Mandriva Update for mozilla-firefox MDKSA-2007:126 (mozilla-firefox)

Check for the Version of mozilla-firefox OpenVAS Vulnerability Test Mandriva Update for mozilla-firefox MDKSA-2007:126 mozilla-firefox Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute ...

Wireshark Multiple Vulnerabilities (Feb 2009) - Linux

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

Fedora Update for kernel FEDORA-2008-1422

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

PT-2009-44: Multiple vulnerabilities in Kayako Support Suite

Kayako Support Suite is a HelpDesk system. Vulnerability Description Positive Technologies Research Team discovered Local File Inclusion LFI vulnerabilities in Kayako Support Suite. A vulnerable function unset allows attackers to overwrite an arbitrary global and not overridden variable, which ca...

Opera Remote Code Execution and Information Disclosure Vulnerabilities (Windows)

The host is installed with Opera Web Browser and is prone to remote code execution and information disclosure Vulnerabilities. OpenVAS Vulnerability Test $Id: gboperainfodiscncodeexecwin.nasl 6519 2017-07-04 14:08:14Z cfischer $ Opera Remote Code Execution and Information Disclosure Vulnerabiliti...

debopenssh-auth.txt

/ Debian maybe other derivates |KUDUBUTUNTU| OpenSSH Remote -=Authenticated=- SELinux Privilege Elevation Fedora/RHEL Linux should be tested because it MAY contain the same vulnerability in it's OpenSSH patches in a time slice. Latest OpenSSH should not be vulnerable. Older Debian Releases may. O...

AIX 610000 : U817155

The remote host is missing AIX PTF U817155 which is related to the security of the package devices.isasio.chrp.8042.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary file overwrite in SYSPROC.NNSTAT procedure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory IBM DB2 UDB Arbitrary file overwrite in SYSPROC.NNSTAT procedure April 17th 2008 Risk Level: High Affected versions: All versions of IBM DB2 Database Server. Remotely exploitable: Yes Authentication to Database Server is...

PT-2008-3085 · Zyxel · Zyxel Prestige

Name of the Vulnerable Software and Affected Versions: ZyXEL Prestige routers versions 3.40PE9 and 3.40AGD.2 through 3.40AHQ.3 Description: The issue is related to the calculation of an MD5 password hash without using a salt, making it easier for attackers to crack passwords. Recommendations: For...

OZJournals 2.1.1 - 'id' File Disclosure

Name: OZJournals 2.1.1 Webiste: http://www.aqonlinenetworks.com/ Vulnerability type: Local File Exposure Author: shinmai, 2008-01-21 Description: OZJournals uses .php-files as it's storage, and posts are read from them with the getcontents-function. This protects from traditional LFI-exploits, bu...

JobSite Professional 2.0 - 'file.php' SQL Injection

JobSite Professional v2.0 Remote SQL Injection Vulnerability AUTHOR : ZynbER HOME : NoWhere Script WebSite: http://www.jobsiteprofessional.com Dork english version : inurl:index.php?page=enjobseekers Dork french version : inurl:index.php?page=frCandidats EXPLOITS : Vulnerability in File.php?id=...

Nortel Telephony Server Denial of Service

COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: Telephony Server Vendor: Nortel Subject: Telephony Server Denial of Service Risk: High Effect: Currently exploitable Author: Cyrill Brunschwiler cyrill.brunschwiler at csnc dot ch Date: October, 18th 2007 Introduction: ------------- A malicio...

Debian DSA-1292-1 : qt4-x11 - missing input validation

Andreas Nolden discovered a bug in the UTF8 decoding routines in qt4-x11, a C++ GUI library framework, that could allow remote attackers to conduct cross-site scripting XSS and directory traversal attacks via long sequences that decode to dangerous metacharacters. %NASLMINLEVEL 70300 C Tenable...

Oracle 10g SYS.DBMS_CDC_IMPDP.BUMP_SEQUENCE PL/SQL Injection

Exploit for multiple platform in category local exploits ============================================================ Oracle 10g SYS.DBMSCDCIMPDP.BUMPSEQUENCE PL/SQL Injection ============================================================ / Exploit for Oracle10g R1 and R2 prior to CPU Oct 2006 Joxe...

Fedora Core 5 : wireshark-0.99.2-fc5.2 (2006-860)

Versions affected: 0.8.16 up to and including 0.99.0 Details Description Wireshark 0.99.2 fixes the following vulnerabilities : - The GSM BSSMAP dissector could crash. Versions affected: 0.10.11. CVE: CVE-2006-3627 Ilja van Sprundel discovered the following vulnerabilities : - The ANSI MAP...

Solaris 7 (sparc) : 104829-02

The remote host is missing Sun Security Patch number 104829-02 FLEXlm 4.1c: Patch for FLEXlm 4.1c and lit/littty. Date this patch was last updated by Sun : Thu Dec 23 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script ha...

[SA22050] MAXdev MD-Pro Cross-Site Scripting Vulnerability

TITLE: MAXdev MD-Pro Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA22050 VERIFY ADVISORY: http://secunia.com/advisories/22050/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: MAXdev MD-Pro 1.x http://secunia.com/product/5663/ DESCRIPTION: A...

about.txt

About.com Homepage: http://www.about.com Effected files: Search input box fullsearch.htm shortform.htm forum.aspx profilecenter.asp posting in the forum ----------------------------------- Search input box xss vuln with cookie disclosure: Works by putting the tags in the input box, or doing url...

Cheops NG without password

The remote service does not require a password for access. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SA18975] POPFile Email Message Handling Denial of Service

TITLE: POPFile Email Message Handling Denial of Service SECUNIA ADVISORY ID: SA18975 VERIFY ADVISORY: http://secunia.com/advisories/18975/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: POPFile 0.x http://secunia.com/product/8275/ DESCRIPTION: A vulnerability has been reported i...