Globus GridFTP privilege escalation

Insufficient validation on name lookup...

HP OpenView Performance Manager PMParamHandler Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Performance Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the PMParamHandler component of Performance Manager, which is served v...

Debian Security Advisory DSA 2465-1 (php5)

The remote host is missing an update to php5 announced via advisory DSA 2465-1. OpenVAS Vulnerability Test $Id: deb24651.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2465-1 php5 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

HP Data Protector Media Operations Memory Corruption

A heap memory corruption vulnerability has been reported in HP Data Protector Media Operations. The vulnerability is due to insufficient validation of the Offset parameter while handling certain packets. A remote attacker may trigger this vulnerability by sending specially crafted connection...

Microsoft Office Visio Global Buffer Overflow (MS11-060; CVE-2011-1979)

A remote code execution vulnerability has been reported in Microsoft Office Visio. The vulnerability is due insufficient validation of the Length value while handling UML String objects in office Visio files. A remote attacker could exploit this vulnerability by enticing a target user to open a...

Path disclosure due to insufficient url parameter validation.

PMASA-2011-15 Announcement-ID: PMASA-2011-15 Date: 2011-10-17 Summary Path disclosure due to insufficient url parameter validation. Description When the jsframe parameter of phpmyadmin.css.php is defined as an array, an error message shows the full path of this file, leading to possible further...

Microsoft Office Visio UMLString Code Execution (MS11-060; CVE-2011-1971)

A remote code execution vulnerability has been reported in Microsoft Visio. The vulnerability is due to insufficient validation by Microsoft Visio when processing UMLString data in Visio files. A remote attacker could exploit this issue by enticing an unsuspecting user to download and open a...

WordPress timthumb. php remote file storage vulnerability analysis-vulnerability warning-the black bar safety net

Source:http://xuser. org/read. php? 1 8 作者 :xuser@fsafe Today on Twitter, see the About wordpress appeared vulnerability, then hastened to open the relevant page of the analysis of specific causes found to be timthumb. php remote storage file when the validation is insufficient and the resulting...

Update Protection against Novell iManager getMultiPartParameters Unauthorized File Upload

A vulnerability was reported in Novell iManager, a web-based administration console that provides management of many other Novell products. The vulnerability is due to insufficient validation of the getMultiPartParametersfunction. A remote attacker could leverage this vulnerability to upload...

Novell iPrint Client Netscape/ActiveX printer-state-reasons Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell iPrint Client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the both the Netscap...

Sawmill Enterprise Code Execution / Cross Site Request Forgery / Cross Site Scripting

SEC Consult Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: Sawmill - Universal Log File Analysis vulnerable version: Sawmill Enterprise v8.1.7.3 fixed version: v8.1.7.3 impact: critical homepage:...

Cross-site Request Forgery (CSRF) Vulnerabilities in MemHT Portal

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in MemHT Portal which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in MemHT Portal 1.1 The vulnerability exists due to insufficient validation of the request...

Novell iManager getMultiPartParameters Unauthorized File Upload

Novell iManager is a web-based administration console that provides management of many other Novell products. The iManager service itself is a Java web application running on top of the Tomcat application container. An unauthorized file upload vulnerability has been reported in Novell iManager. T...

Cross-site Request Forgery (CSRF) Vulnerabilities in BlogBird

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in BlogBird which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in BlogBird 1.1 The vulnerability exists due to insufficient validation of the request origin in...

Cross-site Request Forgery (CSRF) Vulnerabilities in Amiro.CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Amiro.CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Amiro.CMS 1.1 The vulnerability exists due to insufficient validation of the request origin i...

Sun Java Runtime Environment Pack200 Decompression Integer Overflow (CVE-2008-5352; CVE-2009-1095)

There exists an integer overflow vulnerability in Sun Java Runtime Environment software. The vulnerability is due to insufficient validation while decompressing Pack200 jar.pack.gz files. A remote attacker can exploit this vulnerability by enticing a target user to open a crafted HTML file...

Macromedia Flash ActionDefineFunction Memory Access (CVE-2005-2628)

A remote code execution vulnerability exists in the Macromedia Flash plugin. The flaw is created by insufficient validation checks of user input values. This vulnerability may be exploited by a malicious user to inject and execute arbitrary code on the target host. In a successful attack, an...

Cross-site Request Forgery (CSRF) Vulnerabilities in FestOS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in FestOS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in FestOS 1.1 The vulnerability exists due to insufficient validation of the request origin in...

Microsoft Windows Embedded OpenType Font Engine LZCOMP Overflow (MS10-001; CVE-2010-0018)

Embedded OpenType EOT fonts are a compact form of fonts designed for use on web pages. A remote attacker can exploit these vulnerabilities via a specially crafted EOT file. Successful exploitation may allow execution of arbitrary code on a vulnerable system. An integer overflow vulnerability has...

Cross-site request forgery (CSRF) in ocPortal

High-Tech Bridge SA Security Research Lab has discovered vulnerability in ocPortal which could be exploited to perform CSRF attacks. 1 Cross-site request forgery CSRF ocPortal The vulnerability exists due to insufficient validation of the request origin in /site/index.php. A remote attacker can...