SAPgui EAI WebViewer3D ActiveX control SaveViewToSessionFile buffer overflow

Added: 04/07/2009 CVE: CVE-2007-4475 BID: 34310 OSVDB: 53066 Background SAPgui for Windows registers the EAI WebViewer3D ActiveX control. Problem A buffer overflow vulnerability in the EAI WebViewer3D ActiveX control allows command execution when a user loads a web page which invokes the...

SAPgui EAI WebViewer3D ActiveX control SaveViewToSessionFile buffer overflow

Added: 04/07/2009 CVE: CVE-2007-4475 BID: 34310 OSVDB: 53066 Background SAPgui for Windows registers the EAI WebViewer3D ActiveX control. Problem A buffer overflow vulnerability in the EAI WebViewer3D ActiveX control allows command execution when a user loads a web page which invokes the...

FreeBSD Security Advisory (FreeBSD-SA-06:21.gzip.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:21.gzip.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

vBulletin '$newpm[title]' 跨站漏洞

vBulletin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the...

vBulletin 3.6.10/3.7.2 - '$newpm[title]' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30777/info vBulletin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

vBulletin 3.6.103.7.2 - $newpm[title] Cross-Site Scripting

vBulletin 3.6.103.7.2 - $newpmtitle Cross-Site Scripting source: https://www.securityfocus.com/bid/30777/info vBulletin is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Cleartext protocols settings

This script just sets global variables telnet/rexec/rsh logins and passwords that are used to perform host-level patch level checks. You should avoid using these cleartext protocols when doing a scan, as Nessus will basically broadcast the password to every tested host. TRUSTED...

Solaris 9 (x86) : 118536-06

SunOS 5.9x86: sh/jsh/rsh/pfsh Patch. Date this patch was last updated by Sun : Aug/17/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Checkpoint Firewall-1 Patch Level 1 Detection

Binary data 2905.prm...

Checkpoint Firewall-1 Patch Level 0 Detection

Binary data 2904.prm...

Checkpoint Firewall-1 NG Patch Level FP2 Detection

Binary data 2911.prm...

Checkpoint Firewall-1 NG Patch Level FP1 Detection

Binary data 2910.prm...

Checkpoint Firewall-1 Patch Level 2 through 6 Detection

Binary data 2906.prm...

Microsoft IIS Patch Level Detection (English versions only)

Binary data 1722.prm...

Microsoft IIS Patch Level Detection (English versions only)

Binary data 1718.prm...

Microsoft IIS Patch Level Detection (English versions only)

Binary data 1720.prm...

Microsoft IIS Patch Level Detection (English versions only)

Binary data 1721.prm...

Microsoft SQL Server 2000 OpenDataSource Buffer Overflow (#NISR19062002)

NGSSoftware Insight Security Research Advisory Name: OpenDataSource Buffer Overflow Systems: Microsoft SQL Server 2000, all Service Packs Severity: High Risk Category: Remote Buffer Overrun Vulnerability Vendor URL: http://www.microsoft.com/ Author: Mark Litchfield [email protected] Contributo...

sfgate-info.txt

Vendor: http://ls6-www.cs.uni-dortmund.de/ir/projects/SFgate/index.html Action: attempted to notify vendor with no response. Description: SFGATE gives sensitive information by allowing one to view a few lines of text from a file via an error message. It looks like a good attempt was made at...