Jenkins Remote Code Execution Vulnerability (Nov 2014) - Linux

Jenkins is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins";...

Centreon 'POST' Parameter Multiple Vulnerabilities

Centreon is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:centreon:centreon"; ifdescription...

FlatPress 1.0.3 CSRF Arbitrary File Upload

Summary FlatPress is a blogging engine that saves your posts as simple text files. Forget about SQL! You just need some PHP. Description The vulnerability is caused due to the improper verification of uploaded files via the Uploader script using 'upload' POST parameter which allows of arbitrary...

JobScript Remote Code Execution

!C:/Python27/python.exe -u JobScript Remote Code Execution Exploit Vendor: Jobscript Product web page: http://www.jobscript.in Affected version: Unknown Summary: JobScript is inbuilt structured website was developed in PHP and MySQL database. It's a complete job script for those who wants to star...

PT-2015-3763

Name of the Vulnerable Software and Affected Versions VMware vSphere Data Protection VDP versions 5.1, 5.5 through 5.5.8, 5.8 through 5.8.0 EMC Avamar Data Store ADS versions 6.x EMC Avamar Virtual Edition AVE versions 6.x, 7.0.x Description The issue allows man-in-the-middle attackers to spoof...

PT-2014-5415

Name of the Vulnerable Software and Affected Versions Not Yet Commons SSL versions prior to 0.3.15 Description The issue arises from improper verification of the server hostname against the domain name in the subject's Common Name CN field of the X.509 certificate in the Certificates.java file...

X (Formerly Twitter): Improper Verification of email address while saving Account Settings

Signup for Ads on twitter and navigate to "Account Settings" on ads.twitter.com/accounts Enter any email address and save Account Settings. Notice that the email address gets updated successfully. There is no verification email that is sent out to confirm that the email account updated actually...

Omeka 2.2.1 - Remote Code Execution Exploit

No description provided by source. !/usr/bin/env python Omeka 2.2.1 Remote Code Execution Exploit Vendor: Omeka Team CHNM GMU Product web page: http://www.omeka.org Affected version: 2.2.1 and 2.2 Summary: Omeka is a free, flexible, and open source web-publishing platform for the display of...

newsPHP 216 Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8489/info A vulnerability is reported to exist in newPHP that may allow an attacker to gain access to a vulnerable host due to improper verification of authentication credentials. This issue may be exploited to gain acces...

ownCloud 'calendar_id' Parameter privilege Escalation Vulnerability

ownCloud is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; if...

Apache Solr Directory Traversal Vulnerability (SOLR-4882, SOLR-5520) - Linux

Apache Solr is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:solr";...

ImageMagick Integer Overflow Vulnerability - 03 June (Windows)

The host is installed with ImageMagick and is prone to integer overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbimagemagickintegeroverflowvuln03jun13win.nasl 8173 2017-12-19 11:45:56Z cfischer $ ImageMagick Integer Overflow Vulnerability - 03 June Windows Authors: Thanga Prakash S...

PT-2013-3637

Name of the Vulnerable Software and Affected Versions CA SiteMinder Federation FSS versions 12.0 through 12.5 CA SiteMinder Federation Standalone versions 12.0 through 12.1 CA Agent for SharePoint 2010 CA SiteMinder for Secure Proxy Server versions 6.0 through 12.5 Description The issue concerns...

PT-2012-4819

Name of the Vulnerable Software and Affected Versions Open Source Competency Center OSCC MyMeeting versions 3.0.1 and earlier Open Source Competency Center OSCC MyMesyuarat version 09b-1 Description The issue allows remote authenticated users to execute arbitrary PHP code via a crafted document,...

PT-2012-1727

Name of the Vulnerable Software and Affected Versions Apache Qpid version 0.12 Description The issue allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username, due to improper verification of credential...

CVE-2011-3965: Improper Verification of Cryptographic Signature

Google Chrome before 17.0.963.46 does not properly check signatures, which allows remote attackers to cause a denial of service application crash via unspecified vectors...

HP Intelligent Management Center tftpserver.exe Remote Code Execution (CVE-2011-1851)

A remote code execution vulnerability has been reported in HP Intelligent Management Center. The vulnerability is due to improper verification of the destination buffer's size while handling the transfer mode field within the tftpserver.exe component. A remote attacker could exploit this...

Apple iTunes Remote Code Execution Vulnerability (Windows)

This host is installed with Apple iTunes and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodappleitunesremotecodeexecvulnwin.nasl 8169 2017-12-19 08:42:31Z cfischer $ Apple iTunes Remote Code Execution Vulnerability Windows Authors: Rachana Shetty Copyright...

Libcloud SSL Certificates Security Bypass Vulnerability

Libcloud is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TigerVNC SSL Certificate Validation Security Bypass Vulnerability - Windows

TigerVNC is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tigervnc:tigervnc";...