PithCMS 'lang' Parameter Local File Include Vulnerability

PithCMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the...

PithCMS <= 0.9.5 LFI Vulnerability - Active Check

PithCMS is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

SolarWinds TFTP Server 10.4.0.13 Write Request DoS Vulnerability - Active Check

SolarWinds TFTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ZNC < 0.092 DoS Vulnerability

ZNC is prone to a remote denial-of-service vulnerability caused by a NULL-pointer dereference. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CUPS < 1.4.4 Multiple DoS and Privilege Escalation Vulnerabilities

CUPS Common UNIX Printing System service is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PHP 'SplObjectStorage' Unserializer Arbitrary Code Execution Vulnerability

PHP is prone to a vulnerability that an attacker could exploit to execute arbitrary code with the privileges of the user running the affected application. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Cherokee URI Directory Traversal Vulnerability and Information Disclosure Vulnerability

Cherokee is prone to a directory traversal vulnerability and an information- disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Perl Safe Module 'reval()' and 'rdo()' Restriction-Bypass Vulnerabilities

The Perl Safe module is prone to multiple restriction-bypass vulnerabilities. Successful exploits could allow an attacker to execute arbitrary Perl code outside of the restricted root. Versions prior to Safe 2.27 are vulnerable. OpenVAS Vulnerability Test $Id: gbperlsafe40305.nasl 5323 2017-02-17...

Perl Safe Module 'reval()' and 'rdo()' Restriction-Bypass Vulnerabilities

The Perl Safe module is prone to multiple restriction-bypass vulnerabilities. Successful exploits could allow an attacker to execute arbitrary Perl code outside of the restricted root. Versions prior to Safe 2.25 are vulnerable. OpenVAS Vulnerability Test $Id: gbperlsafe40302.nasl 5323 2017-02-17...

XnView 1.97.4 - .MBM File Remote Heap Buffer Overflow

XnView 1.97.4 - .MBM File Remote Heap Buffer Overflow source: https://www.securityfocus.com/bid/40852/info XnView is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this iss...

nginx <= 0.8.36 Remote Source Code Disclosure and DoS Vulnerabilities

nginx is prone to remote source code disclosure and denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Plesk Server Administrator (PSA) LFI Vulnerability - Active Check

Plesk Server Administrator PSA is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

OpenSSL Cryptographic Message Syntax Memory Corruption Vulnerability

OpenSSL is prone to a remote memory-corruption vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...

Orbit Downloader metalink 'name' Directory Traversal Vulnerability

Orbit Downloader is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wing FTP Server 'admin_loginok.html' HTML Injection Vulnerability

Wing FTP Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie- based authentication credentials an...

Wing FTP Server <= 3.5.0 'admin_loginok.html' HTML Injection Vulnerability

Wing FTP Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Exim < 4.72 RC2 Multiple Vulnerabilities

Exim is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:exim:exim"; ifdescription...

Joomla! Component com_sar_news - 'id' SQL Injection

source: https://www.securityfocus.com/bid/40501/info The 'comsarnews' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

osCommerce Online Merchant 'file_manager.php' Remote Arbitrary File Upload Vulnerability

Online Merchant module for osCommerce is prone to a remote arbitrary-file- upload vulnerability because it fails to sufficiently sanitize user- supplied input. Attackers can exploit this issue to upload arbitrary code and run it in the context of the webserver process. This may facilitate...

nginx Space String Remote Source Code Disclosure Vulnerability

nginx is prone to a remote source code-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process, which may aid in further attacks. This issue affects nginx...