MyBB Extended Useradmininfo Plugin 1.2.1 - Cross-Site Scripting

Exploit Title: Extended Useradmininfo MyBB Plugin 1.2.1 - Cross Site Scripting Google Dork: N/A Date: 09.02.2014 Exploit Author: Fikri Fadzil - [email protected] Vendor Homepage: http://forum.mybboard.de/user-9022.html Software Link: http://mods.mybb.com/view/extended-useradmininfo...

ColdFusion Extended Support Version Detection (credentialed check)

According to its version, there is at least one installation of ColdFusion that is potentially under Extended Support. Note that the Extended Support program requires a vendor contract. Extended Support provides upgrades and security fixes for two years after regular support ends. C Tenable Netwo...

ColdFusion Extended Support Version Detection

According to its version, there is at least one installation of ColdFusion on the remote host that is potentially under Extended Support. Note that the Extended Support program requires a vendor contract. Extended Support provides upgrades and security fixes for two years after regular support...

Mozilla Thunderbird Multiple Vulnerabilities-01 (Dec 2013) - Windows

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Mozilla Thunderbird Multiple Vulnerabilities-01 (Dec 2013) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

Debian Announces End of Security Support for IceApe

Developers at Debian today informed users still clinging to Iceape – an Internet suite modeled on old Mozilla code – that they are cutting the cord and will stop supplying the software with security updates. Iceape is more or less a Debian-branded hybrid of several community-driven entities,...

Oracle Java JRE Premier Support and Extended Support Version Detection (Unix)

According to its version, there is at least one install of Oracle formerly Sun Java JRE on the remote host that is potentially under either Premier Support or Extended Support. Note that both support programs require vendor contracts. Premier Support provides upgrades and security fixes for five...

Oracle Java JRE Premier Support and Extended Support Version Detection

According to its version, there is at least one install of Oracle formerly Sun Java JRE that is potentially under either Premier Support or Extended Support. Note that both support programs require vendor contracts. Premier Support provides upgrades and security fixes for five years after the...

CVE-2013-6673

Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a...

Thunderbird < 24.2 Multiple Vulnerabilities (Mac OS X)

The installed version of Thunderbird is earlier than 24.2 and is, therefore, potentially affected by the following vulnerabilities : - Memory issues exist in the browser engine that could result in a denial of service or arbitrary code execution. CVE-2013-5609, CVE-2013-5610 - Two use-after-free...

Mozilla Thunderbird < 24.2 Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 24.2 and is, therefore, potentially affected the following vulnerabilities: - Memory issues exist in the browser engine that could result in a denial of service or arbitrary code execution. CVE-2013-5609, CVE-2013-5610 - Two use-after-free...

kernel: nfs: missing check for buffer length in __nfs4_get_acl_uncached

Buffer overflow in the nfs4getacluncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service memory corruption and system crash or possibly have unspecified other impact via a getxattr system call for the system.nfs4acl extended attribut...

samba: DoS via integer overflow when reading an EA list

Integer overflow in the readnttransealist function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service memory consumption via a malformed packet...

DEBIAN-CVE-2013-4591

Buffer overflow in the nfs4getacluncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service memory corruption and system crash or possibly have unspecified other impact via a getxattr system call for the system.nfs4acl extended attribut...

CVE-2013-4591

Buffer overflow in the nfs4getacluncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service memory corruption and system crash or possibly have unspecified other impact via a getxattr system call for the system.nfs4acl extended attribut...

DEBIAN-CVE-2013-4475

Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfsstreamsdepot or vfsstreamsxattr is enabled, allows remote attackers to bypass intended file restrictions by leveraging ACL differences between a file and an associated alternate data stream ADS...

CVE-2013-5591

Unspecified vulnerability in the browser engine in Mozilla Firefox before 25.0, Firefox ESR 24.x before 24.1, Thunderbird before 24.1, and SeaMonkey before 2.22 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via...

Ubuntu Update for samba USN-1966-1

Check for the Version of samba OpenVAS Vulnerability Test $Id: gbubuntuUSN19661.nasl 8509 2018-01-24 06:57:46Z teissa $ Ubuntu Update for samba USN-1966-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

DEBIAN-CVE-2013-1442

Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data from registers when using an XSAVE or XRSTOR to extend the state components of a saved or restored vCPU after touching other restored extended registers, which allows local guest OSes to obtain...

German ERP Sage Office Line Privilege Escalation

Security Vulnerability in German ERP system "Sage office Line" Recently, I discovered a Securtiy Security Vulnerability in the German ERP system "Sage office Line", created by German branch of the UK-based Sage Group. The Software is sold in Germany, Austria and Switzerland. According to their...