CVE-2009-0209

CVE-2009-0209 concerns OSIsoft PI Server prior to 3.4.380.x, where the default authentication mechanism is insecure and does not encrypt credentials, enabling a remote attacker to read or modify information in PI Server databases via unspecified vectors. The vulnerability is tied to the PI Server...

SuSE9 Security Update : PostgreSQL (YOU Patch Number 11509)

This update fixes two vulnerabilities that affect the backend server and can only be exploited by authenticated users to cause a denial-of-service, or maybe to access other tables/databases without authentication. CVE-2007-0555 CVE-2007-0556 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

DSA-1882-1 xapian-omega - cross-site scripting

Bulletin has no description...

[SECURITY] Fedora 11 Update: apr-util-1.3.9-1.fc11

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more...

[SECURITY] Fedora 10 Update: apr-util-1.3.9-1.fc10

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more...

Researchers Releasing Tool to Break Into Oracle Databases

From CNet News.com Elinor Mills During their presentation at the Black Hat and Defcon hacker conferences next week in Las Vegas, security experts will release a tool that can be used to break into Oracle databases. Chris Gates and Mario Ceballos will present Oracle Pentesting Methodology and give...

phpMyAdmin Installation Not Password Protected

The version of phpMyAdmin installed on the remote web server allows unrestricted, unauthenticated access. This is likely due to setting the 'authtype' to 'config' and storing login credentials in the configuration file. A remote attacker could exploit this to execute arbitrary SQL queries, delete...

[SECURITY] Fedora 10 Update: apr-util-1.3.7-1.fc10

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more...

SQL injection

Added: 04/10/2009 Background Structured Query Language SQL is the most common language understood by modern relational databases. Problem A web program uses input parameters within an SQL query in an unsafe manner. This could allow a remote attacker to inject arbitrary SQL commands via a speciall...

Security feature bypass

Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security databases, and obtain administrative and user credentials, via unknown vectors related to SOAP and XML requests...

CVE-2009-1055

Mode C: The vulnerability affects Sitecore CMS 5.3.1 rev. 071114 where the web service can disclose security databases and credentials to remote authenticated users via SOAP/XML requests. Root cause is unspecified in the public initial description, but connected Nessus/NVD entries confirm an info...

CVE-2009-1055

Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security databases, and obtain administrative and user credentials, via unknown vectors related to SOAP and XML requests...

PHPRunner 4.2 (SearchOption) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== PHPRunner 4.2 SearchOption Blind SQL Injection Vulnerability ==============================================================...

SuSE Update for OpenOffice_org SUSE-SA:2007:067

Check for the Version of OpenOfficeorg OpenVAS Vulnerability Test $Id: gbsuse2007067.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for OpenOfficeorg SUSE-SA:2007:067 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is...

ACCESS advanced injection-vulnerability warning-the black bar safety net

Now we in thescript injectionattack technique,commonly used techniques to score a lot of kinds,the most common is the use of subqueries or is a Union a Union query to get some special table of contents,such as Admin,Log table etc., this is a pure database attack,and MSSQL Server method is more...

DEBIAN-CVE-2008-4096

libraries/databaseinterface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to serverdatabases.php with a sortby parameter containing PHP sequences, which are processed by createfunction...

FreeBSD Security Advisory (FreeBSD-SA-06:15.ypserv.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:15.ypserv.asc ADV FreeBSD-SA-06:15.ypserv.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...

FreeBSD Security Advisory (FreeBSD-SA-06:15.ypserv.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:15.ypserv.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

phpmyadmin -- cross site request forgery vulnerabilities

A phpMyAdmin security announcement: A logged-in user, if abused into clicking a crafted link or loading an attack page, would create a database he did not intend to, or would change his connection character set...

Kahua vulnerable in allowing to share login sessions

Overview Kahua is an open source application development and runtime environment server. Kahua contains a vulnerability which allows the sharing of sessions among multiple applications which are referring to different user databases. Impact A remote attacker could possibly take over the user...