Lucene search
K

462 matches found

ThreatPost
ThreatPost
added 2014/02/18 1:38 p.m.14 views

Linksys Routers Vulnerable to Remote Access Vulnerability

Linksys routers sold to consumers as a home or small office networking box are vulnerable to a simple exploit that could give an attacker remote access to the router. The vulnerabilities are wormable, yet are unrelated to the Moon worm reported last week by the SANS Institute. Linksys, which was...

7.9AI score
Exploits0References2
OpenVAS
OpenVAS
added 2013/12/17 12:0 a.m.277 views

Fedora Update for php FEDORA-2013-23208

Check for the Version of php OpenVAS Vulnerability Test Fedora Update for php FEDORA-2013-23208 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

7.5CVSS0.40224EPSS
Exploits12References2
Mageia
Mageia
added 2013/11/20 8:36 p.m.35 views

Updated lighttpd packages fix multiple security vulnerbilities

Updated lighttpd packages fix security vulnerabilities: lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the...

7.6CVSS0.7AI score0.09523EPSS
Exploits1References5
securityvulns
securityvulns
added 2013/08/12 12:0 a.m.118 views

Multiple vulnerabilities on D-Link DIR-645 devices

Multiple vulnerabilities on D-Link DIR-645 devices ================================================== ADVISORY INFORMATION Title: Multiple vulnerabilities on D-Link DIR-645 devices Discovery date: 06/03/2013 Release date: 02/08/2013 Advisory URL:...

0.5AI score
Exploits0
0day.today
0day.today
added 2013/08/07 12:0 a.m.57 views

Apache suEXEC Privilege Elevation / Information Disclosure

Apache suEXEC suffers from privilege escalation and information disclosure vulnerabilities. Apache suEXEC privilege elevation / information disclosure Discovered by Kingcope/Aug 2013 The suEXEC feature provides Apache users the ability to run CGI and SSI programs under user IDs different from the...

7AI score
Exploits0
Fedora
Fedora
added 2013/06/23 5:58 a.m.44 views

[SECURITY] Fedora 17 Update: php-5.4.16-1.fc17

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

9.8CVSS0.6AI score0.94363EPSS
Exploits48
Fedora
Fedora
added 2013/04/03 4:55 a.m.40 views

[SECURITY] Fedora 17 Update: perl-5.14.4-224.fc17

Perl is a high-level programming language with roots in C, sed, awk and she ll scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

7.5CVSS0.5AI score0.81971EPSS
Exploits13
Fedora
Fedora
added 2013/03/22 12:48 a.m.30 views

[SECURITY] Fedora 18 Update: perl-5.16.2-240.fc18

Perl is a high-level programming language with roots in C, sed, awk and she ll scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

7.5CVSS0.5AI score0.81971EPSS
Exploits13
securityvulns
securityvulns
added 2013/02/11 12:0 a.m.89 views

[SECURITY] [DSA 2616-1] nagios3 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2616-1 [email protected] http://www.debian.org/security/ Jonathan Wiltshire February 03, 2013 http://www.debian.org/security/faq -...

7.5CVSS1.5AI score0.799EPSS
Exploits15
Tenable Nessus
Tenable Nessus
added 2013/02/04 12:0 a.m.54 views

Debian DSA-2616-1 : nagios3 - buffer overflow in CGI scripts

A buffer overflow problem has been found in nagios3, a host/service/network monitoring and management system. A malicious client could craft a request to history.cgi and cause application crashes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

7.5CVSS5.5AI score0.799EPSS
Exploits15References4
Debian
Debian
added 2013/02/03 9:24 p.m.29 views

[SECURITY] [DSA 2616-1] nagios3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2616-1 [email protected] http://www.debian.org/security/ Jonathan Wiltshire February 03, 2013 http://www.debian.org/security/faq -...

7.5CVSS6AI score0.799EPSS
Exploits15
OpenVAS
OpenVAS
added 2013/02/03 12:0 a.m.25 views

Debian Security Advisory DSA 2616-1 (nagios3 - buffer overflow in CGI scripts)

A buffer overflow problem has been found in nagios3, a host/service/network monitoring and management system. A malicious client could craft a request to history.cgi and cause application crashes. OpenVAS Vulnerability Test $Id: deb2616.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated fro...

7.5CVSS0.799EPSS
Exploits15References1
UbuntuCve
UbuntuCve
added 2012/10/05 5:55 p.m.24 views

CVE-2012-4443

Monkey HTTP Daemon 0.9.3 uses a real UID of root and a real GID of root during execution of CGI scripts, which might allow local users to gain privileges by leveraging cgi-bin write access...

6.9CVSS6.1AI score0.00054EPSS
Exploits0References2
NVD
NVD
added 2012/10/05 5:55 p.m.10 views

CVE-2012-4443

Monkey HTTP Daemon 0.9.3 uses a real UID of root and a real GID of root during execution of CGI scripts, which might allow local users to gain privileges by leveraging cgi-bin write access...

6.9CVSS6.7AI score0.00054EPSS
Exploits0References3
Prion
Prion
added 2012/10/05 5:55 p.m.10 views

Design/Logic Flaw

Monkey HTTP Daemon 0.9.3 uses a real UID of root and a real GID of root during execution of CGI scripts, which might allow local users to gain privileges by leveraging cgi-bin write access...

6.9CVSS7.3AI score0.00054EPSS
Exploits0References3Affected Software1
exploitpack
exploitpack
added 2012/08/16 12:0 a.m.18 views

E-Mail Security Virtual Appliance (ESVA) - Remote Execution

E-Mail Security Virtual Appliance ESVA - Remote Execution Exploit Title: E-Mail Security Virtual Appliance ESVA Remote Execution. Date: 10 Aug 2012 Exploit Author: iJoo Vendor Homepage: http://www.esvacommunity.com/ Software Link: http://sourceforge.net/projects/esva-project/ Version: ; while$cmd...

0.4AI score
Exploits0
Fedora
Fedora
added 2012/06/30 10:7 p.m.65 views

[SECURITY] Fedora 17 Update: php-5.4.4-1.fc17

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

9.8CVSS0.6AI score0.94363EPSS
Exploits48
Fedora
Fedora
added 2012/05/26 7:21 a.m.50 views

[SECURITY] Fedora 17 Update: php-5.4.3-1.fc17

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

9.8CVSS0.6AI score0.94363EPSS
Exploits47
OpenVAS
OpenVAS
added 2012/04/02 12:0 a.m.35 views

Fedora Update for php FEDORA-2012-1262

Check for the Version of php OpenVAS Vulnerability Test Fedora Update for php FEDORA-2012-1262 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

7.5CVSS0.86573EPSS
Exploits16References2
Fedora
Fedora
added 2012/02/08 10:56 p.m.41 views

[SECURITY] Fedora 16 Update: php-5.3.10-1.fc16

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

7.5CVSS0.6AI score0.86573EPSS
Exploits16
Rows per page
Query Builder