jiguo.com XSS vulnerability

Vulnerable URL: http://www.jiguo.com/search/index.html?str=" Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 22:01 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 18737 Google Pagerank| 0 VIP website status:|...

[SECURITY] [DSA 3455-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3455-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini January 27, 2016 https://www.debian.org/security/faq -...

ancestry.se XSS vulnerability

Vulnerable URL: https://www.ancestry.se/academy/search?q=" Details: Description| Value ---|--- Patched:| Yes, at 03.04.2016 Latest check for patch:| 03.04.2016 15:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 134818 Google Pagerank| 6 VIP website status:| N...

zooplus.bg XSS vulnerability

Vulnerable URL: http://www.zooplus.bg/feedback/form/shop"onmouseover="prompt'XSSPOSED' Details: Description| Value ---|--- Patched:| Yes, at 23.03.2016 Latest check for patch:| 23.03.2016 13:28 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 324216 Google...

veranstaltungskalender-thueringen.de Open Redirect vulnerability

Vulnerable URL: http://veranstaltungskalender-thueringen.de/redirect.php?link=www.xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

wibra.be XSS vulnerability

Vulnerable URL: http://www.wibra.be/vl/collectiesnieuw.php?type=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.08.2016 Latest check for patch:| 25.08.2016 10:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

iaf.gov Open Redirect vulnerability

Vulnerable URL: http://www.iaf.gov/redirect.aspx?url=http://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 29.11.2015 Latest check for patch:| 29.11.2015 01:31 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 3935598 Google Pagerank...

postgresql: loss of frontend/backend protocol synchronization after an error

A flaw was found in the way PostgreSQL handled certain errors that were generated during protocol synchronization. An authenticated database user could use this flaw to inject queries into an existing connection...

CentOS Update for java CESA-2013:1014 centos5

Check for the Version of java OpenVAS Vulnerability Test CentOS Update for java CESA-2013:1014 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for libvirt CESA-2011:0391 centos5 x86_64

Check for the Version of libvirt OpenVAS Vulnerability Test CentOS Update for libvirt CESA-2011:0391 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Authentication flaw

The server in Babo Violent 2 2.08.00 and earlier does not properly implement password protection, which might allow remote attackers to bypass authentication by reconnecting after a connection closes...

Command injection

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 allows remote attackers to obtain sensitive information via 1 a LOG.ON command, which reveals the logging pathname in the server response; 2 a VER command, which reveals the version number in the server response; and 3 a...

CVE-2004-1461

Cisco Secure Access Control Server ACS 3.23 and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address...

RealVNC Server 4.0 - Remote Denial of Service

// source: https://www.securityfocus.com/bid/11048/info RealVNC server is reported prone to a remote denial of service vulnerability. This issue presents itself when an attacker establishes a large amount connections to the server. This issue was reportedly tested on RealVNC 4.0 running on...

LDAP NULL Base Connection

Binary data 1946.prm...

Shaun2k2 Palmhttpd Server 3.0 - Remote Denial of Service

// source: https://www.securityfocus.com/bid/9608/info It has been reported that Palmhttpd server may be prone to remote denial of service vulnerability, when an attacker attempts to establish multiple connections with the software. This issue occurs because PalmOS can only handle one client...

Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 & 4.0 beta

SecureCRT http://www.vandyke.com/products/securecrt/ seems to have a bug in a seemlingly trivial portion of its SSH connection code. When an SSH Client connects to a server, the server sends a version string containing minor and major numbers for the protocol, as well as a server-specific...

Netopia Timbuktu Pro for Macintosh 6.0.1 - Denial of Service

source: https://www.securityfocus.com/bid/3918/info Timbuktu is a remote administration tool. It is available for the Microsoft Window's family of operating systems and Power PC based Macintosh computers. It supports a variety of administrative tasks, including full remote access to the user's...

CVE-2001-0487

AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection...

Microsoft SQL Server Administrator Cached Connection Vulnerability

Description Due to a flaw in the handling of specially crafted ad hoc queries, it is possible for a logged in user to utilize the ad hoc query in such a way that the use of the system administrator's cached connection would be invoked rather than that of the user. This would enable the user to...