9488 matches found
CVE-2012-3419: Exposure of Sensitive Information to an Unauthorized Actor
Performance Co-Pilot PCP before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments...
About mysql explosion serious compilation vulnerabilities in login authentication problem description-bug warning-the black bar safety net
A while back,mysql explosion of a more serious compilation vulnerabilities in login authentication problem The affected version has All MariaDB and MySQL versions up to 5.1.61, 5.2.11, 5.3.5, 5.5.22 arevulnerable. MariaDB versions from 5.1.62, 5.2.12, 5.3.6, 5.5.23 are not. MySQL versions from...
Fedora Update for xen FEDORA-2012-11785
Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2012-11785 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
[SECURITY] Fedora 16 Update: xen-4.1.3-1.fc16
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
CVE-2009-5066
twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments...
CVE-2009-5066
twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments...
CVE-2009-5066
CVE-2009-5066 affects JBoss AS 5.0, EAP 5.0 and earlier. The vulnerability arises because the script twiddle.sh accepts credentials as command-line arguments, enabling a local attacker to read the credentials by inspecting the process arguments. The impact is credential disclosure to local users....
CVE-2009-5066
twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments...
Ubisoft uplay 2.0.3 Active X Control Arbitrary Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Ubisoft uplay 2.0.3 Active X Control...
Microsoft Releases Attack Surface Analyzer Tool
Microsoft has released a public version of its internal Attack Surface Analyzer tool, which helps organizations identify changes to a system’s attack surface as new applications are added. The tool has been in beta for a few months, but this is the first official release. The Attack Surface...
[SECURITY] Fedora 16 Update: xen-4.1.2-9.fc16
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
Scientific Linux Security Update : mysql on SL4.x i386/x86_64
CVE-2008-4098 mysql: incomplete upstream fix for CVE-2008-2079 CVE-2008-4456 mysql: mysql command line client XSS flaw CVE-2009-2446 MySQL: Format string vulnerability by manipulation with database instances crash CVE-2009-4030 mysql: Incomplete fix for CVE-2008-2079 / CVE-2008-4098 Multiple flaw...
Scientific Linux Security Update : device-mapper-multipath on SL4.x, SL5.x i386/x86_64
It was discovered that the multipathd daemon set incorrect permissions on the socket used to communicate with command line clients. An unprivileged, local user could use this flaw to send commands to multipathd, resulting in access disruptions to storage devices accessible via multiple paths and,...
CVE-2012-2163
IBM Scale Out Network Attached Storage SONAS 1.1 through 1.3.1 allows remote authenticated administrators to execute arbitrary Linux commands via the 1 Command Line Interface or 2 Graphical User Interface, related to a "code injection" issue...
CentOS Update for ipmitool CESA-2011:1814 centos6
Check for the Version of ipmitool OpenVAS Vulnerability Test CentOS Update for ipmitool CESA-2011:1814 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
PT-2012-3847
Name of the Vulnerable Software and Affected Versions IBM Scale Out Network Attached Storage SONAS versions 1.1 through 1.3.1 Description The issue allows remote authenticated administrators to execute arbitrary Linux commands, related to a code injection problem. This can be achieved via the...
CVE-2012-2163: Undefined Security Weakness
IBM Scale Out Network Attached Storage SONAS 1.1 through 1.3.1 allows remote authenticated administrators to execute arbitrary Linux commands via the 1 Command Line Interface or 2 Graphical User Interface, related to a "code injection" issue...
CentOS Update for php CESA-2012:0546 centos5
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for curl CESA-2011:0918 centos4 x86_64
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...