1166 matches found
ArubaOS 6.3.1.11 / 6.4.2.1 SSH Authentication Bypass
The version of ArubaOS has an unspecified vulnerability that allows a remote attacker to obtain limited administrative privileges without valid credentials. The vulnerability affects access over SSH. However, access through WebUI and the serial port is not affected, and the vulnerability does not...
Multiple Vulnerabilities in Draytek Vigor 2130
VIGOR 2130 firmware 1.5.4.9 1.1. Command injection in traceroute functionality A user can execute arbitrary commands RCE on the router by abusing the traceroute functionality. The interface expects an IP address as input, but does not validate the input. Just provide the input: ; id The above...
CVE-2014-5684
The CVE-2014-5684 entry concerns the Runtastic Running & Fitness Android app (com.runtastic.android) version 5.1.2, which does not verify X.509 certificates when establishing SSL connections. This behavior enables man-in-the-middle attackers to spoof servers and obtain sensitive data via a crafte...
GNU/Gallery <= 1.1.1.0 (admin.php) Local File Inclusion Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ GNU/Gallery = 1.1.1.0 admin.php Local File Inclusion Vulnerability +==-- --==+================================================================================+==--...
OpenBSD 3.3 Semget() Integer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/8464/info A vulnerability has been discovered in the OpenBSD semget system call. The problem occurs due to insufficient sanity checks before allocating memory using the user-supplied nsems value as an argument. As a resul...
PHP Running Management 1.0.2 'index.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27268/info PHP Running Management is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
OpenBSD 3.3 Semget() Integer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/8464/info A vulnerability has been discovered in the OpenBSD semget system call. The problem occurs due to insufficient sanity checks before allocating memory using the user-supplied nsems value as an argument. As a resul...
FTLS GuestBook 1.1 Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6686/info Guestbook does not adequately filter HTML tags from various fields. This may enable an attacker to inject arbitrary script code into pages that are generated by the guestbook. The attacker's script code may be...
CVE-2014-0240
The modwsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors related to the number of running processes...
CVE-2014-0240
The modwsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors related to the number of running processes...
PT-2014-4538 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: The issue allows remote authenticated users to read files by sending a crafted URL to the HTTP server, potentially accessing sensitive information suc...
[SECURITY] Fedora 19 Update: xen-4.2.3-15.fc19
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] [DSA 2850-1] libyaml security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2850-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 31, 2014 http://www.debian.org/security/faq -...
Important: Red Hat Security Advisory: openjpeg security update
Updated openjpeg packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...
[SterJo NetStalker v.1.0] Security software able to detect all authorized and unauthorized connections
SterJo NetStalker is innovative and FREE security software able to detect all authorized and unauthorized connections to your computer and send you alert for each new connection. The software is based on similar principles as most firewalls work and also could create a custom security policies wi...
PHP file include vulnerability attack and Defense combat-vulnerability warning-the black bar safety net
Summary PHP is a very popular Web development language on the Internet many Web applications are using PHP development. And in the use of PHP development of Web applications, PHP file include vulnerability is a Common Vulnerability. The use of PHP file include vulnerabilities intrusion website is...
Alt-N MDaemon Detection
MDaemon, a multi-protocol email and messaging server, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66633; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Alt-N MDaemon Detection"; scriptsummaryenglish:"Detects...
Mandriva Linux Security Advisory : sudo (MDVSA-2013:054)
Multiple vulnerabilities has been found and corrected in sudo : A flaw exists in the IP network matching code in sudo versions 1.6.9p3 through 1.8.4p4 that may result in the local host being matched even though it is not actually part of the network described by the IP address and associated...
CVE-2012-6118
The Administer tab in Aeolus Conductor allows remote authenticated users to bypass intended quota restrictions by updating the Maximum Running Instances quota user setting...
Conductor: Unprivileged user can change their own Maximum Running Instances quota
The Administer tab in Aeolus Conductor allows remote authenticated users to bypass intended quota restrictions by updating the Maximum Running Instances quota user setting...