482 matches found
Microsoft Internet Explorer CVE-2016-3321 Local Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to a local information-disclosure vulnerability. An authenticated attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Internet Explorer 10 and 11 are vulnerable. Technologies Affected Microsoft Internet...
Google Nexus Local Information Disclosure Vulnerability
Google Nexus is Google's line of high-end cell phones powered by stock Android. Google Nexus has a local information disclosure vulnerability that can be exploited by attackers to obtain sensitive information that may be useful in launching further attacks...
Radancy: Application error message
Request GET / HTTP/1.1 Host: 12345'"'";|%00%0d%0a%bf%27' Referer: https://serverhk.maximum.com:443/ Connection: Keep-alive Accept-Encoding: gzip,deflate User-Agent: Opera/9.80 Windows NT 6.0; U; en Presto/2.8.99 Version/11.10 Accept: / Response HTTP/1.1 500 Internal Server Error Server:...
SAP Sybase Adapter Server Enterprise XXE Injection
SAP Sybase Adaptive Server Enterprise is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks. SAP Sybase Adaptive Server Enterprise 15.7 ESD 2 is vulnerable; other versions may also be...
SysAid Path Disclosure Vulnerability
SysAid Help Desktop Software is prone to a path disclosure vulnerability Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...
Unprotected MongoDB Service (TCP)
The remote MongoDB service is unprotected. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb"; ifdescription...
plesk <= 8.1.1 login.php3 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23639/info Plesk is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system...
SurgeLDAP 1.0 Web Administration Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10294/info SurgeLDAP is an LDAP server implementation for Microsoft Windows and various Unix operating systems. It includes a built-in web server to permit remote user access via HTTP. It has been reported that the...
Macromedia ColdFusion MX 6.0 - Remote Development Service File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8109/info A vulnerability has been reported for the RDS service that may allow an attacker to obtain unauthorized access to a data residing on a ColdFusion MX server. The vulnerability is due to the way that authenticatio...
Linux Kernel 2.6.x 'sock.c' SO_BSDCOMPAT Option Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33846/info The Linux Kernel is prone to an information-disclosure vulnerability because it fails to properly initialize certain memory before using using it in a user-accessible operation. Successful exploits will allow...
Wabbit PHP Gallery 0.9 Dir Parameter Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21213/info Wabbit PHP Gallery is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve the contents of arbitrar...
A.I-Pifou 1.8 Choix_langue.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20120/info A.I-Pifou is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable...
PlatinumFTPServer 1.0.6 Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6492/info It has been reported that PlatinumFTPserver fails to properly sanitize some FTP commands. By sending a malicious request to the vulnerable server, using directory traversal sequences, it is possible for a remote...
PHP 5.2.10/5.3 'ini_restore()' Memory Information Disclosure Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/36009/info PHP is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. ?php inisetsession.savepath, 0123456789ABCDEF;...
MKPortal 1.0.1 Index.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18707/info MKPortal is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable...
Sage 1.0 beta 3 Content Management System Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6893/info Sage Content Management System contains a path disclosure vulnerability. When a request is made for a module that does not exist, the returned error message contains the full path to the Sage installation...
Nuke Bookmarks 0.6 Marks.php Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12906/info Nuke Bookmarks is prone to a path disclosure issue when invalid data is submitted. This issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable...
ArsDigita Community System 3.4.x Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22121/info ArsDigita Community System is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from...
iCat Electronic Commerce Suite 3.0 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2126/info iCat Electronic Commerce Suite is an application which enables a user to create and manage web based catalogues. A remote user may retrieve known files on a target system running iCat Electronic Commerce Suite...
Clever Copy 3.0 Connect.INC Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17461/info Clever Copy is prone to an information-disclosure vulnerability. A remote attacker could leverage this issue to gain access to sensitive configuration information. The attacker could then use this information t...