CA20110420-02: Security Notice for CA Output Management Web Viewer

CA20110420-02: Security Notice for CA Output Management Web Viewer Issued: April 20, 2011 CA Technologies support is alerting customers to security risks associated with CA Output Management Web Viewer. Two vulnerabilities exist that can allow a remote attacker to execute arbitrary code. CA...

Emergency Adobe Flash Player patch coming today !

Emergency Adobe Flash Player patch coming today ! Less than a week after warning that hackers were embedding malicious Flash Player files .swf into Microsoft Word documents to launch targeted malware attacks, Adobe plans to release an emergency Flash Player patch today to fix the underlying...

Microsoft IE Developer Tools WMITools and Windows Messenger ActiveX Control Vulnerability (2508272)

This host is missing a critical security update according to Microsoft Bulletin MS11-027. OpenVAS Vulnerability Test $Id: secpodms11-027.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft IE Developer Tools WMITools and Windows Messenger ActiveX Control Vulnerability 2508272 Authors: Veerendra G...

VMware Workstation 'vmrun' Library Path Privilege Escalation Vulnerability (Linux)

The host is installed with VMWare Workstation local privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbvmwareworkstationlocprevesclvulnlin.nasl 7044 2017-09-01 11:50:59Z teissa $ VMware Workstation 'vmrun' Library Path Privilege Escalation Vulnerability Linux Authors: Antu Sana...

TutorialMS v1.4 (show) Remote SQL Injection Vulnerability

Summary TutorialMS is a free content management system, developed specifically for tutorial pages. It is written in PHP and uses MySQL as a database. TutorialMS offers all the usual features you need to build quick and easy your own tutorial page, without great programming knowledge. Description...

Ipswitch IMail Server STARTTLS Plaintext Command Injection Vulnerability

The host is running Ipswitch IMail Server and is prone to plaintext command injection vulnerability. OpenVAS Vulnerability Test $Id: secpodipswitchimailserverstarttlscmdinjvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ Ipswitch IMail Server STARTTLS Plaintext Command Injection Vulnerability Authors...

Microsoft Windows Media Player DVR-MS File Code Execution

Added: 03/14/2011 CVE: CVE-2011-0042 BID: 46680 OSVDB: 71016 Background Windows Media Player is an audio and video media player for Windows platforms. Problem A file parsing error in Windows Media Player allows command execution when a user opens a specially crafted Digital Video Recording DVR-MS...

Moinmoin Cross Site Scripting

Hi, I reported the xss in moinmoin which is made possible via the RST parser / mark-up. Here is a demonstration / proof of concept of abusing the refuri via a javascript link. !rst "NotMe " , "MORELOL" Information about CVE-2011-1058 can also be found at...

FreeBSD Ports: openoffice.org

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

HP Data Protector Client agent EXEC_SETUP code execution

Added: 03/03/2011 CVE: CVE-2011-0922 BID: 46234 OSVDB: 72525 Background HP OpenView Storage Data Protector is a backup solution for enterprise and distributed environments. Problem The backup agent provided by the Data Protector Backup Client Service may be instructed to execute a setup file from...

Microsoft Windows Fax Cover Page Editor Double Free Memory Corruption Vulnerability

Added: 02/14/2011 CVE: CVE-2010-4701 BID: 45942 Background The Microsoft Windows Fax Service allows a Windows system to act as a fax server. One of the tools within the Windows Fax Service suite is the Fax Cover Page Editor fxscover.exe, which allows users to create their own customized cover...

[security bulletin] HPSBMA02629 SSRT100381 rev.1 - HP Power Manager (HPPM) Running on Linux and Windows, Cross Site Request Forgery (CSRF)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02711131 Version: 1 HPSBMA02629 SSRT100381 rev.1 - HP Power Manager HPPM Running on Linux and Windows, Cross Site Request Forgery CSRF NOTICE: The information in this Security Bulletin should be...

Wireshark ENTTEC DMX Data RLE Buffer Overflow Vulnerability - Windows

Wireshark is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...

Microsoft Windows Fax Cover Page Editor BOF Vulnerabilities

Fax Cover Page Editor is prone to multiple buffer overflow vulnerabilities. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.902408. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrig...

IBM Tivoli Directory Server DIGEST-MD5 Denial of Service Vulnerability

IBM Tivoli Directory Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BlackBerry Enterprise Server / Attachment Service PDF Distiller Buffer Overflow (KB25382)

The version of BlackBerry Enterprise Server installed on the remote host is reportedly affected by a buffer overflow vulnerability in the PDF distiller component of the BlackBerry Attachment Service. By sending a specially crafted PDF file and having it opened on a BlackBerry smartphone, an...

SiteEngine 'module' SQL Injection Vulnerability

SiteEngine is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Windows

RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Secunia Research: Microsoft Word LFO Parsing Double-Free Vulnerability

====================================================================== Secunia Research 23/12/2010 - Microsoft Word LFO Parsing Double-Free Vulnerability - ====================================================================== Table of Contents Affected...

Microsoft Internet Explorer CSS Import Use-After-Free Code Execution

Added: 12/22/2010 CVE: CVE-2010-3971 BID: 45246 OSVDB: 69796 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Cascading Style Sheets CSS is a simple mechanism for adding style to web documents. Problem Microsoft Internet Explorer is...