WeBid Remote File Include and SQLi Vulnerabilities

WeBid to a remote file-include issue and an SQL injection SQLi issue. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Pidgin 'Libpurple' Cipher API Information Disclosure Vulnerability - Windows

Pidgin is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cyclope Employee Surveillance Solution Local File Inclusion Vulnerability

This host is running Cyclope Employee Surveillance Solution and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbcyclopeemployeesurveillancelfivuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Cyclope Employee Surveillance Solution Local File Inclusion Vulnerability...

PT-2012-1275 · Red Hat · Jboss Eap +1

Name of the Vulnerable Software and Affected Versions: JBoss AS versions 5.0 and earlier JBoss EAP versions 5.0 and earlier Description: The issue allows local users to read credentials by listing the process and its arguments, as twiddle.sh in JBoss AS and EAP accepts credentials as command-line...

DEBIAN-CVE-2012-3355

1 AlbumTab.py, 2 ArtistTab.py, 3 LinksTab.py, and 4 LyricsTab.py in the Context module in GNOME Rhythmbox 0.13.3 and earlier allows local users to execute arbitrary code via a symlink attack on a temporary HTML template file in the /tmp/context directory...

CVE-2012-2282: Undefined Security Weakness

EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and 2.1 before 2.1.3.19077 aka MR1 SP3.2 and 2.2 before 2.2.0.19078 aka MR2 SP0.2 do not properly implement NFS access control, which allows remote authenticated users to read or modify files via a 1 NFSv2, 2...

PT-2012-3921

Name of the Vulnerable Software and Affected Versions EMC Celerra Network Server versions 6.x before 6.0.61.0 VNX versions 7.x before 7.0.53.2 VNXe versions 2.0 and 2.1 before 2.1.3.19077 VNXe version 2.2 before 2.2.0.19078 Description The issue is related to improper implementation of NFS access...

PT-2012-3093

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.9 Description The issue allows remote authenticated users with manager privileges to modify or delete global categories due to improper permission checks. Recommendations For versions prior to 1.2.9, update to...

PHP 5.1.x < 5.1.5 Multiple Vulnerabilities

PHP is prone to multiple vulnerabilities. Copyright C 2012 NopSec Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...

Microsoft Lync Version Detection

Detects the installed version of Microsoft Lync. The script logs in via smb, searches for Microsoft Lync in the registry and gets the version from Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

CVE-2012-2596: Improper Control of Generation of Code

The XPath functionality in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 does not properly handle special characters in parameters, which allows remote authenticated users to read or modify settings via a crafted URL, related to an "XML injection" attack...

Mozilla: Use-after-free while replacing/inserting a node in a document (MFSA 2012-38)

Use-after-free vulnerability in the nsINode::ReplaceOrInsertBefore function in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird 5.0 through 12.0, Thunderbird ESR 10.x before 10.0.5, and SeaMonkey before 2.10 might allow remote attackers to execute arbitrary code via...

PT-2012-3109

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.3.1 Description The issue allows guest OS users to cause a denial of service host OS crash by leveraging administrative access to the guest OS, related to the pmd none or clear bad function and page faults for...

Fedora Update for uzbl FEDORA-2012-2364

The remote host is missing an update for the Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2012-0371: Undefined Security Weakness

Cisco Wireless LAN Controller WLC devices with software 4.x, 5.x, 6.0, and 7.0 before 7.0.220.4, when CPU-based ACLs are enabled, allow remote attackers to read or modify the configuration via unspecified vectors, aka Bug ID CSCtu56709...

Microsoft RDP Server Private Key Information Disclosure Vulnerability

Remote Desktop Protocol server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

CVE-2012-1082: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Terminal PHP Shell terminal extension 0.3.2 and earlier for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-4701: Undefined Security Weakness

The CallConfirm jp.gr.javaconf.ofnhwx.callconfirm application 2.0.0 for Android does not properly protect data, which allows remote attackers to read or modify allow/block lists via a crafted application...

PT-2012-1512

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server WAS versions 6.1 before 6.1.0.43 IBM WebSphere Application Server WAS versions 7.0 before 7.0.0.21 IBM WebSphere Application Server WAS versions 8.0 before 8.0.0.2 Description The issue allows local users to re...

CVE-2011-2769

Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATEFAST values in the Command field of a cell within an OR connection that it initiated, which allows remote relays to enumerate bridges by using these values...