Linux Kernel 2.6.x ISO9660 Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20920/info The Linux kernel is prone to a local denial-of-service vulnerability. This issue affects the code that handles the ISO9660 filesystem. An attacker can exploit this issue to crash the affected computer, denying...

CGI Script Center Account Manager 1.0 LITE / PRO Administrative Password Alteration (2)

No description provided by source. source: http://www.securityfocus.com/bid/1604/info Regardless of privilege level, any remote user can modify the administrative password for CGI Script Centers' Account Manager. In order to accomplish this, a user would access the following URL with a POST...

Mandrake 7.0/7.1,RedHat Kon2 0.3.9 fld Input File Overflow

No description provided by source. source: http://www.securityfocus.com/bid/1371/info KON Kanji On Console is a package for displaying Kanji text under Linux and comes with two suid binaries which are vulnerable to buffer overflows. fld, one of the vulnerable programs, accepts options input from ...

Symantec Encryption Desktop for OS X World-Writable Files Insecure File Handling

SUMMARY Symantecs Encryption Desktop for OS X installs some temporary files with world-writable attributes during installation. In a multi-user environment, a malicious user could manipulate these world-writable files to read and write files or create files with another users permissions. AFFECTE...

Yealink VoIP Phones - '/servlet' HTTP Response Splitting

source: https://www.securityfocus.com/bid/68022/info Yealink VoIP Phones are prone to an HTTP-response-splitting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to influence how web content is served, cached, or interpreted. This could...

Foreman Smart-Proxy - Remote Command Injection

source: https://www.securityfocus.com/bid/68117/info Foreman is prone to a remote command-injection vulnerability. Successful exploits will result in the execution of arbitrary commands with the privileges of the user running foreman-proxy. curl -3 -H "Accept:application/json" -k -X POST -d...

WordPress Plugin WP Rss Poster - wp-adminadmin.php SQL Injection

WordPress Plugin WP Rss Poster - wp-adminadmin.php SQL Injection source: https://www.securityfocus.com/bid/68557/info WP Rss Poster plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to...

WordPress Plugin HDW Player - '/wp-admin/admin.php' SQL Injection

source: https://www.securityfocus.com/bid/69105/info The WordPress HDW Player plugin Video Player & Video Gallery is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromi...

WordPress Plugin Tera Charts (tera-charts) - '/charts/zoomabletreemap.php?fn' Directory Traversal

source: https://www.securityfocus.com/bid/68662/info Tera Charts plugin for WordPress is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to obtain potentially sensitive information; other attacks...

WordPress Plugin Booking System (Booking Calendar) - 'booking_form_id' SQL Injection

source: https://www.securityfocus.com/bid/67535/info Search Everything plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

Clipperz Password Manager - backendPHPsrcsetuprpc.php Remote Code Execution

Clipperz Password Manager - backendPHPsrcsetuprpc.php Remote Code Execution source: https://www.securityfocus.com/bid/67498/info Clipperz Password Manager is prone to remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected...

RealPlayer - '.3gp' File Processing Memory Corruption

source: https://www.securityfocus.com/bid/67434/info RealPlayer is prone to a memory-corruption vulnerability. An attacker can leverage this issue to crash the affected application, causing a denial-of-service condition. Due to the nature of this issue, arbitrary code execution may be possible bu...

Intel Indeo - Video Memory Corruption

source: https://www.securityfocus.com/bid/67431/info Intel Indeo Video is prone to a memory-corruption vulnerability. Attackers can exploit this issue to crash the affected application, resulting in a denial-of-service condition. Due to the nature of this issue, arbitrary code execution may be...

VM Turbo Operations Manager 4.5x - Directory Traversal

VM Turbo Operations Manager 4.5x - Directory Traversal Product: VM Turbo Operations Manager Vendor: VM Turbo Vulnerable Versions: 4.5.x earlier Tested Version: 4.0 Advisory Publication: April 11, 2014 Vendor Notification: April 11, 2014 Public Disclosure: May 8, 2014 Vulnerability Type: Directory...

VM Turbo Operations Manager 4.5x - Directory Traversal

Exploit for cgi platform in category web applications Product: VM Turbo Operations Manager Vendor: VM Turbo Vulnerable Versions: 4.5.x earlier Tested Version: 4.0 Advisory Publication: April 11, 2014 Vendor Notification: April 11, 2014 Public Disclosure: May 8, 2014 Vulnerability Type: Directory...

VM Turbo Operations Manager 4.5x - Directory Traversal

Product: VM Turbo Operations Manager Vendor: VM Turbo Vulnerable Versions: 4.5.x earlier Tested Version: 4.0 Advisory Publication: April 11, 2014 Vendor Notification: April 11, 2014 Public Disclosure: May 8, 2014 Vulnerability Type: Directory Traversal Discovered and Provided: Jamal Pecou Securit...

Directory Traversal Vulnerability in VMTurbo Operations Manager 4.5 or earlier

Product: VM Turbo Operations Manager Vendor: VM Turbo Vulnerable Versions: 4.5.x earlier Tested Version: 4.0 Advisory Publication: April 11, 2014 Vendor Notification: April 11, 2014 Public Disclosure: May 8, 2014 Vulnerability Type: Directory Traversal Discovered and Provided: Jamal Pecou Securit...

VideoLAN VLC Media Player 2.1.3 - .wav File Memory Corruption

VideoLAN VLC Media Player 2.1.3 - .wav File Memory Corruption source: https://www.securityfocus.com/bid/67315/info VLC Media Player is prone to a memory-corruption vulnerability. Attackers can exploit this issue to cause a denial-of-service condition. Due to the nature of this issue, arbitrary co...

VM Turbo Operations Manager < 4.6 Directory Traversal Vulnerability - Active Check

Turbo Operations Manager is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ownCloud Multiple Cross Site Scripting Vulnerabilities -02 (May 2014)

ownCloud is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...