513 matches found
ldapi
This plugin will find LDAP injections by sending a specially crafted string to every parameter and analyzing the response for LDAP errors. Plugin type Audit Options This plugin doesnt have any user configured options. Source For more information about this plugin and the associated tests, theres...
CVE-2012-4836
Cross-site scripting XSS vulnerability in IBM Cognos Business Intelligence BI 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is not properly handled during rendering of...
DEBIAN-CVE-2012-4558
Multiple cross-site scripting XSS vulnerabilities in the balancerhandler function in the manager interface in modproxybalancer.c in the modproxybalancer module in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML vi...
CVE-2012-5958
Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string th...
Stack overflow
Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices before 1.6.18 allows remote attackers to execute arbitrary code via a UDP packet with a crafted string th...
CVE-2012-5958
Removed by vendor...
CVE-2012-6112
classes/GoogleSpell.php in the PHP Spellchecker aka Google Spellchecker addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote...
CVE-2010-1330
The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted string...
Apple Safari Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability (Windows)
This host is installed with Apple Safari and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbapplesafariwebcorewebkitxssvulnwin.nasl 6022 2017-04-25 12:51:04Z teissa $ Apple Safari Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability Windows Authors: Antu Sanadi...
Google Chrome Webcore Webkit 'XSSAuditor.cpp' XSS Vulnerability - Mac OS X
Google Chrome is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 17 : ruby-1.9.3.286-18.fc17 (2012-16086)
New version 1.9.3 patchlevel 286 is released. A potential security flaw was found on the previous ruby that using crafted string might lead to unintentional file creation. This new rpm will fix this issue. Note that Tenable Network Security has extracted the preceding description block directly...
Fedora 18 : ruby-1.9.3.286-19.fc18 (2012-16071)
New version 1.9.3 patchlevel 286 is released. A potential security flaw was found on the previous ruby that using crafted string might lead to unintentional file creation. This new rpm will fix this issue. Note that Tenable Network Security has extracted the preceding description block directly...
Heap overflow
Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.1 allows remote attackers to execute arbitrary code via a crafted string associated with date and time data...
CVE-2012-4068
Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.1 allows remote attackers to execute arbitrary code via a crafted string associated with date and time data...
CVE-2012-4068: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the SoapServer service in Citrix Provisioning Services 5.0, 5.1, 5.6, 5.6 SP1, 6.0, and 6.1 allows remote attackers to execute arbitrary code via a crafted string associated with date and time data...
Cross site scripting
Cross-site scripting XSS vulnerability in the Wiki subsystem in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted string that is inserted into a page title...
IBM DB2 XML Feature DoS and CREATE VARIABLE Security Bypass Vulnerabilities
The host is running IBM DB2 and is prone to denial of service and security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2xmldosncreatevarsecbypassvuln.nasl 5999 2017-04-21 09:02:32Z teissa $ IBM DB2 XML Feature DoS and CREATE VARIABLE Security Bypass Vulnerabilities Authors:...
ChaSen Buffer Overflow Vulnerability (Windows)
The host is running ChaSen Software and is prone to buffer overflow vulnerability OpenVAS Vulnerability Test $Id: gbchasenbofvulnwin.nasl 5364 2017-02-20 13:26:07Z cfi $ ChaSen Buffer Overflow Vulnerability Windows Authors: Rachana Shetty Copyright: Copyright c 2011 Greenbone Networks GmbH,...
ChaSen Buffer Overflow Vulnerability - Windows
ChaSen Software is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...