KLA10188 Multiple vulnerabilities in HP Insight Diagnostics

Multiple critical vulnerabilities have been found in HP Insight Diagnostics. Malicious users can exploit these vulnerabilities to inject code or write local files. Below is a complete list of vulnerabilities 1. Improper PHP include restrictions can be exploited via a path parameter; 2. A path...

JVN#53579095: FileMaker Pro vulnerable to cross-site scripting

FileMaker Pro contains an "Instant Web Publishing" function. When this function is enabled, FileMaker Pro is vulnerable to cross-scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Upgrade the software Upgrade to the latest version according to the informatio...

Mozilla Products Memory Corruption Vulnerabilities - July12 (Mac OS X)

This host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmemcorrvulnjul12macosx.nasl 6445 2017-06-27 12:31:06Z santu $ Mozilla Products Memory Corruption Vulnerabilities - July12 Mac OS X Authors:...

JVN#45658190: Movable Type vulnerable to cross-site scripting

Movable Type, a web log system from Six Apart KK, contains a cross-site scripting vulnerability due to an issue in the management screen. This vulnerability is different than the previous vulnerabilities disclosed on JVN. Impact An arbitrary script may be executed on the user's web browser...

Skype Insecure Library Loading Vulnerability (Windows)

The host is installed with Skype and is prone to insecure library loading vulnerability. OpenVAS Vulnerability Test $Id: secpodskypeinsecurelibloadvulnwin.nasl 5401 2017-02-23 09:46:07Z teissa $ Skype Insecure Library Loading Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2010...

aMSN session hijack vulnerability (Windows)

This host is installed with aMSN and is prone to session hijack vulnerability. OpenVAS Vulnerability Test $Id: secpodamsnsessionhijackvulnwin.nasl 7573 2017-10-26 09:18:50Z cfischer $ aMSN session hijack vulnerability Windows Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...

Microsoft Windows ADFS Remote Code Execution Vulnerability (971726)

This host is missing a critical security update according to Microsoft Bulletin MS09-070. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

HP-UX Update for xfs and stmkfont HPSBUX01061

Check for the Version of xfs and stmkfont OpenVAS Vulnerability Test HP-UX Update for xfs and stmkfont HPSBUX01061 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Winamp AIFF File Multiple Buffer Overflow Vulnerabilities

This host is installed with Winamp and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodwinampmultbofvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ Winamp AIFF File Multiple Buffer Overflow Vulnerabilities Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

Unfixed XSS vulnerability at www.traveldoctor.com.au

Security researcher xylitol, has submitted on 27/10/2008 a cross-site-scripting XSS vulnerability affecting www.traveldoctor.com.au, which at the time of submission ranked 1367874 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2008. It i...

JVN#30732239: Apache Tomcat allows access from a non-permitted IP address

Apache Tomcat from the Apache Software Foundation is an implementation of the Java Servlet and JavaServer Page JSP technologies. Apache Tomcat contains a vulnerability which may allow a user from a non-permitted IP address to gain access to a protected context. Impact Impact varies depending on t...

Crysis 1.21 - HTTP/XML-RPC Service Remote Denial of Service

source: https://www.securityfocus.com/bid/29759/info Crysis is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected application, denying further service to legitimate users. Crysi...

KLA10339 WLF vulnerability in SpeedProject

A directory traversal vulnerability was found in SpeedProject products. By exploiting this vulnerability malicious users can overwrite local files. This vulnerability can be exploited remotely at a point related to the JAR and ZIP archives. Original advisories - Exploitation Related products...

CVE-2005-1522

The imap4d server for GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows authenticated remote users to cause a denial of service CPU consumption via a large range value in the FETCH command...

CVE-2005-0719

Unknown vulnerability in the systems message queue in HP Tru64 Unix 4.0F PK8 through 5.1B-2/PK4 allows local users to cause a denial of service process crash for processes such as nfsstat, pfstat, arp, ogated, rarpd, route, sendmail, srconfig, strsetup, trpt, netstat, and xntpd...

Portcullis Security Advisory 05-005

Portcullis Security Advisory Vulnerable System: Webseries Payment Application Vulnerability Title: Internal Path Disclosure in HTTP Variables Vulnerability discovery and development: Portcullis Security Testing Services Affected systems: Bottomline Webseries Payment Application Details: Several...

[Full-Disclosure] [ GLSA 200411-07 ] Proxytunnel: Format string vulnerability

Gentoo Linux Security Advisory GLSA 200411-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[security bulletin] SSRT4794 rev.0 HPStorageWorks Command View XP access restriction bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBST01071 REVISION: 0 SSRT4794 rev.0 HP StorageWorks Command View XP access restriction bypass NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. The information in...

SoX - .wav Local Buffer Overflow

SoX - .wav Local Buffer Overflow //--------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there a...

libpng contains integer overflows in progressive display image reading

Overview The Portable Network Graphics library libpng contains several flaws in progressive image handling that could introduce a remotely exploitable vulnerability. Description The Portable Network Graphics PNG image format is used as an alternative to other image formats such as the Graphics...