478 matches found
PT-2016-7897 · Mysql Server +6 · Mysql Server +6
Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.53 and earlier MySQL Server versions 5.6.34 and earlier MySQL Server versions 5.7.16 and earlier Description: The issue allows a high privileged attacker to compromise MySQL Server, resulting in the unauthorized...
JVN#07676450: Canary Labs Trend Web Server vulnerable to buffer overflow
Trend Web Server provided by Canary Labs is a solution used for data visualization. Trend Web Server contains a buffer overflow CWE-119 vulnerability. Impact A remote attacker may cause a denial-of-service DoS or execute arbitrary code when sending a specially crafted TCP packet. Solution Stop...
PT-2019-3246 · Oracle +9 · Mysql Server +8
Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.6.44 and prior MySQL Server versions 5.7.26 and prior MySQL Server versions 8.0.16 and prior Description: A vulnerability in the MySQL Server component of Oracle MySQL, specifically in the Server: XML subcomponent,...
mysql: unspecified vulnerability related to Server:GIS (CPU July 2015)
Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to GIS...
Nikto2 - Web Server Scanner
Nikto is an Open Source GPL web server scanner which performs comprehensive tests against web servers for multiple items, including over 6700 potentially dangerous files/programs, checks for outdated versions of over 1250 servers, and version specific problems on over 270 servers. It also checks...
VMware ESX 2.x Multiple Information Disclosure Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/19249/info VMware ESX is prone to multiple information-disclosure vulnerabilities. These issues are due to a design error in the application. The following issues were reported: 1. An information disclosure vulnerability...
New OpenSSL MITM Flaw Affects All Clients, Some Server Versions
There is a new, remotely exploitable vulnerability in OpenSSL that could enable an attacker to intercept and decrypt traffic between vulnerable clients and servers. The flaw affects all versions of the OpenSSL client and versions 1.0.1 and 1.0.2-beta1 of the server software. The new vulnerability...
mysql: unspecified vulnerability related to Replication DoS (CPU Jan 2014)
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.34 and earlier, and 5.6.14 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Replication...
[SpiderFoot v2.0] The Open Source Footprinting tool
SpiderFoot is a free, open-source footprinting tool, enabling you to perform various scans against a given domain name in order to obtain information such as sub-domains, e-mail addresses, owned netblocks, web server versions and so on. The main objective of SpiderFoot is to automate the...
mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality and availability
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0113...
httpd: mod_proxy_ajp worker moved to error state when timeout exceeded
The modproxyajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long request-processing time, which allows remote attackers to cause a denial of service worker consumption via an expensive request...
IBM WebSphere Application Server WS-Security XML Encryption Weakness Vulnerability
The host is running IBM WebSphere Application Server and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbibmwasxmlencryptioninfodisclosurevuln.nasl 7006 2017-08-25 11:51:20Z teissa $ IBM WebSphere Application Server WS-Security XML Encryption Weakness...
Zenoss Server Multiple Vulnerabilities
The host is running Zenoss Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbzenossservmultvuln.nasl 5388 2017-02-21 15:13:30Z teissa $ Zenoss Server Multiple Vulnerabilities Authors: Rachana Shetty Copyright: Copyright c 2010 SecPod, http://www.secpod.com This...
Symantec Altiris NS Key Unauthorized Access Vulnerability
This host is installed with Symantec Altiris Notification Server and is prone to unauthorized access vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecaltirisnsunauthaccessvuln.nasl 6000 2017-04-21 11:07:29Z cfi $ Symantec Altiris NS Key Unauthorized Access Vulnerability Authors: Rachana...
PT-2005-1609
Name of the Vulnerable Software and Affected Versions Exchange Server versions 2000 through 2003 Description A heap-based buffer overflow issue exists in the SvrAppendReceivedChunk function in xlsasink.dll, which is part of the SMTP service. This allows remote attackers to execute arbitrary code ...
Half-Life StatsMe 2.6.x Plugin - MakeStats Format String
// source: https://www.securityfocus.com/bid/6578/info // The Half-Life StatsMe plug-in is prone to an exploitable format string vulnerability. This issue may be exploited by an attacker who can authenticate with the rcon-password of the Half-Life server to execute arbitrary code in the context o...
CVE-2002-1064
Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid usernames, which allows remote attackers to identify valid users on the server...
