3589 matches found
ADC2000 NG Pro 1.2 - SQL Injection
source: https://www.securityfocus.com/bid/15595/info ADC2000 NG Pro is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...
[SA17621] Check Point Firewall/VPN ISAKMP IKE Message Processing Denial of Service
TITLE: Check Point Firewall/VPN ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17621 VERIFY ADVISORY: http://secunia.com/advisories/17621/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Check Point NGX http://secunia.com/product/6010/ SOFTWARE:...
Cheops NG Unauthenticated Access
The Cheops NG agent on the remote host is running without authentication. Anyone can connect to this service and use it to map your network, port scan machines and identify running services. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid20161; scriptversion "$Revisio...
Cheops-ng Cleartext Authentication Information Disclosure
A Cheops-ng agent is running on the remote host, and it is configured to allow unencrypted connections. It is, therefore, affected by an information disclosure vulnerability due to passwords being transmitted in cleartext. A user with a valid account on the remote host can connect to the agent an...
Cheops NG Agent Detection
The remote host is running a Cheops NG agent. Cheops NG is an open source network management tool, and the cheops-agent provides a way for remote hosts to communicate with the tool and use it to map your network, port scan machines and identify running services. %NASLMINLEVEL 70300 C Tenable...
Service Detection with 'HELP' Request
This plugin performs service detection. SPDX-FileCopyrightText: 2005 Michel Arboi SPDX-FileCopyrightText: New detection methods / pattern / code since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
yappang231.txt
GulfTech Security Research May 11th, 2005 Vendor : Fritz Berger URL : http://sourceforge.net/projects/yappa-ng/ Version : yappa-ng 2.3.1 && Earlier Risk : Multiple Vulnerabilities Description: Yappa-NG is the second generation new and improved version of Yappa yet another php photo album. There a...
CVE-2005-2313
Check Point SecuRemote NG with Application Intelligence R54 is identified as affected by CVE-2005-2313. The vulnerability is described as allowing attackers to obtain credentials and gain privileges via unknown attack vectors. The connected documents do not provide concrete exploitation details o...
CVE-2005-2313
Check Point SecuRemote NG with Application Intelligence R54 allows attackers to obtain credentials and gain privileges via unknown attack vectors...
Checkpoint Firewall-1 NG Patch Level FP2 Detection
Binary data 2911.prm...
Checkpoint Firewall-1 NG AI R55 Detection
Binary data 2908.prm...
Yappa-NG Multiple Vulnerabilities
GulfTech Security Research May 11th, 2005 Vendor : Fritz Berger URL : http://sourceforge.net/projects/yappa-ng/ Version : yappa-ng 2.3.1 && Earlier Risk : Multiple Vulnerabilities Description: Yappa-NG is the second generation new and improved version of Yappa yet another php photo album. There a...
CVE-2005-1311
Cross-site scripting XSS vulnerability in Yappa-NG before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2005-1311
CVE-2005-1311 affects Yappa-NG prior to 2.3.2. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unknown vectors. According to the NVD entry, the issue has a CVSS v2 base score of 4.3 (Medium) with Network access, no aut...
CVE-2005-1312
PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code via unknown vectors...
CVE-2005-1311
Cross-site scripting XSS vulnerability in Yappa-NG before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2005-1312
Affected software: Yappa-NG before 2.3.2. Vulnerabilities: PHP remote file inclusion (CVE-2005-1312) that could allow arbitrary PHP code execution via unknown vectors; and multiple include/XSS flaws due to failure to sanitize user input, as described in connected Nessus details. Exploitation deta...
yappa-ng < 2.3.2 Multiple Vulnerabilities
The version of yappa-ng installed on the remote host is prone to multiple file include and cross-site scripting vulnerabilities due to its failure to sanitize user-supplied script input when calling various include scripts directly. By exploiting the file include vulnerabilities, an attacker can...