2052 matches found
DSA-2177-1 pywebdav - SQL injection
Bulletin has no description...
Mandriva Update for awstats MDVSA-2011:033 (awstats)
Check for the Version of awstats OpenVAS Vulnerability Test Mandriva Update for awstats MDVSA-2011:033 awstats Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Mandriva Update for awstats MDVSA-2011:033 (awstats)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Windows Vista / 7 lpksetup. exe the DLL-hijacking-vulnerability warning-the black bar safety net
/ Exploit: Windows Vista/7 lpksetup.exe oci.dll DLL Hijacking Vulnerability Extension: the . mlc Author: Tyler Borland [email protected] Date: 10/20/2010 Tested on: Windows 7 Ultimate Windows Vista Ultimate/Enterpries and Windows 7 Enterprise should be vulnerable as well Effect: Remote Code...
ASPR #2010-12-14-1: Remote Binary Planting in Windows Address Book
=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2010-12-14-1 ------------------------------------------------------------------------- ASPR 2010-12-14-1: Remote Binary Planting in Windows Address Book...
DEBIAN-CVE-2010-4367
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a 1 WebDAV server or 2 NFS server...
CVE-2010-4367
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a 1 WebDAV server or 2 NFS server...
Design/Logic Flaw
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a 1 WebDAV server or 2 NFS server...
CVE-2010-4367
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a 1 WebDAV server or 2 NFS server...
CVE-2010-4367
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a 1 WebDAV server or 2 NFS server...
CVE-2010-4367
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a 1 WebDAV server or 2 NFS server...
PT-2010-5444
Name of the Vulnerable Software and Affected Versions AWStats versions prior to 7.0 Description The issue allows remote attackers to execute arbitrary commands via a crafted configuration file. This can be achieved by providing a configdir parameter in the URL, which points to a malicious...
CVE-2010-4367: Improper Control of Generation of Code
awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a 1 WebDAV server or 2 NFS server...
AOL Instant Messenger Insecure Library Loading Vulnerability
A vulnerability has been discovered in AOL Instant Messenger, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list called is as follows: • dwmapi.dll This can be exploit...
ASPR #2010-11-10-1: Remote Binary Planting in Microsoft PowerPoint 2010
=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2010-11-10-1 ------------------------------------------------------------------------- ASPR 2010-11-10-1: Remote Binary Planting in Microsoft PowerPoint 2010...
Insecure Loading of Dynamic Link Libraries in Windows Applications
US-CERT is aware of a class of vulnerabilities related to how some Windows applications may load external dynamic link libraries DLLs. When an application loads a DLL without specifying a fully qualified path name, Windows will attempt to locate the DLL by searching a defined set of directories. ...
ASPR #2010-11-05-01: Remote Binary Planting in Adobe Flash Player
=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2010-11-05-01 ------------------------------------------------------------------------- ASPR 2010-11-05-01: Remote Binary Planting in Adobe Flash Player...
WinMerge Insecure Library Loading Vulnerability
A vulnerability has been discovered in WinMerge,which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list called is as follows: • mfc71enu.dll • mfc71loc.dll This can be...
Sahar Money Manager Insecure Library Loading Vulnerability
A vulnerability has been discovered in Sahar Money Manager, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list called is as follows: unicows.dll This can be exploited ...
CVE-2010-3512
Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 7.0u8 allows remote authenticated users to affect confidentiality, related to DAV WebDAV...