RSA - SecurID Cross-Site Scripting

RSA - SecurID Cross-Site Scripting Discovered 12-11-2008 Discovered By: s4squatch of SecureState R&D Team www.securestate.com Vendor Notified: 10-07-2009 Vendor Response: 10-08-2009 Version: Unknown -- DLL does not contain version, therefore vendor says it is outdated and not supported. POC:...

RSA - SecurID Cross-Site Scripting

Discovered 12-11-2008 Discovered By: s4squatch of SecureState R&D Team www.securestate.com Vendor Notified: 10-07-2009 Vendor Response: 10-08-2009 Version: Unknown -- DLL does not contain version, therefore vendor says it is outdated and not supported. POC:...

Solaris 10 (sparc) : 142900-15

SunOS 5.10: kernel patch. Date this patch was last updated by Sun : Jul/26/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Mac OS X Version

This script gets the Mac OS X version from other plugins and reports if the host is running an outdated/unsupported version. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2009 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

Mozilla Firefox < 3.0.15 / 3.5.4 Multiple Vulnerabilities

Binary data 5218.prm...

Snow Leopard Ships With Vulnerable Flash Player

Apple’s new operating system comes with an outdated version of Flash Player that exposes Mac users to hacker attacks. The initial release of Mac OS X 1..6 Snow Leopard includes Flash Player 10.0.23.1, which is very much out of date. The fully patched version of Flash Player for Mac is version...

Vulnerable MSVC++ runtime distributed with OpenOffice.org 3.1.1 for Windows

The just released latest version of OpenOffice.org 3.1.1 for Windows distributes once again a completely outdated and vulnerable MSVC++ runtime. The unpacked installation archive contains in subdirectory REDIST the installer of the "Microsoft Visual C++ 2008 Redistributable", VCRedistx86.exe, tim...

Adobe Doles Out Bug-Filled PDF Reader to Users

From Computerworld Gregg Keizer Adobe delivers an out-of-date version of Reader to users who download the popular application from its Web site, a security company warned today. The edition Adobe currently offers includes at least 14 security vulnerabilities that have been patched by the company ...

Terratec HomeCinema multiple security vulnerabilities

System libraries are replaced with outdated viersions during installation process in insecure manner...

Vulnerable DLLs distributed with Terratec HomeCinema 6.3

Once again a sad story of poor software "engineering", missing QA and a TOTALLY unresponsive vendor. The current version 6.3 of Terratec's TV software HomeCinema http://ftp.terratec.de/Receiver/TerraTecHomeCinema/TerraTecHomeCinema6.3.exe from 2009-05-05 installs outdated and vulnerable .DLLs the...

Solaris Update for Obsoleted by 109223-10

Check for the Version of Obsoleted by OpenVAS Vulnerability Test Solaris Update for Obsoleted by 109223-10 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

The use of the picture behind a link hidden hung it.-vulnerability warning-the black bar safety net

I also don't know dove gray is what the time, the mesh horse is very popular, and when I finally know the Dove gray is what time, Pirates of the QQ software in the use of the mailbox the received the letter, and when I use dove gray successful on-line and caught the first broilers of the time, th...

MDVA-2009:054 : iproute2

iproute2 package shipped with Mandriva Linux 2009.0 installed outdated manual pages. This update installs correct manual pages instead. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Netwo...

Solaris 2.5.1 (x86) : 105078-06

SunOS 5.5.1x86: /kernel/fs/fifofs patch. Date this patch was last updated by Sun : May/25/00 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 2.6 (sparc) : 106271-09

SunOS 5.6: /usr/lib/security/pamunix.so.1. Date this patch was last updated by Sun : Jan/04/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Mandriva Update for x11-driver-video-vesa MDKA-2007:069 (x11-driver-video-vesa)

Check for the Version of x11-driver-video-vesa OpenVAS Vulnerability Test Mandriva Update for x11-driver-video-vesa MDKA-2007:069 x11-driver-video-vesa Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

FacilCMS <= 0.1RC2 Multiple Vulnerabilities - Active Check

FacilCMS is prone to multiple SQL injection SQLi and information disclosure vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Vulnerable and pointless password storage on client computers

Given the following: -http://confluence.atlassian.com/display/DOC/Confluence+Cookies, which says "a one-way hash of the user's password" is stored in a browser cookie on the user's computer. -CSP-29692 case I opened with Atlassian support, which explained that EncryptionUtils.java is used to...

SuSE Security Summary SUSE-SR:2009:003

The remote host is missing updates announced in advisory SUSE-SR:2009:003. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...

SuSE Security Summary SUSE-SR:2009:002

The remote host is missing updates announced in advisory SUSE-SR:2009:002. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...