3167 matches found
CVE-2010-0854: Undefined Security Weakness
Unspecified vulnerability in the Audit component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to "SELECT, INSERT or DELETE on tables subject to auditing."...
Cisco IOS Software Crafted TCP Packet Denial of Service Vulnerability
Cisco IOS® Software is affected by a denial of service vulnerability that may allow a remote unauthenticated attacker to cause an affected device to reload or hang. The vulnerability may be triggered by a TCP segment containing crafted TCP options that is received during the TCP session...
OpenSSL 'bn_wexpand()' Multiple Vulnerabilities - Windows
OpenSSL is prone to multiple vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OpenOffice Multiple Remote Code Execution Vulnerabilities - Feb10
This host has OpenOffice running which is prone to multiple remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbopenofficemultcodeexecvulnwinfeb10.nasl 5323 2017-02-17 08:49:23Z teissa $ OpenOffice Multiple Remote Code Execution Vulnerabilities - Feb10 Authors: Veerendra G...
kvm: emulator privilege escalation IOPL/CPL level check
The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not use the Current Privilege Level CPL and I/O Privilege Level IOPL to restrict instruction execution, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the...
Invision Power Board 1.3.1 and lower Versions SQL injection vulnerability-vulnerability warning-the black bar safety net
Invision Power Board is a widely used WEB-based program. Invision Power Board there is an input validation vulnerability, a remote attacker could exploit this to performSQL injectionattack. Due to not be able to properly filter user-supplied data, an attacker may by the st parameter in the Insert...
GZip 'huft_build()' in 'inflate.c' Input Validation Vulnerability - Linux
GZip is prone to an input validation vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gnu:gzip"; ifdescription...
Joomla DMS SQL Injection
/ Joomla Component comdms Remote SQL injection vulnerability - categoryid Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 28 January, 2010 / Software Information + Vendor : http://joomdonation.com/ + Info :...
PowerDNS (Authoritative Server and Recursor) Detection (DNS)
DNS TCP and UDP based detection of PowerDNS Authoritative Server and Recursor. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Article Directory - SQL Injection
Article Directory - SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:Auth Bypass Remote SQL Injection Vulnerability ? Vendor: www.yourarticlesdirectory.com ? ? Software: Article Directory 5cR!P7 ? ? author: R3d D3v!L ? ? Date: 15.12.2009 ? ?...
CVE-2009-4157
Multiple cross-site scripting XSS vulnerabilities in index.php in the ProofReader comproofreader component 1.0 RC9 and earlier for Joomla! allow remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in 1 404 or 2 error pages...
SUSE: Security Advisory for java-1_6_0-sun (SUSE-SA:2009:058)
The remote host is missing updates announced in advisory SUSE-SA:2009:058. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
COWON Media Center JetAudio Version Detection
This script detects the installed version of COWON Media Center JetAudio. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...
CGI Generic Format String
The remote web server hosts CGI scripts that fail to adequately sanitize request strings. They seem to be vulnerable to a 'format string' attack. By leveraging this issue, an attacker may be able to execute arbitrary code on the remote host subject to the privileges under which the web server...
IBM DB2 Unspecified Vulnerability (Windows)
The host is installed with IBM DB2 and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2unspesifiedvulnwin.nasl 4869 2016-12-29 11:01:45Z teissa $ IBM DB2 Unspecified Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...
G15Daemon Unspecified Vulnerability
This host has G15Daemon installed and is prone to Unspecified vulnerability. OpenVAS Vulnerability Test $Id: secpodg15daemonunspecifiedvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ G15Daemon Unspecified Vulnerability Authors: Sharath S Copyright: Copyright c 2009 SecPod, http://www.secpod.com This...
WinRAR Version Detection
This script finds the installed WinRAR. The script logs in via smb, searches for WinRAR in the registry and gets the version. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2009-2813
Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote...
CVE-2009-2701: Undefined Security Weakness
Unspecified vulnerability in the Zope Enterprise Objects ZEO storage-server functionality in Zope Object Database ZODB 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via...
WebDAV Neon Version Detection
This script detects the installed version of WebDAV Neon. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...