CVE-2010-4680

The WebVPN implementation on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 permits the viewing of CIFS shares even when CIFS file browsing has been disabled, which allows remote authenticated users to bypass intended access restrictions via CIFS requests, ak...

D-link Click 'n Connect Daemon Detection

The remote service is the D-link Click 'n Connect Daemon DCCD, a remote networking service provided on some D-link networking devices that allows a remote client to view and configure the D-link device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid47605;...

Confluence adminsistrators can still view a restricted page if the type in the URL or click on a link in an email

If I set page viewing restrictions on a wki page to one group of which I am a member, other users, including confluence adminsistrators, cannot see the page when navigating within the application. If they type in the URL of the restricted page or click on a link to the restricted page, then can...

WebCalenderC3 vulnerable to directory traversal

Overview WebCalenderC3 from C3 Corp. contains a directory traversal vulnerability. WebCalenderC3 from C3 Corp. is a calender software. WebCalenderC3 contains a directory traversal vulnerability. Masako Oono reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

Movable Type access restriction bypass vulnerability

Overview Movable Type contains an access restriction bypass vulnerability. Movable Type, a web log system from Six Apart KK, contains a vulnerability that allows a remote attacker to bypass access restrictions. This vulnerability is different from JVN08369659. Impact A remote attacker may view or...

Microsoft IIS 4.0 showcode.asp例子脚本可查看任意文件内容漏洞

No description provided by source...

World Cup Email Scams on the Rise

Cybercrooks have begun punting World Cup ticket and HD TV viewing scams as a successor to earlier lottery-based cons. Read the full article. The Register...

openSUSE Security Update : seamonkey (seamonkey-1364)

seamonkey was updated to version 1.1.18, fixing various security issues : MFSA 2009-43 / CVE-2009-2404 Moxie Marlinspike reported a heap overflow vulnerability in the code that handles regular expressions in certificate names. This vulnerability could be used to compromise the browser and run...

Ipswitch WS_FTP Server < 6.1.1 Multiple Vulnerabilities

The remote host is running a version of WSFTP earlier than 6.1.1. Such versions are reportedly affected by multiple vulnerabilities : - Improper handling of UDP packets within the FTP log server may allow an attacker to crash the affected service. CVE-2008-0608 - There is a buffer overflow...

Sun One WebServer 6.1 JSP Source Viewing Vulnerability

No description provided by source. Sun One WebServer 6.1 JSP Source Viewing vulnerability System: Sun-ONE-Web-Server/6.1, Windows Server 2003 SunOne WebServer formerly Netscape Enterprise Server, iPlanet on Windows Systems lets remote people disclose JSP Source code. A normal URL would look like:...

Sun One WebServer 6.1 - .JSP Source Viewing

Sun One WebServer 6.1 JSP Source Viewing vulnerability System: Sun-ONE-Web-Server/6.1, Windows Server 2003 SunOne WebServer formerly Netscape Enterprise Server, iPlanet on Windows Systems lets remote people disclose JSP Source code. A normal URL would look like: http://server/hello.jsp To disclos...

Sun One WebServer 6.1 - .JSP Source Viewing

Sun One WebServer 6.1 - .JSP Source Viewing Sun One WebServer 6.1 JSP Source Viewing vulnerability System: Sun-ONE-Web-Server/6.1, Windows Server 2003 SunOne WebServer formerly Netscape Enterprise Server, iPlanet on Windows Systems lets remote people disclose JSP Source code. A normal URL would...

Sun One WebServer 6.1 JSP Source Viewing Vulnerability

Exploit for windows platform in category remote exploits ====================================================== Sun One WebServer 6.1 JSP Source Viewing Vulnerability ====================================================== Sun One WebServer 6.1 JSP Source Viewing vulnerability System:...

Sun One WebServer 6.1 JSP Source Viewing vulnerability

Sun One WebServer 6.1 JSP Source Viewing vulnerability System: Sun-ONE-Web-Server/6.1, Windows Server 2003 SunOne WebServer formerly Netscape Enterprise Server, iPlanet on Windows Systems lets remote people disclose JSP Source code. A normal URL would look like: http://server/hello.jsp To disclos...

Design/Logic Flaw

Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated administrators to gain root privileges via unknown vectors related to "configuring data viewing or restoring credentials."...

CVE-2008-6710

Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated administrators to gain root privileges via unknown vectors related to "configuring data viewing or restoring credentials."...

Design/Logic Flaw

Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote authenticated users to execute arbitrary commands via unknown vectors related to configuration of "local data viewing or...

CVE-2008-6710

Unspecified vulnerability in the Web administration interface in Avaya Communication Manager 3.1.x before CM 3.1.4 SP2 and 4.0.x before 4.0.3 SP1 allows remote authenticated administrators to gain root privileges via unknown vectors related to "configuring data viewing or restoring credentials."...

CVE-2008-6708

Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x and 4.x, allows remote authenticated administrators to gain root privileges via unknown vectors related to configuration of "data viewing or...

CVE-2008-6709: Undefined Security Weakness

Unspecified vulnerability in the Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allows remote authenticated users to execute arbitrary commands via unknown vectors related to configuration of "local data viewing or...