233 matches found
UBUNTU-CVE-2015-0408
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI...
DEBIAN-CVE-2014-3137
Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a ; semi-colon and a Content-Type that would not be accepted, as...
CVE-2012-6447
Concretely, CVE-2012-6447 affects Splunk Web in Splunk 5.0.0–5.0.2, where a cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary script/HTML via unspecified vectors. The issue is mitigated by upgrading to a fixed release (e.g., Splunk 5.0.3 or later) as indicated b...
wordpress_fingerprint
This plugin finds the version of a WordPress installation by fingerprinting it. It first checks whether or not the version is in the index header and then it checks for the "real version" through the existance of files that are only present in specific versions. Plugin type Crawl Options This...
CVE-2013-3341
Adobe Reader and Acrobat are affected by CVE-2013-3341: multiple versions (9.x before 9.5.5, 10.x before 10.1.7, 11.x before 11.0.03) permit memory-corruption-based exploits leading to arbitrary code execution or denial of service via unspecified vectors. The connected advisories indicate remedia...
CVE-2012-1814
Emerson DeltaV family is affected by CVE-2012-1814: XSS in DeltaV and DeltaV Workstations versions 9.3.1, 10.3.1, 11.3, 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6. The vulnerability allows remote script injection via unspecified web vectors in the affected web interfaces. Exploitati...
tomcat: large number of parameters DoS
Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service CPU consumption via a request that contains many parameters and parameter values, a different vulnerability...
tomcat: security manager restrictions bypass
Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service infinite lo...
Fedora 9 : net-snmp-5.4.1-19.fc9 (2008-9367)
Tue Jul 22 2008 Jan Safranek 5.4.1-19 - fix perl SNMP::Session::set 452131 - support interface names longer than 8 characters 468045 - explicitly require the right version and release of net-snmp and net-snmp-libs - fix CVE-2008-4309 - Tue Jun 10 2008 Jan Safranek 5.4.1-18 - explicitly require...
vBulletin <= 3.0.4 ""forumdisplay.php"" Code Execution (part 2)
No description provided by source. ?php / vbulletin 3.0.x execute command by AL3NDALEEB al3ndaleebatuk2.net First condition : $vboptions'showforumusers' == True , the admin must set showforumusers ON in vbulletin options. Second condition: $bbuserinfo'userid' == 0 , you must be an visitor/guest...
MS Windows JPEG GDI+ Overflow Administrator Exploit (MS04-028)
Exploit for unknown platform in category remote exploits ============================================================== MS Windows JPEG GDI+ Overflow Administrator Exploit MS04-028 ============================================================== !/bin/sh MS04-028 Exploit PoC II with Shellcode:...
