WebSVN Multiple XSS Vulnerabilities (Dec 2011)

WebSVN is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

Design/Logic Flaw

The Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving...

VxWorks Debugging Service Security Bypass Vulnerability

VxWorks is prone to a remote security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Joomla! QContacts Component 'filter_order' Parameter SQL Injection Vulnerability

This host is running Joomla! QContacts component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpodjoomlaqcontactsfilterordersqlinjvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ Joomla! QContacts Component 'filterorder' Parameter SQL Injection Vulnerability Authors:...

BroadWin WebAccess SCADA Client ActiveX Format String

Added: 12/12/2011 OSVDB: 74897 Background BroadWin WebAccess is a web-based SCADA reporting and control solution. Problem BroadWin WebAccess installs an ActiveX Control in the user's browser. The OcxSpool function of this control accepts a parameter that is evaluated using a format string. A form...

Mozilla Firefox Cache Objects History Enumeration Weakness Vulnerability (MAC OS X)

The host is installed with Mozilla Firefox and is prone to cache objects history enumeration weakness vulnerability. OpenVAS Vulnerability Test $Id: gbmozillafirefoxcacheobjenumweaknessvulnmacosx.nasl 7006 2017-08-25 11:51:20Z teissa $ Mozilla Firefox Cache Objects History Enumeration Weakness...

Apple Safari WebKit Information Disclosure Vulnerability - Mac OS X

Apple Safari web browser is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2011-1247 · Adobe +2 · Reader +3

Name of the Vulnerable Software and Affected Versions: Adobe Reader versions 9.x through 9.4.6 Adobe Reader and Adobe Acrobat versions 10.1.1 and earlier Description: The issue is related to a memory corruption vulnerability in the U3D component of Adobe Reader and Adobe Acrobat. This vulnerabili...

PT-2011-3552 · Microsoft · Windows Xp +7

Name of the Vulnerable Software and Affected Versions: Active Directory versions prior to the fixed version Active Directory Application Mode ADAM versions prior to the fixed version Active Directory Lightweight Directory Service AD LDS versions prior to the fixed version Microsoft Windows XP...

CaupoShop 'template' Parameter Local File Include Vulnerability

CaupoShop is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the Web server process. This may all...

Multiple D-Link products vulnerable to buffer overflow

Overview Multiple D-Link products contain a buffer overflow vulnerability. Multiple D-Link products contain a buffer overflow vulnerability due to a SSH implementation issue. Hisashi Kojima, Masahiro Nakada of Fujitsu Laboratories Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated wit...

SSH SSH-1 Protocol Authentication Bypass Vulnerability

The host is running SSH and is prone to authentication bypass vulnerability. OpenVAS Vulnerability Test $Id: gbsshauthenticationbypassvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ SSH SSH-1 Protocol Authentication Bypass Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2011 Greenbone...

Microsoft Internet Explorer 'OLEAuto32.dll' CVE-2011-1995 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions. Technologies Affected Avaya Aur...

Security fix for the ALT Linux 8 package postgresql11 version 9.0.5-alt1

Oct. 11, 2011 Vladimir V Kamarzin 9.0.5-alt1 - 9.0.5 fixes CVE-2011-2483. - Disable devel subpackage...

PT-2011-1143 · Kde +1 · Kdelibs +2

Name of the Vulnerable Software and Affected Versions: kdelibs versions 3.3.1 through 3.5.4 kdelibs versions prior to 4.12.5-r1 KDE SC versions 4.6.0 through 4.7.1 Description: The issue allows remote attackers to exploit vulnerabilities in the kdelibs package, potentially leading to a breach of...

NetSupport Client Handshake Hostname Overflow

Added: 10/11/2011 CVE: CVE-2011-0404 BID: 45728 OSVDB: 70408 Background NetSupport Manager is a remote desktop support solution. Problem The NetSupport client/server communication is carried out over a proprietary communications protocol. This protocol begins with a handshake between the client a...

How to Test Manually Mounting the Veeam vPower NFS Datastore

Purpose This article documents manually mounting the vPower NFS Datastore using the vSphere Web Client. The steps of this article are only intended as a troubleshooting step to help investigate and isolate an issue with vPower NFS-based restores failing. Solution This article's solution is split...

TimeLive Time and Expense Tracking Multiple Vulnerabilities

The host is running TimeLive Time and Expense Tracking and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodtimelivetimeandexpensetrackingmultvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ TimeLive Time and Expense Tracking Multiple Vulnerabilities Authors: Antu Sanadi...

Colasoft Capsa Malformed SNMP V1 Packet Remote Denial of Service Vulnerability

Colasoft Capsa is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RPC rstatd Service Detection (TCP)

This remote host is running a RPC rstatd service via TCP. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...