CVE-2011-0807

CVE-2011-0807 affects Oracle GlassFish Server and Sun Java System Application Server. The connected documents describe an authentication bypass vulnerability that can lead to remote code execution by bypassing authentication and deploying/executing a malicious WAR, particularly on GlassFish 2.x, ...

CVE-2011-0807: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration...

MS Windows HID Functionality(Over USB) Code Execution Vulnerability

This host is installed with USB device driver software and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gbmswindowshidoverusbcodeexecvuln.nasl 8724 2018-02-08 15:02:56Z cfischer $ MS Windows HID FunctionalityOver USB Code Execution Vulnerability Authors: Antu Sanadi...

Vulnerability in Windows Services for UNIX Could Allow Elevation of Privilege (939778)

This host is missing a critical security update according to Microsoft Bulletin MS07-053. OpenVAS Vulnerability Test $Id: gbms07-053.nasl 5362 2017-02-20 12:46:39Z cfi $ Vulnerability in Windows Services for UNIX Could Allow Elevation of Privilege 939778 Authors: Madhuri D Copyright: Copyright c...

Microsoft Windows TCP/IP Denial of Service Vulnerability (946456)

This host is missing a critical security update according to Microsoft Bulletin MS08-004. OpenVAS Vulnerability Test $Id: gbms08-004.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows TCP/IP Denial of Service Vulnerability 946456 Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networ...

MS Windows ICSW Remote Code Execution Vulnerability (2443105)

This host is missing a critical security update according to Microsoft Bulletin MS10-097. OpenVAS Vulnerability Test $Id: secpodms10-097.nasl 5361 2017-02-20 11:57:13Z cfi $ MS Windows ICSW Remote Code Execution Vulnerability 2443105 Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...

Microsoft Wireless LAN AutoConfig Service Remote Code Execution Vulnerability (970710)

This host is missing a critical security update according to Microsoft Bulletin MS09-049. OpenVAS Vulnerability Test $Id: gbms09-049.nasl 5364 2017-02-20 13:26:07Z cfi $ Microsoft Wireless LAN AutoConfig Service Remote Code Execution Vulnerability 970710 Authors: Madhuri D Copyright: Copyright c...

Sun Java System Application Server Local Vulnerability

Sun Java System Application Server is prone to a local vulnerability. The 'GUI' sub component is affected. This vulnerability affects the following supported versions: Sun Java System Application Server 8.0, 8.1, 8.2. OpenVAS Vulnerability Test $Id: gbsunjavasystemapplicationserver41638.nasl 5373...

CVE-2010-2397: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Java System Application Server 8.0, 8.1, and 8.2; and GlassFish Enterprise Server 2.1.1; allows local users to affect confidentiality and integrity, related to the GUI...

IrfanView Buffer Overflow Vulnerabilities

This host has IrfanView installed and is prone to buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbirfanviewbofvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ IrfanView Buffer Overflow Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Networks GmbH,...

XnView DICOM Parsing Integer Overflow Vulnerability (Linux)

This host has XnView installed and is prone to integer overflow vulnerability. Vulnerabilities Insight: The flaw is due to integer overflow when processing DICOM images with certain dimensions. This can be exploited to cause a heap-based buffer overflow by persuading a victim to open a...

Sun Java System Application Server Cross Site Tracing Vulnerability

This host has Sun Java System Application Server running which is prone to Cross Site Tracing vulnerability. OpenVAS Vulnerability Test $Id: gbsunjavaappservxstvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ Sun Java System Application Server Cross Site Tracing Vulnerability Authors: Veerendra G...

Sun Java System Application Server Cross-Site Tracing Vulnerability

Sun Java System Application Server is prone to a cross-site tracing vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2010-0386

The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method. This allows remote attackers to perform Cross-Site Tracing (XST) attacks to steal cookies and authentication credentials by reflecting the contents of client HTTP requests in the response...

CVE-2010-0386: Improper Neutralization of Leading Special Elements

The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing XST attack, a related issue to CVE-2004-2763 and CVE-2005-3398...

Mozilla Firefox Multiple Spoofing Vulnerabilies - dec09 (Windows)

The host is installed with Firefox browser and is prone to multiple spoofing vulnerabilies. OpenVAS Vulnerability Test $Id: gbfirefoxmultspoofvulnwindec09.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox Multiple Spoofing Vulnerabilies - dec09 Windows Authors: Antu Sanadi Copyright:...

MS ATL ActiveX Controls for MS Office Could Allow Remote Code Execution (973965)

This host is missing a critical security update according to Microsoft Bulletin MS09-060. OpenVAS Vulnerability Test $Id: secpodms09-060.nasl 6533 2017-07-05 08:41:34Z santu $ MS ATL ActiveX Controls for MS Office Could Allow Remote Code Execution 973965 Authors: Antu Sanadi Updated By: Antu Sana...

IBM DB2 Unspecified Vulnerability (Linux)

The host is installed with IBM DB2 and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2unspesifiedvulnlin.nasl 7113 2017-09-13 06:03:30Z cfischer $ IBM DB2 Unspecified Vulnerability Linux Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...

IBM DB2 Unspecified Vulnerability (Windows)

The host is installed with IBM DB2 and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2unspesifiedvulnwin.nasl 4869 2016-12-29 11:01:45Z teissa $ IBM DB2 Unspecified Vulnerability Windows Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...

IBM DB2 Multiple Vulnerabilities - Oct09 (Linux)

The host is installed with IBM DB2 and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2multvulnlinoct09.nasl 7113 2017-09-13 06:03:30Z cfischer $ IBM DB2 Multiple Vulnerabilities - Oct09 Linux Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...