Firefox Code Execution

The vulnerability of the ServiceWorkerManager class in Firefox browsers is caused by buffer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or trigger a service failure such as reading from beyond the memory limit or memory corruption through the us...

Directory traversal

Directory traversal vulnerability in EMC Avamar Server 7.x before 7.1.2 and Avamar Virtual Addition AVE 7.x before 7.1.2 allows remote attackers to read arbitrary files by using the Avamar Desktop/Laptop client interface to send crafted parameters...

CVE-2014-3878

Multiple cross-site scripting XSS vulnerabilities in the web client interface in Ipswitch IMail Server 12.3 and 12.4, possibly before 12.4.1.15, allow remote attackers to inject arbitrary web script or HTML via 1 the Name field in an add new contact action in the Contacts section or unspecified...

CVE-2014-3878

Ipswitch IMail Server web client interface (12.3 and 12.4, possibly before 12.4.1.15) contains multiple cross-site scripting (XSS) vulnerabilities. The flaws allow remote attackers to inject arbitrary web script or HTML via (1) the Name field when adding a new contact, (2) an Add Group action in ...

PT-2014-5571

Name of the Vulnerable Software and Affected Versions Ipswitch IMail Server versions 12.3 through 12.4 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the web client interface. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML...

CVE-2014-3878: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the web client interface in Ipswitch IMail Server 12.3 and 12.4, possibly before 12.4.1.15, allow remote attackers to inject arbitrary web script or HTML via 1 the Name field in an add new contact action in the Contacts section or unspecified...

Debian Security Advisory DSA 2691-1 (libxinerama - several vulnerabilities)

Ilja van Sprundel of IOActive discovered several security issues in multiple components of the X.org graphics stack and the related libraries: Various integer overflows, sign handling errors in integer conversions, buffer overflows, memory corruption and missing input sanitising may lead to...

CVE-2012-0411

Summary: CVE-2012-0411 affects Novell iPrint Client (pre-5.82). The root cause is a vulnerability in the op-client-interface-version operation (descriptor in ienipp.ocx per ZDI) where two strings used to build a response URL are copied into a fixed‑length buffer on the stack, causing memory corru...

CVE-2012-0411

Unspecified vulnerability in Novell iPrint Client before 5.82 allows remote attackers to execute arbitrary code via an op-client-interface-version action...

PT-2012-2553

Name of the Vulnerable Software and Affected Versions Novell iPrint Client versions prior to 5.82 Description The issue allows remote attackers to execute arbitrary code. It is related to the op-client-interface-version action. Recommendations For versions prior to 5.82, update to version 5.82 or...

CVE-2012-0411: Undefined Security Weakness

Unspecified vulnerability in Novell iPrint Client before 5.82 allows remote attackers to execute arbitrary code via an op-client-interface-version action...

CVE-2010-1527: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Novell iPrint Client before 5.44 allows remote attackers to execute arbitrary code via a long call-back-url parameter in an op-client-interface-version action...

Cisco Security Advisory: Cisco IOS Software Multiple Features Crafted TCP Sequence Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software Multiple Features Crafted TCP Sequence Vulnerability Advisory ID: cisco-sa-20090325-tcp http://www.cisco.com/warp/public/707/cisco-sa-20090325-tcp.shtml Revision 1.0 For Public Release 2009 March 25 1600 UTC...

GNUnet Detection (Client Interface)

The remote target is running GNUNet. GNUnet is an anonymous peer-to-peer network. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid31420; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate",...