Fedora Update for ndjbdns FEDORA-2014-5511

Check for the Version of ndjbdns OpenVAS Vulnerability Test Fedora Update for ndjbdns FEDORA-2014-5511 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

PT-2014-4892

Name of the Vulnerable Software and Affected Versions WinSCP versions prior to 5.5.3 Description The issue arises when using FTP with TLS, as it fails to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This...

CVE-2013-1822

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.x before 4.5.8 allow remote authenticated users with administrator privileges to inject arbitrary web script or HTML via the 1 quota parameter to /core/settings/ajax/setquota.php, or remote authenticated users with group admin...

CVE-2013-1822

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.x before 4.5.8 allow remote authenticated users with administrator privileges to inject arbitrary web script or HTML via the 1 quota parameter to /core/settings/ajax/setquota.php, or remote authenticated users with group admin...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.x before 4.5.8 allow remote authenticated users with administrator privileges to inject arbitrary web script or HTML via the 1 quota parameter to /core/settings/ajax/setquota.php, or remote authenticated users with group admin...

CVE-2013-1822

Multiple cross-site scripting XSS vulnerabilities in ownCloud 4.5.x before 4.5.8 allow remote authenticated users with administrator privileges to inject arbitrary web script or HTML via the 1 quota parameter to /core/settings/ajax/setquota.php, or remote authenticated users with group admin...

PT-2014-2502

Name of the Vulnerable Software and Affected Versions ownCloud versions 4.5.x through 4.5.7 Description The issue allows remote authenticated users with administrator privileges to inject arbitrary web script or HTML via the quota parameter to "/core/settings/ajax/setquota.php". Additionally,...

TomatoCart 1.1.8.6 Local File Inclusion Vulnerability

TomatoCart version 1.1.8.6 suffers from a local file inclusion vulnerability. + Author: TUNISIAN CYBER + Exploit Title: TomatoCart 1.1.8.6 Local File Inclusion Vulnerability + Date: 14-02-2014 + Category: WebApp + Tested on: KaliLinux + Vendor: http://www.tomatocart.com/ + Friendly Sites:...

CVE-2014-1672: Undefined Security Weakness

Check Point R75.47 Security Gateway and Management Server does not properly enforce Anti-Spoofing when the routing table is modified and the "Get - Interfaces with Topology" action is performed, which allows attackers to bypass intended access restrictions...

PT-2014-3814

Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY versions prior to 8.2 SIM 24 Proficy Process Systems with CIMPLICITY versions prior to 8.2 SIM 24 Description The issue allows remote attackers to execute arbitrary code via a crafted...

PT-2014-3813

Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY versions prior to 8.2 SIM 24 Proficy Process Systems with CIMPLICITY affected versions not specified Description The issue allows remote attackers to execute arbitrary code via a crafted...

PT-2014-2469

Name of the Vulnerable Software and Affected Versions Lenovo Thinkpad Bluetooth with Enhanced Data Rate Software version 6.4.0.2900 and earlier Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This can be achieve...

CVE-2013-1361: Undefined Security Weakness

Untrusted search path vulnerability in Lenovo Thinkpad Bluetooth with Enhanced Data Rate Software 6.4.0.2900 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as a fi...

Google Chrome Multiple Vulnerabilities - 01 - (Jan 2014) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

PHPJabbers Car Rental脚本多个漏洞

No description provided by source. Car Rental Script - Multiple Vulnerabilities ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/car-rental/ ===...

PT-2014-2012

Name of the Vulnerable Software and Affected Versions Check Point R75.47 Security Gateway and Management Server Description The issue is related to a lack of proper enforcement of Anti-Spoofing when the routing table is modified and the "Get - Interfaces with Topology" action is performed. This...

PHPJabbers Job Listing Script - Multiple Vulnerabilities

Job Listing Script suffers from cross site request forgery and cross site scripting vulnerabilities. Job Listing Script - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : email protected .:. Home :...

CVE-2014-0802

Directory traversal vulnerability in the aokitaka ZIP with Pass application 4.5.7 and earlier, and ZIP with Pass Pro application 6.3.8 and earlier, for Android allows attackers to overwrite or create arbitrary files via unspecified vectors...

CVE-2014-0802

Directory traversal vulnerability in the aokitaka ZIP with Pass application 4.5.7 and earlier, and ZIP with Pass Pro application 6.3.8 and earlier, for Android allows attackers to overwrite or create arbitrary files via unspecified vectors...

CVE-2014-0802

The CVE-2014-0802 entry maps to a directory traversal vulnerability in ZIP with Pass (aokitaka) applications for Android, affecting ZIP with Pass Ver. 4.5.7 and earlier and ZIP with Pass Pro Ver. 6.3.8 and earlier. The root cause involves improper handling of file names during processing, enablin...