CVE-2010-0146

CVE-2010-0146 refers to a directory traversal vulnerability in the Management Center for Cisco Security Agents, affected only for Cisco Security Agent Release 6.0 (Management Center). Exploitation requires an authenticated user and may allow reading arbitrary files on the Management Center server...

CVE-2010-0146

Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2010-0147

SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Ero Auktion 2.0 SQL Injection

Exploit Title: Ero Auktion V.2.0 SQL Injection news.php Date: 21.02.2010 Author: Easy Laster Tested on: windows xp ----------------------------Information---------------------------------------- +Autor : Easy Laster +Date : 21.10.2010 +Script : Ero Auktion V.2.0 SQL Injection news.php +Download :...

Ero Auktion 2010 SQL Injection

----------------------------Information---------------------------------------- +Autor : Easy Laster +Date : 21.10.2010 +Script : Ero Auktion 2010 SQL Injection news.php +Download : ----- +Demo :http://wp1072278.vwp3485.webpack.hosteurope.de/demoserver/flashauktion2010/ +Price : 39,90€ +Language...

Ero Auktion 2.0 - news.php SQL Injection

Ero Auktion 2.0 - news.php SQL Injection ----------------------------Information---------------------------------------- +Autor : Easy Laster +Date : 21.10.2010 +Script : Ero Auktion V.2.0 SQL Injection news.php +Download : ----- +Price : 34,90€ +Language :PHP +Discovered by Easy Laster +Security...

F-Secure Products Web Console Buffer Overflow (CVE-2006-2838)

F-Secure Corporation is an established developer of many anti-virus and security-related products. Two of the products provided by F-Secure can be deployed in enterprise environments and managed through a web interface. The web interface allows an administrator access to a console, through which ...

HP OpenView Data Protector Application Recovery Manager Buffer Overflow (CVE-2009-3844)

HP OpenView Storage Data Protector is a backup solution tailored for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The Cell Manager is the central point from which backup agents and device servers are...

CentOS 5 : rgmanager (CESA-2009:1339)

An updated rgmanager package that fixes multiple security issues, various bugs, and adds enhancements is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. The rgmanager package contains the Red Hat Resourc...

New Data Show Most Breaches Come From External Sources

New data compiled by Verizon in an addendum to its Data Breach Investigations Report shows that the vast majority of reported and investigated data breaches are the result of external incidents, not insider threats. “Incidents that result in data compromise and that prompt disclosure or outside...

rgmanager security update

CentOS Errata and Security Advisory CESA-2009:1339 An updated rgmanager package that fixes multiple security issues, various bugs, and adds enhancements is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team...

rgmanager security, bug fix, and enhancement update

2.0.52-1.0.1 - Update summary and description to be vendor neutral 2.0.52-1 - When vm.sh does a status check and gets 'no state' it is now treated as a running state. - Resolves: rhb514044 2.0.51-1 - In some cases virtual machines will be restarted after a successful migration when the cluster...

cman/fence: insecure temporary file usage in the apc fence agents

The 1 fenceapc and 2 fenceapcsnmp programs, as used in a fence 2.02.00-r1 and possibly b cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file...

[IVIZ-09-005] CA HIPS Remote Kernel Vulnerability

--------------------------------------------------------------------------------------------------- iViZ Security Advisory 09-005 19/08/2009 --------------------------------------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd...

Altiris Deployment Solution Agent < 6.9.355 Local Privilege Escalation (SYM08-019)

The version of the Altiris Deployment Solution Agent installed on the remote host is affected by a local privilege escalation issue. Successful exploitation of this issue could allow an authorized non-privileged user to gain local system access on the client system. C Tenable Network Security, In...

imap-uw -- local buffer overflow vulnerabilities

SANS reports: University of Washington "tmail" and "dmail" are mail deliver agents. "tmail" and "dmail" are exposed to local buffer overflow issues because they fail to perform adequate boundary checks on user-supplied data...

FreeBSD Ports: razor-agents

The remote host is missing an update to the system as announced in the referenced advisory. VID 85069fb6-e15b-11d9-83cf-0010dc5df42d OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: razor-agents

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

GLSA-200808-12 : Postfix: Local privilege escalation vulnerability

The remote host is affected by the vulnerability described in GLSA-200808-12 Postfix: Local privilege escalation vulnerability Sebastian Krahmer of SuSE has found that Postfix allows to deliver mail to root-owned symlinks in an insecure manner under certain conditions. Normally, Postfix does not...

Code injection

The SNMP-DMI mapper subagent daemon aka snmpXdmid in Solstice Enterprise Agents in Sun Solaris 8 through 10 allows remote attackers to cause a denial of service daemon crash via malformed packets...