is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could all...

CVE-2007-0555

PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote authenticated users to cause a denial of service server crash and possibly access...

eNdonesia 8.2/8.3 - 'Mod' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8506/info It has been reported that eNdonesia is prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a victim's browser. The issue reportedly exists in the mod.php script via the 'mod' URI...

CVE-2000-0887

named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer ZXFR request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."...