4390 matches found
Oracle Linux 5 : lcms (ELSA-2009-0339)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0339 advisory. - CVE-2009-0581 LittleCms memory leak - CVE-2009-0723 LittleCms integer overflow - CVE-2009-0733 LittleCms lack of upper-bounds check on sizes Tenable...
Design/Logic Flaw
LeftHand OS aka SAN iQ 10.5 and earlier on HP StoreVirtual Storage devices does not provide a mechanism for disabling the HP Support challenge-response root-login feature, which makes it easier for remote attackers to obtain administrative access by leveraging knowledge of an unused one-time...
CVE-2013-2877
parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service out-of-bounds read via a document that ends abruptly, related to the lack of certain checks for the XMLPARSEREOF state...
Cisco Linksys E1200 / N300 Cross Site Scripting
Summary -------------------- Software : Cisco/Linksys Router OS Hardware : E1200 N300 others currently untested Version : 2.0.04 others currently untested Website : http://www.linksys.com Issue : Reflected XSS Severity : Medium Researcher: Carl Benedict theinfinitenigma Product Description...
PT-2013-1313
Name of the Vulnerable Software and Affected Versions node-printer versions 0.0.1 and earlier Description The issue is related to the printDirect function in the node-printer module, which allows remote attackers to execute arbitrary commands via unspecified characters in the lpr command. This is...
PT-2013-2972
Name of the Vulnerable Software and Affected Versions Cisco Nexus 1000V affected versions not specified Description The encryption functionality in the Virtual Supervisor Module VSM to Virtual Ethernet Module VEM communication component does not properly authenticate VSM/VEM packets. This allows...
PT-2013-4059
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Optim Data Growth for Oracle E-Business Suite versions 6.x through 9.x before 9.1.0.3 Description The issue allows remote attackers to gain access via a brute-force attack due to the lack of limitation on incorrect authenticatio...
Cisco/Linksys E1200 N300 Reflected XSS
Summary -------------------- Software : Cisco/Linksys Router OS Hardware : E1200 N300 others currently untested Version : 2.0.04 others currently untested Website : http://www.linksys.com Issue : Reflected XSS Severity : Medium Researcher: Carl Benedict theinfinitenigma Product Description...
BigAnt Server DUPF Command Arbitrary File Upload (CVE-2012-6274)
An arbitrary file upload vulnerability exists in BigAnt Server. The vulnerability is due to lack of authentication and a directory traversal weakness in processing a DUPF command. Remote unauthenticated attackers can exploit this vulnerability by sending malicious requests to the target server...
BigAnt Messenger Server DUPF Arbitrary File Upload
Added: 04/01/2013 CVE: CVE-2012-6274 BID: 57214 OSVDB: 89342 Background BigAnt Messenger Server offers secure instant messaging, file transfer, voip, video chat, web conferencing and more. Problem BigAnt Server 2.97 and earlier does not require authentication for file uploading, and does not...
PT-2013-2729
Name of the Vulnerable Software and Affected Versions EMC Smarts Network Configuration Manager NCM versions prior to 9.2 Description The issue allows remote attackers to execute arbitrary code due to a lack of authentication for Java RMI method calls. Recommendations For versions prior to 9.2,...
v0pCr3w Web Shell Remote Code Execution
This module exploits a lack of authentication in the shell developed by v0pCr3w and is widely reused in automated RFI payloads. This module takes advantage of the shell's various methods to execute commands. Module Options msf use exploit/multi/http/v0pcr3w/exec msf undefinedexec show actions...
Adobe InDesign Server SOAP Request Lack of Authentication
Access control weakness vulnerability exists in Adobe InDesign Server.The vulnerability is due to a failure to restrict access to the SOAP interface.Successful exploitation could result in execution of arbitrary script code in the context of the service...
D-Link DIR-645 Authentication Bypass Vulnerability
D-Link DIR-645 devices suffer from a direct access authentication bypass vulnerability. Unauthenticated remote access to D-Link DIR-645 devices ======================================================= ADVISORY INFORMATION Title: Unauthenticated remote access to D-Link DIR-645 devices Discovery dat...
PT-2013-2544
Name of the Vulnerable Software and Affected Versions NEC Universal RAID Utility versions 1.40 Rev 680 and earlier NEC Universal RAID Utility versions 2.31 Rev 1492 and earlier NEC Universal RAID Utility versions 2.5 Rev 2244 and earlier Description The issue allows remote attackers to perform...
CVE-2013-0706: Undefined Security Weakness
NEC Universal RAID Utility 1.40 Rev 680 and earlier, 2.31 Rev 1492 and earlier, and 2.5 Rev 2244 and earlier does not provide access control, which allows remote attackers to perform arbitrary RAID disk operations via unspecified vectors...
Child Porn on Indian Government websites
One of the 'The Hacker News' reader inform us today about porn content on some Indian Government websites. After analyzing such websites, we came across more than 30 sub domains belongs to 'entegramam.gov.in' . Where 'entegramam' means "My village" and all sub domains of this website are names of...
Novell File Reporter FSFUI File Upload (CVE-2012-4959)
A file upload vulnerability has been reported in Novell File Reporter. The vulnerability is due to lack of authorization on certain requests. A remote attacker can exploit this issue by sending a specially crafted request to the target. Successful exploitation could result in arbitrary files bein...
ManageEngine MSPCentral 9 Cross Site Request Forgery / Cross Site Scripting
-------------------------------------------------------------- REDACTED REDACTED REDACTED REDACTED REDACTED REDACTED REDACTED ADVISORY ADVISORY ADVISORY ADVISORY ADVISORY ADVISORY ADVISORY -------------------------------------------------------------- RA004: Multiple vulnerabilities in ManageEngi...
