Mozilla Seamonkey Multiple Vulnerabilities Nov-09 (Windows)

This host is installed with Mozilla Seamonkey browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbseamonkeymultvulnnov09win.nasl 4869 2016-12-29 11:01:45Z teissa $ Mozilla Seamonkey Multiple Vulnerabilities Nov-09 Windows Authors: Sharath S Copyright: Copyright c...

Mozilla Thunderbird WYSIWIG Engine Filtering IFRAME JavaScript Execution (CVE-2006-0884)

Mozilla Thunderbird is an email client application often seen as an alternative to the mainstream Microsoft email clients. Thunderbird supports various email delivering protocols such as SMTP, IMAP and POP3. The program is also capable of reading and composing HTML formatted email messages. A...

IBM WebSphere Application Server < 6.1.0.27 Multiple Vulnerabilities

Binary data 5183.prm...

CVE-2008-7002

PHP 5.2.5 does not enforce a openbasedir and b safemodeexecdir restrictions for certain functions, which might allow local users to bypass intended access restrictions and call programs outside of the intended directory via the 1 exec, 2 system, 3 shellexec, 4 passthru, or 5 popen functions,...

Pivot <= 1.40.7 XSS Vulnerability

Pivot is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pivot:pivot";...

Opera PDF Javascript Security Bypass Vulnerability (Linux)

The host is installed with Opera Web Browser and is prone to PDF Javascript Security Bypass Vulnerability. OpenVAS Vulnerability Test $Id: secpodoperapdfjsrestbypassvulnlin.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera PDF Javascript Security Bypass Vulnerability Linux Authors: Antu Sanadi...

Opera < 10 PDF JavaScript Security Bypass Vulnerability - Linux

Opera Web Browser is prone to a PDF JavaScript security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome PDF Javascript Security Bypass Vulnerability

The host is installed with Google Chrome and is prone to PDF Javascript Security Bypass Vulnerability. OpenVAS Vulnerability Test $Id: secpodgooglechromepdfjsrestbypassvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Google Chrome PDF Javascript Security Bypass Vulnerability Authors: Sujit Ghosal...

CVE-2008-5625

PHP 5 before 5.2.7 does not enforce the errorlog safemode restrictions when safemode is enabled through a phpadminflag setting in httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "phpvalue errorlog" entry in a .htaccess file...

VMCI/HGFS VmWare Code Execution Vulnerability (VMSA-2008-0008) - Linux

VMWare products are prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

php -- input validation error in safe_mode

According to Maksymilian Arciemowicz research, it is possible to bypass security restrictions of safemode in various functions via directory traversal vulnerability. The attacker can use this attack to gain access to sensitive information. Functions utilizing expandfilepath may be affected. It...

Oracle Application Server Portal 10g - Authentication Bypass

source: https://www.securityfocus.com/bid/29119/info Oracle Application Server Portal is prone to a authentication-bypass vulnerability because the application fails to properly restrict access to certain resources. An attacker can exploit this vulnerability to bypass certain security restriction...

Microsoft Internet Explorer 文件上传处理漏洞

BUGTRAQ ID: 25836 Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer在处理文件上传时存在漏洞，恶意网站可能利用此漏洞窃取用户系统上的文件。 通常由于安全限制JavaScript是不允许设置焦点或在文件上传字段中设置值，以防从用户机器上传任意文件。浏览器厂商在表单的文件字段中实施这个限制，计算机用户只有选择了文件才能上传。但如果用户使用IE访问了恶意网页的话，就可能窃取用户的焦点，绕过浏览器安全限制，在用户不知情的情况下向远端服务器上传任意文件 Microsoft Internet Explorer 6.0 SP1...

Apple QuickTime for Java security bypass vulnerability

Overview Apple QuickTime for Java fails to properly restrict the instantiation and manipulation of Java objects. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Apple QuickTime includes the ability to integrate QuickTim...

Allow embedding multimedia content located on remote servers

Re: CSP-8387 Currently, when embedding multimedia content on Confluence you are restricted to embedding files located on the Confluence server. The page http://confluence.atlassian.com/display/CONF20/Embedding+Multimedia+Content singles out "security reasons" as the reason for this limitation. In...

Liens_Dynamiques 2.1 - AdminLien.php Security Restriction Bypass

LiensDynamiques 2.1 - AdminLien.php Security Restriction Bypass source: https://www.securityfocus.com/bid/22068/info The 'liensdynamiques' program is prone to a vulnerability that lets attackers bypass security restrictions. An attacker can exploit this issue to gain unauthorized access to the...

Liens_Dynamiques 2.1 - 'AdminLien.php' Security Restriction Bypass

source: https://www.securityfocus.com/bid/22068/info The 'liensdynamiques' program is prone to a vulnerability that lets attackers bypass security restrictions. An attacker can exploit this issue to gain unauthorized access to the administrative functions of the vulnerable application. Other...

OpenBSD 3.9/4.0 - 'ld.so' Local Environment Variable Clearing

/ source: https://www.securityfocus.com/bid/21188/info OpenBSD is prone to a local vulnerability that may allow attackers to pass malicious environment variables to applications, bypassing expected security restrictions. Attackers may be able to exploit this issue to execute arbitrary code with...

OpenLDAP slapd &quot;selfwrite&quot;绕过安全限制漏洞

OpenLDAP是一款开放源代码的轻量级目录访问协议LDAP实现。 OpenLDAP在处理访问控制列表时存在错误，远程攻击者可能利用此漏洞绕过安全限制。 以下类型的ACL： access to dn.subtree="ou=groups,dc=example,dc=com" attr=member by selfwrite 应该仅允许用户对目标属性添加/删除自己的DN，但拥有selfwrite访问权限的用户确可以修改属性的任意值，允许攻击者绕过安全限制，获得非授权访问。 OpenLDAP OpenLDAP 2.3/HEAD 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载...

TR Forum SQL注入及认证绕过漏洞

Tr Forum是一款法语的论坛程序。 Tr Forum中的多个漏洞允许恶意用户执行SQL注入攻击和绕过某些安全限制。 1 admin/insertadmin.php文件中缺少认证，允许创建拥有有限权限的管理员帐号。 2 没有正确过滤对admin/editer.php文件中id2参数的输入，允许攻击者通过注入任意SQL代码操控SQL查询。成功攻击要求某些管理权限。 3 在更新配置文件时缺少访问验证，允许通过更改id参数修改其他用户的设置。 组合使用1和2所述漏洞允许以完全权限访问管理部分。 Tr Forum Tr Forum 2.0 我们建议使用此软件的用户随时关注厂商的主页以获取最新版...