CVE-2008-7171

CVE-2008-7171 concerns Lightweight News Portal (LNP) 1.0b, with three documented XSS vectors: (1) photo parameter to show_photo.php, (2) potd parameter to show_potd.php, and (3) the Current question field in a vote action to admin.php. The vulnerabilities allow remote attackers to inject arbitrar...

CVE-2008-7171

Multiple cross-site scripting XSS vulnerabilities in Lightweight news portal LNP 1.0b allow remote attackers to inject arbitrary web script or HTML via the 1 photo parameter to showphoto.php, 2 potd parameter to showpotd.php, or 3 the Current question field in a vote action to admin.php...

CVE-2009-2861

The Over-the-Air Provisioning OTAP functionality on Cisco Aironet Lightweight Access Point 1100 and 1200 devices does not properly implement access-point association, which allows remote attackers to spoof a controller and cause a denial of service service outage via crafted remote radio manageme...

CVE-2009-2976

Cisco Aironet Lightweight AP devices transmit certain multicast frames in cleartext, enabling remote attackers who sniff the wireless medium to discover Wireless LAN Controller MAC addresses, IP addresses, and AP configuration details. The connected reports reiterate this behavior without providi...

CVE-2009-2861

Cisco Aironet Lightweight Access Point 1100/1200 OTAP feature has an improper access-point association implementation, enabling remote attackers to spoof a controller and trigger a denial-of-service via crafted remote radio management (RRM) packets. No exploitation details beyond the SkyJack/CSCt...

CVE-2009-2861

The Over-the-Air Provisioning OTAP functionality on Cisco Aironet Lightweight Access Point 1100 and 1200 devices does not properly implement access-point association, which allows remote attackers to spoof a controller and cause a denial of service service outage via crafted remote radio manageme...

OpenJDK JAX-WS service endpoint remote Denial-of-Service (6630639)

Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12 and earlier allows remote attackers to cause a denial of service probably resource consumption for a JAX-WS service endpoint via a connection without...

openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-705)

The Sun JDK 6 was updated to Update13 to fix various bugs and security issues. CVE-2009-1093: LdapCtx in the LDAP service in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.124 and earlier; and 1.4.219 and earlier do...

openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-705)

The Sun JDK 6 was updated to Update13 to fix various bugs and security issues. CVE-2009-1093: LdapCtx in the LDAP service in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.124 and earlier; and 1.4.219 and earlier do...

Siteframe CMS 3.2.x SQL Injection/phpinfo() Multiple Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== Siteframe CMS 3.2.x SQL Injection/phpinfo Multiple Vulnerabilities ====================================================================...

Siteframe CMS 3.2.x - SQL Injection / phpinfo()

======================================================================================================================================================== o Siteframe CMS 3.2.x SQL Injection & phpinfo Disclosure Vulnerability Software : Siteframe CMS version 3.2.x Vendor : http://siteframe.org/...

Race condition

Race condition in the Sun Lightweight Availability Collection Tool 3.0 on Solaris 7 through 10 allows local users to overwrite arbitrary files via unspecified vectors...

CVE-2009-2314

Race condition in the Sun Lightweight Availability Collection Tool 3.0 on Solaris 7 through 10 allows local users to overwrite arbitrary files via unspecified vectors...

CVE-2009-2314

CVE-2009-2314 describes a race condition in the Sun Lightweight Availability Collection Tool 3.0 running on Solaris 7–10. The vulnerability allows local users to overwrite arbitrary files via unspecified vectors due to the race-condition condition. The available sources identify the affected prod...

CVE-2009-2314

Race condition in the Sun Lightweight Availability Collection Tool 3.0 on Solaris 7 through 10 allows local users to overwrite arbitrary files via unspecified vectors...

[InterN0T] SkyBlueCanvas 1.1 r237 - Multiple Vulnerabilities

SkyBlueCanvas - XSS and Path Content Disclosure Vulnerabilities Version Affected: 1.1 r237 newest version: 1.1 r246 Info: SkyBlueCanvas Lightweight CMS is an open source, free content management system written in php and built specifically for small web sites. The entire site you are viewing is a...

microTopic v1 (rating) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= microTopic v1 rating Remote Blind SQL Injection Exploit ========================================================= !/usr/bin/perl...

Wireshark Multiple Unspecified Vulnerabilities (Apr 2009) - Windows

Wireshark is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...

Wireshark Multiple Unspecified Vulnerabilities (Apr 2009) - Linux

Wireshark is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...

LDAP Service Detection (TCP)

TCP based detection of services supporting the Lightweight Directory Access Protocol LDAP. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...