1545 matches found
Secunia Flags 'Highly Critical' Safari Zero Day Flaw
A zero-day vulnerability in Apple’s Safari browser could expose millions of Windows users to drive-by download malware attacks. The flaw is currently unpatched. According to an alert from Secunia, the issue is rated “highly critical” because of the risk of remote code execution attacks that can...
Novell ZENworks Configuration Management UploadServlet Remote Code Execution
Added: 05/10/2010 BID: 39114 OSVDB: 63412 Background Novell ZENworks Configuration Management is an IT desktop computer management suite that provides the ability to install, configure and administer desktop computers from a centralized location. The product is based on a client/server...
3Com TFTP Service (3CTftpSvc) - 'Mode' Remote Buffer Overflow (Metasploit)
$Id: threectftpsvclongmode.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
openUrgence Vaccin Multiple Remote File Include Vulnerabilities
openUrgence Vaccin is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Secunia Research: Internet Download Manager FTP Buffer Overflow Vulnerability
====================================================================== Secunia Research 30/04/2010 - Internet Download Manager FTP Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...
Google Chrome < 4.1.249.1064 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 4.1.249.1064. Such versions are reportedly affected by multiple vulnerabilities : - A cross-origin bypass in Google URL GURL. Issue 40445 - An HTML5 media handling issue could lead to memory corruption. Issue 40487 - A font...
FreeBSD : emacs -- movemail symlink race condition (5253)
The following package needs to be updated: emacs %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the VuXML entry has been cancelled. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques...
Secunia Research: imlib2 "IMAGE_DIMENSIONS_OK()" Logic Error
====================================================================== Secunia Research 21/04/2010 - imlib2 "IMAGEDIMENSIONSOK" Logic Error - ====================================================================== Table of Contents Affected...
Secunia Research: e107 Content Management Plugin Script Insertion Vulnerability
====================================================================== Secunia Research 19/04/2010 - e107 Content Management Plugin Script Insertion Vulnerability - ====================================================================== Table of Contents Affected...
Java Runtime Environment Soundbank Resource Name Stack Buffer Overflow
Added: 04/22/2010 CVE: CVE-2010-0839 BID: 39070 OSVDB: 63494 Background The Java Runtime Environment JRE is part of the Java Development Kit JDK, a set of programming tools for developing Java applications. The JRE Java programming class library contains the Java Sound Application Interface API t...
FreeBSD : e107 -- code execution and XSS vulnerabilities (a4746a86-4c89-11df-83fb-0015587e2cc1)
Secunia Research reported two vulnerabilities in e107 : The first problem affects installations that have the Content Manager plugin enabled. This plugin does not sanitize the 'contentheading' parameter correctly and is therefore vulnerable to a cross site scripting attack. The second vulnerabili...
Secunia Research: Visualization Library DAT File Parsing Vulnerabilities
====================================================================== Secunia Research 14/04/2010 - Visualization Library DAT File Parsing Vulnerabilities - ====================================================================== Table of Contents Affected...
Secunia Research: e107 Avatar/Photograph Image File Upload Vulnerability
====================================================================== Secunia Research 19/04/2010 - e107 Avatar/Photograph Image File Upload Vulnerability - ====================================================================== Table of Contents Affected...
e107 -- code execution and XSS vulnerabilities
Secunia Research reported two vulnerabilities in e107: The first problem affects installations that have the Content Manager plugin enabled. This plugin does not sanitize the "contentheading" parameter correctly and is therefore vulnerable to a cross site scripting attack. The second vulnerabilit...
Microsoft Windows Kernel Could Allow Elevation of Privilege (979683)
This host is missing an important security update according to Microsoft Bulletin MS10-021. OpenVAS Vulnerability Test $Id: secpodms10-021.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows Kernel Could Allow Elevation of Privilege 979683 Authors: Veerendra G Updated By: Madhuri D on...
Nagios statuswml.cgi Command Injection
Added: 04/13/2010 CVE: CVE-2009-2288 BID: 35464 OSVDB: 55281 Background Nagios is a network host and service monitoring and management system. Problem The Nagios statuswml.cgi script passes unsanitized data to the ping and traceroute commands, resulting in shell command execution via...
Nagios statuswml.cgi Command Injection
Added: 04/13/2010 CVE: CVE-2009-2288 BID: 35464 OSVDB: 55281 Background Nagios is a network host and service monitoring and management system. Problem The Nagios statuswml.cgi script passes unsanitized data to the ping and traceroute commands, resulting in shell command execution via...
Nagios statuswml.cgi Command Injection
Added: 04/13/2010 CVE: CVE-2009-2288 BID: 35464 OSVDB: 55281 Background Nagios is a network host and service monitoring and management system. Problem The Nagios statuswml.cgi script passes unsanitized data to the ping and traceroute commands, resulting in shell command execution via...
Secunia Research: Pulse CMS Cross-Site Request Forgery
====================================================================== Secunia Research 08/04/2010 - Pulse CMS Cross-Site Request Forgery - ====================================================================== Table of Contents Affected Software......................................................
Secunia Research: VMWare VMnc Codec HexTile Encoding Two Integer Truncation Vulnerabilities
====================================================================== Secunia Research 09/04/2010 - VMWare VMnc Codec HexTile Encoding - - Two Integer Truncation Vulnerabilities - ====================================================================== Table of Contents Affected...