10093 matches found
PT-2012-3082
Name of the Vulnerable Software and Affected Versions Ruby on Rails versions 3.0.x through 3.0.11 Ruby on Rails versions 3.1.x through 3.1.3 Ruby on Rails versions 3.2.x through 3.2.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via...
XSS via posted select tag options
Ruby on Rails is vulnerable to remote cross-site scripting because the application does not validate manually generated select tag options upon submission to actionpack/lib/actionview/helpers/formoptionshelper.rb. This may allow a user to create a specially crafted request that would execute...
Acal Calendar 2.2.6 - Cross-Site Request Forgery
Exploit Title: Acal calendar 2.2.6 CSRF Vulnerability Date: 11-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/acalproj/files/latest/download?source=directory Version: 2.2.6 Dork: "Calendar Admin: Edit Header and Footer" Tested on: Windows,Linux Add User Username: Password...
NetDecision <= 4.6.1 Multiple Directory Traversal Vulnerabilities - Active Check
NetDecision is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
busybox security and bug fix update
1:1.2.0-13 - Resolves: 768083 'busybox various flaws' including: 'buffer underflow in decompression' 'udhcpc insufficient checking of DHCP options' 1:1.2.0-12 - Resolves: 756723 'Kdump fails after findfs subcommand of busybox fails' 1:1.2.0-11 - Resolves: 689659 ''busybox cp' does not return a...
OpenSSH < 5.7 Multiple Vulnerabilities
Binary data 6300.prm...
CVE-2012-0814
The authparseoptions function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorizedkeys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user accoun...
CVE-2012-0814
The authparseoptions function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorizedkeys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user accoun...
Multiple new vulnerabilities in Register Plus Redux for WordPress
Hello 3APA3A! I want to warn you about multiple new vulnerabilities in plugin Register Plus Redux for WordPress. Last version of the plugin was checked. These are Cross-Site Scripting, SQL Injection, Code Execution and Full path disclosure vulnerabilities. ------------------------- Affected...
WinMount 'WMDrive.sys' Driver IOCTL Handling Denial of Service Vulnerability
This host is installed with WinMount and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwinmountdriverioctlhandlingdosvuln.nasl 5366 2017-02-20 13:55:38Z cfi $ WinMount 'WMDrive.sys' Driver IOCTL Handling Denial of Service Vulnerability Authors: Rachana Shetty...
Privilege escalation
The Microsoft Office Input Method Editor IME for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the...
Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)
This host is missing an important security update according to Microsoft Bulletin MS11-088. OpenVAS Vulnerability Test $Id: secpodms11-088.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Office IME Chinese Privilege Elevation Vulnerability 2652016 Authors: Antu Sanadi Copyright: Copyright c 2011...
Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)
This host is missing an important security update according to Microsoft Bulletin MS11-088. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
VxWorks Debugging Service Security Bypass Vulnerability
VxWorks is prone to a remote security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ClickIt Proof Of Concept
X-Frame-Options is worth less than you think var w; var dummy; var it; // Precache stuff. x = new Image; x.src = 'http://banking.beaver-peak.us/bankinginterface/transfers/'; x2 = new Image; x2.src = 'http://banking.beaver-peak.us/bankinginterface/transfers/beaver-peak.jpg'; x3 = new Image; x3.src...
SuSE 10 Security Update : coreutils (ZYPP Patch Number 7658)
This update fixes the following security issue : - 697897: coreutils: when running 'su -c' to execute commands as different user the target user could inject command back into the calling user's terminal via the TIOCSTI ioctl. It also fixes a bug : - 702995: Added -L and -P commandline options to...
Low: Red Hat Security Advisory: virt-v2v security and bug fix update
An updated virt-v2v package that fixes one security issue and several bugs is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...
Fixed in Apache Tomcat 6.0.35
Note: The issues below were fixed in Apache Tomcat 6.0.34 but the release vote for the 6.0.34 release candidate did not pass. Therefore, although users must download 6.0.35 to obtain a version that includes a fix for this issue, version 6.0.34 is not included in the list of affected versions...
MDVA-2011:083 : bind
The default configuration and compiled in options for ISC BIND uses DNSSEC per default which under certain circumstances can result in huge latencies due to the overhead of trying to validate each lookup, and everytime. This has now been disabled in the configuration file...