Debian: Security Advisory (DSA-1171)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unfixed XSS vulnerability at www.vox.de

Security researcher Persian Fox, has submitted on 15/01/2008 a cross-site-scripting XSS vulnerability affecting www.vox.de, which at the time of submission ranked 24697 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/01/2008. It is currently...

netOctopus Agent nantsys.sys MSR Write Local Privilege Escalation

netOctopus Agent, an asset management agent, is installed on the remote host. The installed version of netOctopus Agent includes a driver, named 'nantsys.sys', that exposes a device interface writable by all local users, allowing them to read and write arbitrary CPU Model Specific Registers MSRs....

Unfixed XSS vulnerability at www.lvcva.com

Security researcher holisticinfosec, has submitted on 13/01/2008 a cross-site-scripting XSS vulnerability affecting www.lvcva.com, which at the time of submission ranked 162788 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It is...

Unfixed XSS vulnerability at www.schule-beruf.de

Security researcher Camilo-TcK, has submitted on 01/10/2008 a cross-site-scripting XSS vulnerability affecting www.schule-beruf.de, which at the time of submission ranked 3109241 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2008. It is...

CVE-2007-5761

The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \.\NantSys device interface nantsys.sys, which allows local users to gain privileges or cause a denial of service system crash, as demonstrated by modifying the SYSENTEREIPMSR CPU Model Specific...

CVE-2007-5761

The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \.\NantSys device interface nantsys.sys, which allows local users to gain privileges or cause a denial of service system crash, as demonstrated by modifying the SYSENTEREIPMSR CPU Model Specific...

Unfixed XSS vulnerability at www.silvercreekgifts.com

Security researcher Uber0n, has submitted on 01/07/2008 a cross-site-scripting XSS vulnerability affecting www.silvercreekgifts.com, which at the time of submission ranked 29939451 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It ...

Samba lsa_io_trans_names buffer overflow

Added: 12/24/2007 CVE: CVE-2007-2446 BID: 24195 OSVDB: 34699 Background Samba is a software package which implements the SMB protocol on a variety of platforms, providing compatibility with Windows systems. Problem A vulnerability in the LSA RPC interface allows a remote attacker to execute...

Unfixed XSS vulnerability at www.vbfrance.fr

Security researcher DerickTham, has submitted on 21/12/2007 a cross-site-scripting XSS vulnerability affecting www.vbfrance.fr, which at the time of submission ranked 596419 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is...

CVE-2007-6494

Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via a request to hosting/addreseller.asp with a username in the reseller parameter, followed by a request to AdminSettings/displays.asp with the DecideAction and ChangeSkin parameters...

Unfixed XSS vulnerability at www.sunway.com.my

Security researcher DerickTham, has submitted on 19/12/2007 a cross-site-scripting XSS vulnerability affecting www.sunway.com.my, which at the time of submission ranked 87836 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2008. It is...

CVE-2007-6294

Multiple unspecified vulnerabilities in IBM Hardware Management Console HMC 3 R3.7 allow attackers to gain privileges via "some HMC commands."...

Unfixed XSS vulnerability at www.zenginli.com.tr

Security researcher Narcoticxs, has submitted on 12/08/2007 a cross-site-scripting XSS vulnerability affecting www.zenginli.com.tr, which at the time of submission ranked 4918872 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...

Unfixed XSS vulnerability at www.dm-digifoto.de

Security researcher MaXWeL, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.dm-digifoto.de, which at the time of submission ranked 219417 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is...

Fixed XSS vulnerability at www.wikispaces.com

Security researcher pH4nToM, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.wikispaces.com, which at the time of submission ranked 10696 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is...

Unfixed XSS vulnerability at www.soccerstats.com

Security researcher cyber, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting www.soccerstats.com, which at the time of submission ranked 42305 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is...

Unfixed XSS vulnerability at news.novgorod.ru

Security researcher MaXWeL, has submitted on 12/04/2007 a cross-site-scripting XSS vulnerability affecting news.novgorod.ru, which at the time of submission ranked 66637 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is currentl...

[SECURITY] [DSA 1414-1] New wireshark packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1414-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 27, 2007 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.2-funky.co.uk

Security researcher Genocide, has submitted on 27/11/2007 a cross-site-scripting XSS vulnerability affecting www.2-funky.co.uk, which at the time of submission ranked 870797 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...