Solaris 9 (sparc) : 138896-01

SunOS 5.9: usr/bin/dircmp patch. Date this patch was last updated by Sun : Mar/19/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Cross site scripting

Cross-site scripting XSS vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing...

VulnCheck KEV: CVE-2009-1308

Cross-site scripting XSS vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing...

CVE-2009-1308

Cross-site scripting XSS vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing...

Jamroom 4.0.2 - 't' Local File Inclusion

o-----------------------------------------------------------------------------------------------------------------x | Local File Include Vulnerability | o------------------------------------------------------------------------------------o | Software : Jamroom version 3.1.2 , 3.2.3 , 3.2.4 , 3.2....

[ECHO_ADV_108$2009] JobHut <= 1.2 (pk) Remote Sql Injection Vulnerability

ECHOADV108$2009 ----------------------------------------------------------------------------------------- ECHOADV108$2009 JobHut = 1.2 pk Remote Sql Injection Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : March, 30 th...

Mozilla Foundation Security Advisory 2009-12

Mozilla Foundation Security Advisory 2009-12 Title: XSL Transformation vulnerability Impact: Critical Announced: March 27, 2009 Reporter: Guido Landi, Andre, Michael Rooney, Martin Products: Firefox, SeaMonkey Fixed in: Firefox 3.0.8 SeaMonkey 1.1.16 Description Security researcher Guido Landi...

Nokia Siemens FlexiISN 3.1 Multiple Auth Bypass Vulnerabilities

Exploit for hardware platform in category remote exploits =============================================================== NOKIA Siemens FlexiISN 3.1 Multiple Auth Bypass Vulnerabilities =============================================================== NOKIA Siemens FlexiISN GGSN Multiple...

Ubuntu: Security Advisory (USN-541-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

chaozzDB 1.2 File Disclosure

ECHOADV105$2009 ----------------------------------------------------------------------------------------- ECHOADV105$2009 chaozzDB = 1.2 Critical File Disclosure Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : March, 16...

Wili-CMS 0.4.0 (RFI/LFI/AB) Multiple Remote Vulnerabilities

No description provided by source. Salvatore "drosophila" Fresta + Application: Wili-CMS + Version: 0.4.0 + Website: http://wili-cms.sourceforge.net/ + Bugs: A Multiple Remote/Local File Inclusion B Authentication Bypass + Exploitation: Remote + Date: 06 Mar 2009 + Discovered by: Salvatore...

BlogMan 0.45 Multiple Vulnerabilities

Salvatore "drosophila" Fresta Application: BlogMan http://sourceforge.net/projects/blogman/ Version: 0.45 Bug: Multiple SQL Injection Authentication Bypass Privilege Escalation Exploitation: Remote Date: 1 Mar 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta...

mspicturepusher-activex.txt

'PicturePusherControl.PostURL = "http://127.0.0.1/?aaaa=1" PicturePusherControl.PostURL = "http://192.168.1.1/?aaaa=1" PicturePusherCont...

verisign-xss.txt

VeriSign Kontiki Delivery Management System DMS Cross-Site Scripting Vulnerability CVE Number: CVE-2008-4393 Vulnerability Type / Importance: XSS / Medium Problem discovered: September 24th 2007 Vendor contacted: September 26th 2007 Advisory published: March 28th 2008 Abstract The Kontiki Deliver...

VulnCheck KEV: CVE-2008-1092

Buffer overflow in msjet40.dll before 4.0.9505.0 in Microsoft Jet Database Engine allows remote attackers to execute arbitrary code via a crafted Word file, as exploited in the wild in March 2008. NOTE: as of 20080513, Microsoft has stated that this is the same issue as CVE-2007-6026...

dotnetnuke-expose.txt

=========================================================== DotNetNuke Default Machine Key Exposure Public Release Date: March 20, 2008 Brian Holyfield - Gotham Digital Science [email protected] Affected Software: DotNetNuke = 4.8.1 Severity: Critical...

CenterIM <= 4.22.3 Remote Command Execution Vulnerability:

Application: CenterIM http://www.centerim.org/index.php/MainPage Versions: centerim = 4.22.3 OS: Linux Bug: Execution of shell commands Exploit: remote Date: 15 March 2008 Author: Brian Fonfara w00 eMail: [email protected] Web: newb.kicks-ass.net 1 Bug 2 Exploit ======= 1 Bug ======= Received...

AST-2008-004: Format String Vulnerability in Logger and Manager

Asterisk Project Security Advisory - AST-2008-004 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Format String Vulnerability in Logger and Manager |...

CVE-2008-1881

creationtimestamp| type| source ---|---|--- 2008-03-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5250 2008-05-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5667...

Joomla Component Candle 1.0 (cID) SQL Injection Vulnerability

No description provided by source. JOOMLA comcandle SQL Injectioncid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl:"comcandle" EXPLOIT :...