Low: Red Hat Security Advisory: openssh security update

Updated openssh packages that fix bugs in sshd are now available for Red Hat Enterprise Linux 3. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This package includes the core files...

CVE-2006-3568

Multiple cross-site scripting XSS vulnerabilities in guestbook.php in Fantastic Guestbook 2.0.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the 1 firstname, 2 lastname, or 3 nickname parameters...

PT-2006-4443 · Unknown · Fantastic Guestbook

Name of the Vulnerable Software and Affected Versions: Fantastic Guestbook versions 2.0.1 and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML via the first name, last name, or nickname parameters in the guestbook.php file. Recommendations: For Fantast...

JMK's Picture Gallery admin login

dork: "JMK's Picture Gallery" and last path to add : admingallery.php3?action=add&upload=1 example:hhtp://www.site.com/path/.../admingallery.php3?action=add&upload=1 credits:AlpEren,tugr@...

Cross site scripting

Cross-site scripting XSS vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, as last modified in April 2004, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags...

Solaris 10 (sparc) : 119593-01

SunOS 5.10: net-svc patch. Date this patch was last updated by Sun : Aug/08/05 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 8 (x86) : 118668-86

JavaSE 5.0x86: update 85 patch equivalent to JDK 5.0u85. Date this patch was last updated by Sun : Apr/13/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (x86) : 119450-02

SunOS 5.9x86: Perl Patch. Date this patch was last updated by Sun : Mar/31/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2005-1104

Multiple cross-site scripting XSS vulnerabilities in Centra 7 allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 first name, or 3 last name fields...

Solaris 9 (sparc) : 112911-16

SunOS 5.9: ifconfig Patch. Date this patch was last updated by Sun : May/27/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

CVE-2005-1104

Multiple cross-site scripting XSS vulnerabilities in Centra 7 allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 first name, or 3 last name fields...

Solaris 8 (sparc) : 116993-01

SunOS 5.8: /usr/bin/newgrp patch. Date this patch was last updated by Sun : Mar/10/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (sparc) : 113475-03

SunOS 5.9: usr/lib/security crypt Patch. Date this patch was last updated by Sun : May/13/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (x86) : 106248-49

OpenWindows 3.6x86: Xsun patch. Date this patch was last updated by Sun : Nov/06/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Solaris 8 (x86) : 110958-02

SunOS 5.8x86: /usr/bin/mailx patch. Date this patch was last updated by Sun : Nov/06/01 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (x86) : 111625-05

SunOS 5.8x86: /usr/sbin/inetd patch. Date this patch was last updated by Sun : Feb/13/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Microsoft Windows SMB Registry : Last Logged User Name Disclosure

The registry key HKLM\Software\Microsoft\Windows NT\WinLogon\DontDisplayLastUserName is not set to 1. It means that users who attempt to log in locally will see the name of the last user who logged in successfully in this computer on the screen. C Tenable Network Security, Inc. include"compat.inc...

CVE-2001-1205

Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files via '..' sequences in the $errorlog variable...

CVE-2001-1205

Public technical details beyond the initial description are not provided in the connected documents. CVE-2001-1205 is described as a directory traversal in lastlines.cgi (Last Lines 2.0); monitor for updates.

CVE-2001-1206

CVE-2001-1206 affects Matrix CGI vault Last Lines 2.0. The vulnerability: remote attackers can execute arbitrary commands via shell metacharacters in the $error_log variable, enabling remote code execution over the network. The provided sources do not specify affected versions beyond Last Lines 2...