4063 matches found
Internet Explorer 'KEYGEN' Element Denial Of Service Vulnerability
This host is installed with Internet Explorer and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodmsiekeygendosvuln.nasl 6530 2017-07-05 06:23:50Z cfischer $ Internet Explorer 'KEYGEN' Element Denial Of Service Vulnerability Authors: Sharath S Copyright: Copyrig...
WoltLab Burning Board Cross-Site Request Forgery Vulnerability
This host is running WoltLab Burning Board and is prone to Cross-Site Request Forgery vulnerability. OpenVAS Vulnerability Test $Id: secpodwoltlabburningboardcsrfvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ WoltLab Burning Board Cross-Site Request Forgery Vulnerability Authors: Nikita MR Copyrigh...
[SECURITY] Fedora 11 Update: cyrus-imapd-2.3.14-2.fc11
The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail system designed for use from small to large enterprise environments using standards-based internet mail technologies. A full Cyrus IMAP implementation allows a seamless mail and bulletin board...
KVIrc URI Handler Argument Injection Vulnerability
This host has KVIrc installed and is prone to Argument Injection vulnerability. OpenVAS Vulnerability Test $Id: secpodkvircarginjvulnwin.nasl 5055 2017-01-20 14:08:39Z teissa $ KVIrc URI Handler Argument Injection Vulnerability Authors: Antu Sanadi Copyright c 2009 SecPod, http://www.secpod.com...
Avant Browser Address Bar Spoofing Vulnerability
This host is installed with Avant Browser and is prone to Address Bar Spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbavantbrowseraddrbarspoofingvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Avant Browser Address Bar Spoofing Vulnerability Authors: Sharath S Copyright: Copyright c 2009...
Huawei SmartAX MT880 - Multiple Cross-Site Request Forgery Vulnerabilities
Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has flaws, which allows LAN users to gain unauthorized full access to device. He...
Microsoft Windows Kernel win32k.sys Privilege Escalation Vulnerability
Windows XP/2003 is prone to Privilege Escalation vulnerability. OpenVAS Vulnerability Test $Id: gbmswinkernelwin32ksysprivescvuln.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Windows Kernel 'win32k.sys' Privilege Escalation Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbone...
Multiple Flaws in Huawei SmartAX MT880 [was: Multiple Flaws in Huawei D100]
Description: Huawei MT880 is a device offered by the algerian telecom operator - FAWRI, to provide ADSL Internet connexion and it's already widely in use. Overview: Huawei MT880 firmware and its default configuration has flaws, which allows LAN users to gain unauthorized full access to device. He...
Update Protection against Cisco IOS Administrative Interface HTTP Authentication
Cisco Wireless LAN Controllers WLCs are responsible for system-wide wireless LAN functions, such as security policies, intrusion prevention, RF management, quality of service QoS, and mobility. An attacker with access to the administrative web interface via HTTP or HTTPS may cause the device to...
[RISE-2009003] Linux eCryptfs parse_tag_3_packet Encrypted Key Buffer Overflow Vulnerability
RISE-2009003 Linux eCryptfs parsetag3packet Encrypted Key Buffer Overflow Vulnerability http://risesecurity.org/advisories/RISE-2009003.txt Published: July 28, 2009 Updated: July 28, 2009 INTRODUCTION There exists a vulnerability within a function of Linux eCryptfs Enterprise Cryptographic...
Deonixscripts Templates Management 1.3 SQL Injection Vulnerability
No description provided by source. -------------------------------------------------------------------------- Deonixscripts Templates Management Version 1.3 SQL Injection Vulnerability -------------------------------------------------------------------------- + Author : d3b4g + Email :...
Snitz Forums 2000 'register.asp' SQL Injection Vulnerability
Snitz Forums 2000 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
openSUSE Security Update : kde4-amarok (kde4-amarok-438)
This update fixes a possible buffer overflow, music collection and cover support, adds some new translations and brings back some missed features queuing, play list search and filtering as well as 'stop after current track'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...
NullLogic Groupware <= 1.2.7 Multiple Vulnerabilities - Linux
NullLogic Groupware is prone to multiple vulnerabilities. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Microsoft Internet Explorer XSS Vulnerability - July09
The host is installed with Internet Explorer and is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbmsiexssvulnjul09.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer XSS Vulnerability - July09 Authors: Nikita MR Copyright: Copyright c 2009...
Fedora 10 : phpMyAdmin-3.2.0.1-1.fc10 (2009-7340)
The first security release for phpMyAdmin 3.2.0: - security XSS: Insufficient output sanitizing in bookmarks This version contains a number of small new features and some bug fixes: - core better support for vendor customisation based on what Debian needs - rfe warn when session.gcmaxlifetime is...
Fedora 9 : phpMyAdmin-3.2.0.1-1.fc9 (2009-7337)
The first security release for phpMyAdmin 3.2.0: - security XSS: Insufficient output sanitizing in bookmarks This version contains a number of small new features and some bug fixes: - core better support for vendor customisation based on what Debian needs - rfe warn when session.gcmaxlifetime is...
VicFTPS LIST Command Denial of Service Vulnerability
VicFTPS FTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Worldweaver DX Studio Player shell.execute() Command Execution
This module exploits a command execution vulnerability within the DX Studio Player from Worldweaver for versions 3.0.29 and earlier. The player is a browser plugin for IE ActiveX and Firefox dll. When an unsuspecting user visits a web page referring to a specially crafted .dxstudio document, an...
Sorinara Soritong MP3 Player Stack Overflow Vulnerability
This host is running Sorinara Soritong MP3 Player and is prone to Stack Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodsorinaramp3playerbofvuln.nasl 5374 2017-02-20 16:36:11Z cfi $ Sorinara Soritong MP3 Player Stack Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c...