Google SketchUp '.SKP' File Memory Corruption Vulnerability (Mac OS X)

This host is installed with Google SketchUp and is prone to to memory corruption vulnerability. OpenVAS Vulnerability Test $Id: gbgooglesketchupskpfilememcorruptionvulnmacosx.nasl 5999 2017-04-21 09:02:32Z teissa $ Google SketchUp '.SKP' File Memory Corruption Vulnerability Mac OS X Authors:...

Google SketchUp '.SKP' File Memory Corruption Vulnerability - Mac OS X

Google SketchUp is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Endpoint Protector 4.0.4.0 Cross Site Scripting

Title: ====== Endpoint Protector v4.0.4.0 - Multiple Web Vulnerabilities Date: ===== 2012-10-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=571 VL-ID: ===== 571 Common Vulnerability Scoring System: ==================================== 5 Introduction: =============...

[SECURITY] Fedora 18 Update: phpMyAdmin-3.5.2.2-1.fc18

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

Mandrake Linux Security Advisory : cfengine (MDKSA-2000:061)

The GNU cfengine is an abstract programming language for system administrators of large heterogeneous networks, used for maintenance and administration. There are a number of string format vulnerabilities in syslog calls that can be abused to either make the cfengine program segfault and die or t...

DataWatch Monarch Business Intelligence (BI) v5.1 admin section stored cross-site scripting

DataWatch Monarch BI v5.1 admin section stored cross-site scripting Class: Input Validation Error Remote: Yes Local: No Published: 26/06/2012 Credit: Raymond Rizk of Dionach Limited [email protected] Vulnerable: DataWatch Monarch BI v5.1 DataWatch's Monarch BI admin section is prone to a stored...

Songcms Sql injection vulnerability and fix-vulnerability warning-the black bar safety net

The filter is not rigorous! ResultSQL injection it! if$WebOpening==0 diehtmlspecialcharsdecode$WebMaintenanceText; $QUERY = pregreplace"/\\:\?"'& lt;\\\\\\\s$/",",$SERVER'QUERYSTRING'; //This regular expression is not rigorous.!!!! Embarrassed$QUERY = explode'/',$QUERY; foreach...

AMD 'Hackette' Serves as Warning to Patch, Patch, Patch

Web administrators using the popular WordPress platform should heed the cautionary tale of microprocessor maker AMD and make sure they update their Web sites to secure vulnerabilities. The company site was hacked over the weekend by someone called “r00tbeer” said to be part of a small enclave...

Endpoint Protector v4.0.4.0 - Multiple Web Vulnerabilities

Exploit for multiple platform in category web applications Details: ======== Multiple persistent input validation vulnerabilities are detected in Endpoint Protector v4.0.4.0 Appliance Application. The bugs allow remote attackers to implement/inject malicious script code on the application side...

Scientific Linux Security Update : bind on SL5.x i386/x86_64

It was discovered that the bind packages created the 'rndc.key' file with insecure file permissions. This allowed any local user to read the content of this file. A local user could use this flaw to control some aspects of the named daemon by using the rndc utility, for example, stopping the name...

Scientific Linux Security Update : openssl on SL6.x i386/x86_64

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols, as well as a full-strength, general purpose cryptography library. A buffer over-read flaw was discovered in the way OpenSSL parsed the Certificate Status Request TLS extensions i...

Design/Logic Flaw

The web services implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly consider the maintenance-mode state and account attributes during login attempts, which allows remote authenticated users to bypass intended access restrictions by connecting to a webservice serv...

CVE-2011-4590

The web services implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly consider the maintenance-mode state and account attributes during login attempts, which allows remote authenticated users to bypass intended access restrictions by connecting to a webservice serv...

SA-CONTRIB-2012-111 - Security Questions - Access Bypass

This module provides administrator configurable challenge questions for use during the log in and password reset processes. The module doesn't perform a proper access check, allowing a users' questions and answers to be edited by other users including anonymous users. CVE: CVE-2012-4475 Versions...

Mandriva Update for mysql MDVA-2012:049 (mysql)

Check for the Version of mysql OpenVAS Vulnerability Test Mandriva Update for mysql MDVA-2012:049 mysql Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for firefox MDVA-2012:048 (firefox)

Check for the Version of firefox OpenVAS Vulnerability Test Mandriva Update for firefox MDVA-2012:048 firefox Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

RedHat Update for openssl RHSA-2011:0677-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

IBM Rational ClearQuest 7.1.1.x < 7.1.1.9 / 7.1.2.x < 7.1.2.6 / 8.0.0.x < 8.0.0.2 Multiple Vulnerabilities (credentialed check)

The remote host is running a version of IBM Rational ClearQuest 7.1.1.x prior to 7.1.1.9 / 7.1.2.x prior to 7.1.2.6 / 8.0.0.x prior to 8.0.0.2 installed. It is, therefore, affected by the following vulnerabilities : - A SQL injection vulnerability exists in the ClearQuest Maintenance tool when...

Google SketchUp '.SKP' File Remote Code Execution Vulnerability (Windows)

This host is installed with Google SketchUp and is prone to to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodgooglesketchupskpfilecodeexecvulnwin.nasl 5963 2017-04-18 09:02:14Z teissa $ Google SketchUp '.SKP' File Remote Code Execution Vulnerability Windows Authors:...

Google SketchUp '.SKP' File Remote Code Execution Vulnerability - Windows

Google SketchUp is prone to a remote code execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...