CVE-2009-3440

Cross-site scripting XSS vulnerability in Open Source Security Information Management OSSIM before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the option parameter to the default URI aka the main menu...

CVE-2009-2227

creationtimestamp| type| source ---|---|--- 2009-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9002 2009-06-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9031 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16445 2018-05-29...

PhpMesFilms 1.0 (index.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= PhpMesFilms 1.0 index.php id Remote SQL Injection Vulnerability ================================================================= in the name of God Download script :...

Insecure pages can show incorrect security information

When insecure pages load content from secure sites into a frame, they can cause Opera to incorrectly report the insecure site as being secure. The padlock icon will incorrectly be shown, and the security information dialog will state that the connection is secure, but without any certificate...

GLSA-200811-01 : Opera: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200811-01 Opera: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Opera: Opera does not restrict the ability of a framed web page to change the address associated with a different frame CVE-2008-4195. Chri...

OSSIM Server Detection

A OSSIM server is listening on the remote system. Description : The remote system is running an OSSIM server. OSSIM Open Source Security Information Management is a centralized security management information system. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be...

SQL-injection, XSS in OSSIM (Open Source Security Information Management)

Application: OSSIM http://www.ossim.net Version: 0.9.9rc5 Note: it is possible that the problem affects also earlier OSSIM versions Platforms: Linux Bug: SQL injection, Cross Site Scripting Exploitation: remote Date: 21 Feb 2008 Author: Marcin Kopec E-mail: marcindotkopecathotmaildotcom...

OSSIM 0.9.9rc5 (XSS/SQL Injection) Multiple Remote Vulnerabilities

No description provided by source. Application: OSSIM http://www.ossim.net Version: 0.9.9rc5 Note: it is possible that the problem affects also earlier OSSIM versions Platforms: Linux Bug: SQL injection, Cross Site Scripting Exploitation: remote Date: 21 Feb 2008 Author: Marcin Kopec E-mail:...

OSSIM 0.9.9rc5 - Cross-Site Scripting SQL Injection

OSSIM 0.9.9rc5 - Cross-Site Scripting SQL Injection Application: OSSIM http://www.ossim.net Version: 0.9.9rc5 Note: it is possible that the problem affects also earlier OSSIM versions Platforms: Linux Bug: SQL injection, Cross Site Scripting Exploitation: remote Date: 21 Feb 2008 Author: Marcin...

OSSIM 0.9.9rc5 - Cross-Site Scripting / SQL Injection

Application: OSSIM http://www.ossim.net Version: 0.9.9rc5 Note: it is possible that the problem affects also earlier OSSIM versions Platforms: Linux Bug: SQL injection, Cross Site Scripting Exploitation: remote Date: 21 Feb 2008 Author: Marcin Kopec E-mail: marcindotkopecathotmaildotcom...

OSSIM 0.9.9rc5 (XSS/SQL Injection) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== OSSIM 0.9.9rc5 XSS/SQL Injection Multiple Remote Vulnerabilities ================================================================== Application: OSSIM http://www.ossim.net...

OSSIM Server Detection

The remote system is running an ossim-server daemon. OSSIM Open Source Security Information Management is a centralized security management information system, and the ossim-server provides centralized access to the backend database and framework. %NASLMINLEVEL 70300 Script Written By Ferdy...

Nortel IP Phone Flooding Denial of Service

COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: IP Phone Vendor: Nortel Subject: IP Phone Flooding Denial of Service Risk: High Effect: Currently exploitable Author: Daniel Stirnimann daniel.stirnimann at csnc dot ch Date: October, 18th 2007 Introduction: ------------- A malicious user who...

Nortel Networks - Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerabilities

Nortel Networks - Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerabilities source: https://www.securityfocus.com/bid/26120/info Multiple Nortel Networks UNIStim VoIP telephony products are prone to a remote vulnerability that may allow eavesdropping. Attackers can exploit this issue to ope...

Microsoft Windows Vista/2003/XP/2000 file management security issues

Title: Microsoft Windows Vista/2003/XP/2000 file management security issues Author: 3APA3A, http://securityvulns.com/ Vendor: Microsoft and potentially another vendors Products: Microsoft Windows Vista/2003/XP/2000, Microsoft resource kit for Windows 2000 and different utilities. Access Vector:...

eIQnetworks Enterprise Security Analyzer Monitoring Agent Detection

The remote host is running a monitoring agent from eIQnetworks Enterprise Security Analyzer ESA, a security information and event management application. Note that eIQnetworks Enterprise Security Analyzer is also included in third-party products such as Astaro Report Manager, Fortinet...

eIQnetworks Enterprise Security Analyzer License Manager Detection

The remote host is running a license manager for eIQnetworks Enterprise Security Analyzer ESA, a security information and event management application. Note that eIQnetworks Enterprise Security Analyzer is also included in third-party products such as Astaro Report Manager, Fortinet FortiReporter...

eIQnetworks Enterprise Security Analyzer Syslog Server Detection (deprecated)

Plugin has been deprecated as the software is EOL and no longer obtainable %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid22126; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2006-3072

M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via crafted "rule definitions", which produces dangerous Java code during M4 transformation...

CVE-2006-3072

M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via crafted "rule definitions", which produces dangerous Java code during M4 transformation...