DSquare Exploit Pack: D2SEC_TUNNELBLICK

Name| d2sectunnelblick ---|--- CVE| CVE-2012-3485 Exploit Pack| D2ExploitPack Description| d2sectunnelblick Notes|...

DSquare Exploit Pack: D2SEC_EMCAXWA

Name| d2secemcaxwa ---|--- CVE| CVE-2012-2289 Exploit Pack| D2ExploitPack Description| EMC ApplicationXtender Web Access .NET Viewer ActiveX Remote Code Execution Vulnerability Notes|...

Microsoft Windows SMB Registry : Windows 8 / Server 2012 Service Pack Detection

It is possible to determine the Service Pack version of the Windows 8 / Server 2012 system by reading the registry key 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid61647; scriptversion"1.6";...

PT-2012-3594 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: A...

Microsoft Office Visio/Viewer Remote Code Execution Vulnerability (2733918)

This host is missing an important security update according to Microsoft Bulletin MS12-059. OpenVAS Vulnerability Test $Id: secpodms12-059.nasl 5963 2017-04-18 09:02:14Z teissa $ Microsoft Office Visio/Viewer Remote Code Execution Vulnerability 2733918 Authors: Antu Sanadi Copyright: Copyright c...

PT-2012-3595 · Microsoft · Windows Server 2003 +6

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: A...

MS12-060: Description of the security update for Visual Basic 6.0 Service Pack 6: August 14, 2012

Resolves a vulnerability that exists in Windows common controls that could allow remote code execution if a user visits a website that contains specially crafted content that is designed to exploit the vulnerability.View products that this article applies to.IntroductionMicrosoft has released the...

MS12-043: Description of the security update for XML Core Services 5.0 when it is installed together with Office 2007, Office Compatibility Pack, Office Word Viewer, Expression Web, or Expression Web 2: August 14, 2012

None None...

MS12-057: Description of the security update for Office 2010 (MSO): August 14, 2012

Describes the security update for Office 2010 MSO that was released on August 14, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-057. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

IBM Lotus Notes < 8.5.3 FP2 URL Handler Unspecified Remote Code Execution

The remote host has a version of Lotus Notes prior to 8.5.3 Fix Pack 2 installed. It is, therefore, reportedly affected by a remote code execution vulnerability that an attacker can exploit by tricking a victim into clicking a specially crafted 'notes://' URL. Note that this vulnerability can onl...

IBM WebSphere Application Server 8.0 < Fix Pack 4 Multiple Vulnerabilities

IBM WebSphere Application Server 8.0 before Fix Pack 4 appears to be running on the remote host and is potentially affected by the following vulnerabilities : - An input validation error exists related to the 'Eclipse Help System' that can allow arbitrary redirect responses to HTTP requests...

CVE-2012-3424

The decodecredentials method in actionpack/lib/actioncontroller/metal/httpauthentication.rb in Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts Digest Authentication strings to symbols, which allows remote attackers to cause a denial of service by leveraging...

DSquare Exploit Pack: D2SEC_LAUNCHHELP

Name| d2seclaunchhelp ---|--- CVE| CVE-2011-2657 Exploit Pack| D2ExploitPack Description| Novell Zenworks Software Packaging LaunchHelp.dll ActiveX Control Remote Code Execution Vulnerability Notes|...

rubygem-actionpack -- Denial of Service

There is a DoS vulnerability in Action Pack digest authentication handling in authenticateorrequestwithhttpdigest...

CVE-2012-2197

Stack-based buffer overflow in the Java Stored Procedure infrastructure in IBM DB2 9.1 before FP12, 9.5 through FP9, 9.7 through FP6, 9.8 through FP5, and 10.1 allows remote authenticated users to execute arbitrary code by leveraging certain CONNECT and EXECUTE privileges...

IBM DB2 9.1 < Fix Pack 12 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.1 running on the remote host is affected by one or more of the following issues : - An integer signedness error exists in the 'db2asrrm' process that can lead to a heap-based buffer overflow. Note that this issue does not affect Windows host...

Installing nworks Report Pack for HP Reporter on Windows Server 2008 (64-bit)

Challenge When installing the nworks Report Pack for HP Reporter on Windows 2008 x64, you may get the following error: OpenView Reporter or Reporter Lite not found! while Reporter is actually installed and running. Cause This happens because the nworks installer is unable to locate the registry k...

Quota Violation While Running WMI Queries

Challenge In the Veeam Management Pack for System Center UI, some monitored objects are grey or missing altogether. Standard troubleshooting steps do not help. The SCOM agent log on the Collector server contains the following error: WMI Error: 0x8004106C When you try to use the WBEMTEST utility,...

IBM DB2 9.7 < Fix Pack 6 Multiple Vulnerabilities

According to its version, the installation of DB2 9.7 running on the remote host is prior to Fix Pack 6. It is, therefore, affected by multiple vulnerabilities : - A local user can exploit a vulnerability in the bundled IBM Tivoli Monitoring Agent ITMA to escalate their privileges. CVE-2011-4061 ...

IBM DB2 9.8 < Fix Pack 5 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.8 running on the remote host is prior to Fix Pack 5. It is, therefore, affected by multiple vulnerabilities : - An authorized user with 'CONNECT' privileges from 'PUBLIC' can cause a denial of service via unspecified methods related to DB2's...