9568 matches found
PHP Photo Album < 2.0.14 Multiple Vulnerabilities
Binary data 2821.prm...
MS05-017: Vulnerability in MSMQ Could Allow Code Execution (892944) (uncredentialed check)
The remote version of Windows is affected by a vulnerability in Microsoft Message Queuing Service MSMQ. An attacker may exploit this flaw to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. Windows XP SP1 can be identified remotely without harm, n...
PostNuke < 0.760 RC4 Multiple XSS and SQL Injection Vulnerabilities
Binary data 2808.prm...
GLSA-200504-04 : mit-krb5: Multiple buffer overflows in telnet client
The remote host is affected by the vulnerability described in GLSA-200504-04 mit-krb5: Multiple buffer overflows in telnet client A buffer overflow has been identified in the envoptadd function, where a response requiring excessive escaping can cause a heap-based buffer overflow. Another issue ha...
ProductCart Multiple Input Validation Vulnerabilities
The remote host is running a version of the ProductCart shopping cart software that suffers from several input validation vulnerabilities: - SQL Injection Vulnerabilities The 'advSearchh.asp' script fails to sanitize user input to the 'idCategory', and 'resultCnt' parameters, allowing an attacker...
MaxWebPortal <= 1.33 Multiple Vulnerabilities
The remote host is running a version of MaxWebPortal that is prone to multiple input validation vulnerabilities: - Multiple SQL Injection Vulnerabilities An attacker can inject SQL statements via various scripts to manipulate database queries. - A Cross-Site Scripting Vulnerability An attacker ca...
PhotoPost < 5.1 Multiple Input Validation Vulnerabilities
The version of PhotoPost PHP installed on the remote host is prone to multiple input validation vulnerabilities: o Multiple SQL Injection Vulnerabilities The application fails to properly sanitize user-input via the 'sl' parameter of the 'showmembers.php' script, and the 'photo' parameter of the...
Mailreader network.cgi enriched/richtext MIME Message XSS
According to its banner, the version of Mailreader installed on the remote host is affected by a remote HTML injection vulnerability due to its failure to properly sanitize messages using a 'text/enriched' or 'text/richtext' MIME type. An attacker can exploit this flaw by sending a specially...
PhotoPost < 5.02 RC3 Multiple Content-parsing Vulnerabilities
Binary data 2778.prm...
RHEL 4 : mysql (RHSA-2005:334)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:334 advisory. MySQL is a multi-user, multi-threaded SQL database server. This update fixes several security risks in the MySQL server. Stefano Di Paola...
SUSE-SA:2005:019: mysql
The remote host is missing the patch for the advisory SUSE-SA:2005:019 mysql. MySQL is an Open Source database server, commonly used together with web services provided by PHP scripts or similar. This security update fixes a broken mysqlhotcopy script as well as several security related bugs: -...
Trillian Multiple HTTP Responses Buffer Overflow Vulnerabilities
The remote host has the Trillian program installed. Trillian is a Peer2Peer client that allows users to chat and share files with other users across the world. The remote version of this software is vulnerable to several buffer overflows when processing malformed responses. An attacker could...
Phorum search.php location Parameter HTTP Response Splitting
The version of Phorum installed on the remote host does not properly sanitize input used in the Location response header. An attacker can exploit this flaw with a specially crafted request to inject malicious code into HTTP headers, which may allow execution of arbitrary HTML and script code in a...
Icecast XSL Parser Multiple Vulnerabilities (OF, ID)
The remote host is running a version of Icecast that suffers from two flaws in its XSL parser. - A Locally-Exploitable Buffer Overflow Vulnerability The XSL parser does not check the size of XSL 'when', 'if', and 'value-of' tag values before copying them into a finite buffer in process memory. An...
PHP-Fusion < 5.0.2 setuser.php HTML Injection Vulnerability
Binary data 2726.prm...
GLSA-200503-27 : Xzabite dyndnsupdate: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200503-27 Xzabite dyndnsupdate: Multiple vulnerabilities Toby Dickenson discovered that dyndnsupdate suffers from multiple overflows. Impact : A remote attacker, posing as a dyndns.org server, could execute arbitrary code with the...
HP-UX PHSS_27637 : HPSBUX0209-217 Sec. Vulnerability in Apache OpenSSL (rev.2)
s700800 11.04 Virtualvault 4.6 TGP IP Aliasing fix : Remotely exploitable potential vulnerabilities have been reported in CA-2002-21 and CVE-2002-0658. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS27637...
HP-UX Security patch : PHCO_27819
The remote host is missing HP-UX Security Patch number PHCO27819 . SSRT3618 Rev. 1 HP-UX shells %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17386; scriptversion"1.6";...
HP-UX Security patch : PHNE_17248
The remote host is missing HP-UX Security Patch number PHNE17248 . Security Vulnerability with rpc.pcnfsd %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17412; scriptversion"1.7";...