9597 matches found
AIX 530005 : U810304
The remote host is missing AIX PTF U810304 which is related to the security of the package bos.cifsfs.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
GLSA-200802-03 : Horde IMP: Security bypass
The remote host is affected by the vulnerability described in GLSA-200802-03 Horde IMP: Security bypass Ulf Harnhammar, Secunia Research discovered that the 'frame' and 'frameset' HTML tags are not properly filtered out. He also reported that certain HTTP requests are executed without being...
AIX 530005 : U800590
The remote host is missing AIX PTF U800590 which is related to the security of the package bos.adt.syscalls You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX 530005 : U810322
The remote host is missing AIX PTF U810322 which is related to the security of the package bos.rte.shell You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX 530007 : U813861
The remote host is missing AIX PTF U813861 which is related to the security of the package devices.common.IBM.ib.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc...
MySpace Uploader ActiveX Control < 1.0.0.6 Action Property Buffer Overflow
The remote host contains a version of the MySpace Uploader ActiveX control MySpace.Uploader.4.1 that reportedly is affected by a buffer overflow that can be triggered by assigning a string longer than 260 characters to certain properties, such as 'Action', 'ExtractIptc', and 'ExtractExif'. If a...
QuickTime < 7.4.1 RTSP Response Long Reason-Phrase Arbitrary Remote Code Execution (Windows)
The version of QuickTime installed on the remote Windows host is older than 7.4.1. Such versions contain a heap-based buffer overflow in the application's handling of HTTP responses when RTSP tunneling is enabled. If an attacker can trick a user into visiting a specially crafted webpage, arbitrar...
Debian Security Advisory DSA 1459-1 (gforge)
The remote host is missing an update to gforge announced via advisory DSA 1459-1. OpenVAS Vulnerability Test $Id: deb14591.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1459-1 gforge Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian: Security Advisory (DSA-1472-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MoinMoin MOIN_ID Cookie userform Action Traversal Arbitrary File Overwrite
The remote host is running MoinMoin, a wiki application written in Python. The version of MoinMoin installed on the remote host fails to validate input to the 'MOINID' cookie before using it to read and write user profiles. By providing the name of a file that exists on the remote host and is...
Winamp < 5.52 Ultravox Streaming Metadata in_mp3.dll Multiple Tag Overflow
The remote host is using Winamp, a popular media player for Windows. The version of Winamp installed on the remote Windows host reportedly contains two stack-based buffer overflows in 'inmp3.dll' when parsing Ultravox streaming metadata that can be triggered by overly-long '' and '' tag values. I...
Debian Security Advisory DSA 810-1 (mozilla)
The remote host is missing an update to mozilla announced via advisory DSA 810-1. Several problems have been discovered in Mozilla, the we browser of the Mozilla suite. Since the usual praxis of backporting apparently does not work for this package, this update is basically version 1.7.10 with th...
Debian Security Advisory DSA 884-1 (horde3)
The remote host is missing an update to horde3 announced via advisory DSA 884-1. Mike O'Connor discovered that the default installation of Horde3 on Debian includes an administrator account without a password. Already configured installations will not be altered by this update. The old stable...
Debian Security Advisory DSA 102-2 (at)
The remote host is missing an update to at announced via advisory DSA 102-2. OpenVAS Vulnerability Test $Id: deb1022.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 102-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 936-1 (libextractor)
The remote host is missing an update to libextractor announced via advisory DSA 936-1. infamous41md and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, which is also present in libextractor, a library to extract arbitrary meta-data from...
Debian Security Advisory DSA 1049-1 (ethereal)
The remote host is missing an update to ethereal announced via advisory DSA 1049-1. Gerald Combs reported several vulnerabilities in ethereal, a popular network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-1932 The OID printing...
Debian Security Advisory DSA 986-1 (gnutls11)
The remote host is missing an update to gnutls11 announced via advisory DSA 986-1. Evgeny Legerov discovered several out-of-bounds memory accesses in the DER decoding component component of the Tiny ASN.1 Library, which is also present and used in GnuTLS, the GNU implementation for Transport Laye...
Debian Security Advisory DSA 868-1 (mozilla-thunderbird)
The remote host is missing an update to mozilla-thunderbird announced via advisory DSA 868-1. Several security-related problems have been discovered in Mozilla and derived programs. Some of the problems don't exactly apply to Mozilla Thunderbird, even though the code is present. In order to keep...
Debian Security Advisory DSA 219-1 (dhcpcd)
The remote host is missing an update to dhcpcd announced via advisory DSA 219-1. OpenVAS Vulnerability Test $Id: deb2191.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 219-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 914-1 (horde2)
The remote host is missing an update to horde2 announced via advisory DSA 914-1. A vulnerability has been discovered in horde2, a web application suite, that allows attackers to insert arbitrary script code into the error web page. The old stable distribution woody does not contain horde2 package...