731 matches found
CVE-2015-2849
SQL injection vulnerability in main.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices, when https is used, allows remote attackers to execute arbitrary SQL commands via the ppli parameter...
CVE-2015-2849
Summary (CVE-2015-2849) : The ANTlabs InnGate firmware (IG3100, InnGate 3.01 E, 3.10 E, 3.10 M, SG 4, SSG 4) contains a SQL injection vulnerability in the main.ant page. The issue arises from the ppli URL parameter; when using HTTPS, a remote attacker can induce arbitrary SQL commands on the unde...
CVE-2015-2850
The CVE-2015-2850 issue affects ANTlabs InnGate firmware (IG 3100 and InnGate 3.01 E, 3.10 E, 3.10 M, SG 4, SSG 4). The vulnerability is a Cross-Site Scripting (XSS) in the index-login.ant page, exploitable via the msg parameter. Root cause is improper input handling that allows injected web scri...
KLA10510 Multiple vulnerabilities in Cisco IOS
An unspecified vulnerabilities were found in multiple versions of Cisco IOS. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packets or messages. Original advisories -...
qemu: virtio: insufficient validation of num_sg when mapping
The virtqueuemapsg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read...
Linux Kernel 2.6.x SCSI ProcFS Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14790/info The Linux kernel is prone to a denial-of-service vulnerability. The kernel is affected by a memory leak, which eventually can result in a denial of service. A local attacker can exploit this vulnerability by...
qemu: virtio: insufficient validation of num_sg when mapping
The virtqueuemapsg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read...
qemu: virtio: insufficient validation of num_sg when mapping
The virtqueuemapsg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read...
VMSA-2013-0016 : VMware ESXi and ESX unauthorized file access through vCenter Server and ESX
a. VMware ESXi and ESX unauthorized file access through vCenter Server and %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory 2013-0016. The text itself is copyright C VMware Inc...
VMware ESXi security update for third party library (VMSA-2013-0004)
The remote ESXi is missing one or more security related Updates from VMSA-2013-0004. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
PT-2012-1244
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.9 Description The issue is related to the scsi ioctl function in the Linux kernel, which does not properly consider the SCSI device class during authorization of SCSI commands. This allows local users to bypass...
DEBIAN-CVE-2011-4127
The Linux kernel before 3.2.2 does not properly restrict SGIO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to 1 a partition block device or 2 an LVM volume...
VMSA-2011-0012.3 VMware ESXi and ESX updates to third party libraries and ESX Service Console
The remote ESXi is missing one or more security related Updates from VMSA-2011-0012.3. Summary VMware ESXi and ESX updates to third party libraries and ESX Service Console address several security issues. Relevant releases ESXi 5.0 without patch ESXi500-201112401-SG. ESXi 4.1 without patch...
http-waf-detect NSE Script
Attempts to determine whether a web server is protected by an IPS Intrusion Prevention System, IDS Intrusion Detection System or WAF Web Application Firewall by probing the web server with malicious payloads and detecting changes in the response code and body. To do this the script will send a...
frame-oshop SQL Injection Vulnerability
Exploit for php platform in category web applications product: frame-oshop vendor: http://www.sdaxx.de/ date: 15.05.2011 status: 0day version: i dunno... PoC: http://www.host.com/shop/main.php?id=1111&show=rubrik&rid=-1%20union%20select%201,2,3,4,version,6,7,8,9,10,11,12 Dork: "2006 by Sdaxx...
VMware Virtual 8086 - Linux Local Ring0
Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM Credit: Tavis Ormandy and Julien Tinnes of the Google Security Team Vulnerable: VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 build 156735 VMWare Workstation 6.5.2 VMWare Workstation 6.5.1 VMWare...
Fedora Core 9 FEDORA-2009-1520 (squidGuard)
The remote host is missing an update to squidGuard announced via advisory FEDORA-2009-1520. OpenVAS Vulnerability Test $Id: fcore20091520.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1520 squidGuard Authors: Thomas Reinke Copyright: Copyright c...
CVE-2008-6009
SG Real Estate Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the Auth cookie to 1...
CVE-2008-6010
Multiple directory traversal vulnerabilities in SG Real Estate Portal 2.0 allow remote attackers to read arbitrary files via a .. dot dot in the 1 mod, 2 page, or 3 lang parameter to index.php; or the 4 action or 5 folder parameter in a security request to admin/index.php...