CVE-2016-2211

MODE C: The connected Nessus/OpenVAS entries describe CVE-2016-2211 as part of a set of vulnerabilities in Symantec products (notably the Decomposer/UNPACK engine and related parsers) affecting multiple versions of Symantec Protection for SharePoint Servers, Protection Engine, Web Gateway, and re...

Symantec Endpoint Protection Multiple Security Issues

SUMMARY Symantec Endpoint Protection SEP was susceptible to a number of security vulnerabilities potentially resulting in a user being able to leverage elevated privilege or access to unauthorized files on the management console. Additionally, a race condition in the device control of a SEP clien...

Symantec Endpoint Protection Multiple Security Issues

SUMMARY Symantec Endpoint Protection SEP was susceptible to a number of security findings that could potentially result in an authorized but less privileged user gaining elevated access to the Management Console. SEP Client security mitigations can potentially be bypassed allowing arbitrary code...

jelmoli-shop.ch XSS vulnerability

Vulnerable URL: http://www.jelmoli-shop.ch/is-bin/INTERSHOP.enfinity/WFS/Jelmoli-JelmoliCh-Site/deCH/-/CHF/ViewProductSearch-Search;sid=eFaqgr3z2-Ilz9EjiL6S9MwpqyCjfanMlDYS9Wn642yjfanN7dV1HgAcCYQ==?query=" Details: Description| Value ---|--- Patched:| Yes, at 20.10.2015 Latest check for patch:|...

Mozilla Firefox Multiple Vulnerabilities (Sep 2015) - Windows

Mozilla Firefox is prone to vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox"; ifdescription...

Mozilla Firefox ESR Multiple Vulnerabilities (Sep 2015) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

asicsamerica.com XSS vulnerability

Vulnerable URL: http://www.asicsamerica.com/search/ Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:56 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20955 Google Pagerank| 6 VIP website status:| Yes Check...

bio-aude.com XSS vulnerability

Vulnerable URL: http://www.bio-aude.com/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4095065 Google Pagerank| 0 VIP website status:| No Check bio-aude.com SSL connection:| Grade...

superskoda.com XSS vulnerability

Vulnerable URL: http://www.superskoda.com/dk/scripts/zakaznik.php?FormReg=x" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 214400 Google Pagerank| 3 VIP website status:| No Check...

CVE-2014-9227

CVE-2014-9227 affects Symantec Endpoint Protection Manager (SEPM) prior to 12.1 RU6. The vulnerability is a DLL loading/pre-loading weakness that allows a local attacker to gain elevated privileges by placing a malicious DLL in a directory or on a network share and enticing the user to load it. O...

CVE-2014-9229

Symantec Endpoint Protection Manager (SEPM)

CVE-2014-9228

Summary (CVE-2014-9228) : In Symantec Endpoint Protection Manager, the sysplant.sys component (Manager) before 12.1.6 can trigger a deadlock when handling specific calls, leading to a DoS by blocking system shutdown. This is described in the NVD entry for CVE-2014-9228 and corroborated by related...

cias.gov.ro XSS vulnerability

Vulnerable URL: http://www.cias.gov.ro/index.php/en/component/search/?searchword=999"=all=192 Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Symantec Endpoint Protection Manager and Client Issues

SUMMARY Symantec Endpoint Protection SEP 12.1.6 addresses vulnerabilities that were found in prior releases. These include an authorized but less-privileged administrator able to attempt a blind SQL injection in the SEP Manager SEPM console through PHP prepared statements; a local Denial of Servi...

Mac OS X IOKit Keyboard Driver Root Privilege Escalation

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'Mac OS X IOKit Keyboard Driver Root Privilege Escalation', 'Description' = %q A heap overflow in...

知道key的情况下对ucserver进行注射

简要描述： 因为帮finger解决问题，无意中看到的漏洞。 怎么拿到key要问finger。 详细说明： 在/ucserver/control/feed.php内有一段代码： function onadd $this-load'misc'; $appid = intval$this-input'appid'; $icon = $this-input'icon'; $uid = intval$this-input'uid'; $username = $this-input'username'; $bodydata =...

HP Network Node Manager I PMD Buffer Overflow

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::Udp def initializeinfo =...

Solaris 10 (x86) : 126547-06

SunOS 5.10x86: bash patch. Date this patch was last updated by Sun : Sep/26/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Apple Mac OS X Multiple Vulnerabilities -01 (Sep 2014)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Multiple Vulnerabilities - 01 (Sep 2014) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...