SAP Host Control SOAP Web Service Detection

SAP Host Control, a SOAP endpoint, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62292; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"SAP Host Control SOAP Web Service Detection"; scriptsummaryenglish:"Looks f...

LogAnalyzer index.php 'filter' Parameter XSS

The LogAnalyzer install hosted on the remote web server is affected by a cross-site scripting vulnerability due to a failure to properly sanitize user input to the 'filter' parameter of the 'index.php' script. An attacker can exploit this issue to inject arbitrary HTML and script code into a user...

LogAnalyzer index.php 'highlight' Parameter XSS

The LogAnalyzer install hosted on the remote web server is affected by a cross-site scripting vulnerability due to a failure to properly sanitize user input to the 'highlight' parameter of the 'index.php' script. An attacker can exploit this issue to inject arbitrary HTML and script code into a...

Apache Struts 2 struts2-showcase edit-person.action Persistent XSS

The remote web server hosts struts2-showcase, a demonstration application for the Struts 2 framework. Input passed via the 'name' and 'lastName' parameters to 'edit-person.action' is not properly sanitized, which can allow for arbitrary HTML and script code to be loaded onto the system and execut...

Eaton Network Shutdown Module view_list.php paneStatusListSortBy Parameter eval() Call Remote PHP Code Execution

The version of the Eaton Network Shutdown Module hosted on the remote web server does not sanitize user input to the 'paneStatusListSortBy' parameter of the 'viewlist.php' script before using it as part of a command to be executed via PHP's 'eval' function. An unauthenticated, remote attacker can...

CVE-2012-1963

The Content Security Policy CSP functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings placed into the blocked-uri parameter of a violatio...

Atlassian Crucible Detection

Atlassian Crucible, a web-based code review application written in Java, is hosted on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59326; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Atlassian Crucible Detection";...

Apache OFBiz Default Credentials

Nessus was able to login to the remote Apache OFBiz application by providing default credentials. A remote attacker can exploit this issue to perform administrative actions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

LAN Messenger v1.2.28 - Persistent Software Vulnerability

Exploit for windows platform in category local exploits Title: ====== LAN Messenger v1.2.28 - Persistent Software Vulnerability Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= LAN Messenger is a free and open source cross-platform instant...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-0451

CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote web servers to bypass intended Content Security Policy CSP restrictions and possibly conduct...

CVE-2012-0640

WebKit in Apple Safari before 5.1.4 does not properly implement "From third parties and advertisers" cookie blocking, which makes it easier for remote web servers to track users via a cookie...

CVE-2012-0640

WebKit in Apple Safari before 5.1.4 does not properly implement "From third parties and advertisers" cookie blocking, which makes it easier for remote web servers to track users via a cookie...

Code injection

WebKit in Apple Safari before 5.1.4 does not properly implement "From third parties and advertisers" cookie blocking, which makes it easier for remote web servers to track users via a cookie...

CVE-2012-0647

WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header...

CodeMeter WebAdmin Detection

The remote web server hosts CodeMeter WebAdmin, a web-based tool for working with CodeMeter hardware and software based copy protection technology. Note: for accurate results from this plugin and those that depend on it, you may need to enable the CodeMeter WebAdmin ports 22352, 22350 in your...

HP Managed Printing Administration Detection

HP Managed Printing Administration, a web-based printer administration interface, was detected on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57699; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"HP Managed Printing...

op5 Portal Arbitrary Command Execution

The version of op5 Config hosted on the remote web server is earlier than 1.6.2. As such, it contains a flaw in the 'license.php' script that allows a remote, unauthenticated attacker to run arbitrary commands with the privileges of the web user simply by enclosing them in backticks in the...

JDK: unspecified vulnerability fixed in 6u29 (Swing)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.233 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and...

Oracle WebLogic Detection (Combined)

Oracle formerly BEA WebLogic, a Java EE application server, is running on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56979; scriptversion"1.16"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12"; scriptxrefname:"IAVT"...