5665 matches found
Kroum Grigorov KpyM Telnet Server 1.0 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9379/info KpyM Telnet Server has been reported to be prone to a remote denial of service vulnerability. Due to a lack of resource limitations, a remote attacker may negotiate multiple connections to the affected server...
aGSM 2.35 Half-Life Server Info Response Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10989/info aGSM is reported prone to a remote buffer overflow vulnerability. The issue presents itself in the aGSM server information parsing routines for Half-Life game servers. Due to a lack of sufficient bounds checkin...
Microsoft Message Queueing Service Path Overflow
No description provided by source. $Id: ms05017msmq.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2014-4645
Cross-site scripting XSS vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbitrary web script or HTML via a hostname...
Cross site scripting
Cross-site scripting XSS vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbitrary web script or HTML via a hostname...
CVE-2014-4645
Cross-site scripting XSS vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbitrary web script or HTML via a hostname...
PT-2014-6042 · D Link · Dsl-2760U-E1
Name of the Vulnerable Software and Affected Versions: D-link DSL-2760U-E1 affected versions not specified Description: A cross-site scripting XSS issue exists in the dhcpinfo.html file, allowing remote attackers to inject arbitrary web script or HTML via a hostname. This could potentially lead t...
D-Link DSL-2760U-E1 - Persistent Cross-Site Scripting
D-Link DSL-2760U-E1 - Persistent Cross-Site Scripting !/bin/bash Written and discovered by Yuval tisf Nativ The page 'dhcpinfo.html' will list all machines connected to the network with hostname, IP, MAC and IP expiration. It is possible to store an XSS in this table by changing hostname. Checks ...
CVE-2013-1841
Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter...
DEBIAN-CVE-2013-1841
Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter...
CVE-2013-1841
Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter...
UBUNTU-CVE-2013-1841
Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter...
CVE-2013-1841
CVE-2013-1841 concerns the Perl module Net-Server. When the reverse-lookup option is enabled, Net-Server does not verify that the provided hostname resolves to the source IP address, which could allow remote attackers to bypass ACL restrictions via the hostname parameter. The connected advisories...
CVE-2013-1841
Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter...
CVE-2013-1841
Net-Server, when the reverse-lookups option is enabled, does not check if the hostname resolves to the source IP address, which might allow remote attackers to bypass ACL restrictions via the hostname parameter...
openSUSE Security Update : ruby19 (openSUSE-SU-2013:1179-1)
was updated to fix SSL hostname certification CVE-2013-4073 bnc827265. https://github.com/ruby/ruby/commit/2669b84d407ab431e965145c827db66c91 158f89 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...
PT-2014-2503 · Unknown +2 · Net-Server +2
Name of the Vulnerable Software and Affected Versions: Net-Server affected versions not specified Description: The issue allows remote attackers to potentially bypass ACL restrictions. This is possible when the reverse-lookups option is enabled and the hostname is used as a parameter, as the syst...
openSUSE Security Update : wireshark (openSUSE-SU-2012:1633-1)
This update fixes the following issues for wireshark : - Security update to 1.8.4 : https://www.wireshark.org/docs/relnotes/wireshark-1.8.4.html http://seclists.org/oss-sec/2012/q4/378 CVE-2012-5592 Wireshark 1 pcap-ng hostname disclosure wnpa-sec-2012-30 CVE-2012-5593 Wireshark 2 DoS infinite lo...
MGASA-2014-0257 Updated perl-LWP-Protocol-https package fixes CVE-2014-3230
Updated perl-LWP-Protocol-https package fixes security vulnerability: It was reported that libwww-perl LWP, when using IO::Socket::SSL the default and when the HTTPSCADIR or HTTPSCAFILE environment variables were set, would disable server certificate verification, when the intent was to only...
Updated perl-LWP-Protocol-https package fixes CVE-2014-3230
Updated perl-LWP-Protocol-https package fixes security vulnerability: It was reported that libwww-perl LWP, when using IO::Socket::SSL the default and when the HTTPSCADIR or HTTPSCAFILE environment variables were set, would disable server certificate verification, when the intent was to only...