708 matches found
CVE-2007-4910
Unspecified vulnerability in netInvoicing before 2.7.3 has unknown impact and attack vectors, related to "security check soap"...
AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit
Exploit for unknown platform in category web applications =============================================================== AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit =============================================================== !/usr/bin/php -q -d shortopentag=on ? echo "...
Solaris 9 (sparc) : 125713-02
NetConnect 3.2.3: srsexec patch for Solaris 8/9/10. Date this patch was last updated by Sun : Oct/22/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'...
Solaris 5.9 (x86) : 117884-02
Application Server 7.1x86: Java Mail Runtime Patch. Date this patch was last updated by Sun : Feb/18/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. i...
CVE-2006-4550
Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files via .. dot dot sequences in the format parameter with a leading ".", which bypasses a security check...
CVE-2006-4550
Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files via .. dot dot sequences in the format parameter with a leading ".", which bypasses a security check...
Security check of js_ValueToFunctionObject() can be circumvented — Mozilla
The security check in jsValueToFunctionObject can be bypassed by clever use of setTimeout and the new Firefox 1.5 array method ForEach. shutdown demonstrated how to leverage this into a privilege escalation vulnerability that would allow the installation of malware...
IMail < 7.06 Account Hijack Vulnerability
The remote host is running IMail web interface. In this version, the session is maintained via the URL. It will be disclosed in the Referer field if you receive an email with external links e.g. images SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a...
Login configurations
Provide the username/password for the common services: HTTP, FTP, NNTP, POP2, POP3, IMAP and SMB NetBios. SPDX-FileCopyrightText: 2005 Georges Dagousset Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
Script injection from Firefox sidebar panel using data: — Mozilla
Sites can use the search target to open links in the Firefox sidebar. A missing security check allows the sidebar to inject data: urls containing scripts into any page open in the browser. This could be used to steal cookies, passwords or other sensitive data...
HP-UX Security Patch : PHNE_28810
sendmail1m 8.9.3 patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid16574; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...
HP-UX Security patch : PHCO_27560
The remote host is missing HP-UX Security Patch number PHCO27560 . Sec. Vulnerability in ied1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16785; scriptversion"1.7"; name"english...
HP-UX PHNE_16091 : s700_800 11.00 r-commands cumulative patch
s700800 11.00 r-commands cumulative patch : Various remote network commands have security defects. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE16091. The text itself is copyright C Hewlett-Packard...
HP-UX PHNE_14479 : s700_800 11.00 ftpd(1M) and ftp(1) patch
s700800 11.00 ftpd1M and ftp1 patch : ftp client interprets server provided filenames which can cause commands to be run on the client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE14479. The text itself...
HP-UX PHCO_22665 : HPSBUX0012-135 Sec. Vulnerability in kermit(1) (rev.2)
s700800 11.00 kermit1 patch : Kermit communications software contains a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO22665. The text itself is copyright C Hewlett-Packard Development...
HP-UX PHNE_17190 : s700_800 11.00 sendmail(1m) 8.8.6 patch
s700800 11.00 sendmail1m 8.8.6 patch : sendmail release 8.8.6 causes Denial of Service failures. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE17190. The text itself is copyright C Hewlett-Packard...
HP-UX PHSS_21663 : HPSBUX0001-108 Sec. Vulnerability with Aserver (rev. 04)
s700800 11.00 AudioSubsystem June 2000 Periodic Patch : /opt/audio/bin/Aserver can be used to gain root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS21663. The text itself is copyright C...
HP-UX PHNE_16470 : s700_800 11.0 ONC cumulative patch
s700800 11.0 ONC cumulative patch : rpc.pcnfsd has an error in its use of the spool directory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE16470. The text itself is copyright C Hewlett-Packard Developme...
HP-UX PHCO_22096 : HPSBUX0008-118 Sec. Vulnerability in newgrp(1) (rev.1)
s700800 11.00 cumulative newgrp1 patch : Security vulnerability in the newgrp1 command. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO22096. The text itself is copyright C Hewlett-Packard Development...
HP-UX PHSS_26478 : HPSBUX0203-189 Sec, Vulnerability in VVOS Web proxy (rev.1)
s700800 11.04 HP Praesidium Webproxy 1.0 server update : Security Vulnerability using HP Praesidium Webproxy 1.0. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS26478. The text itself is copyright C...