4409 matches found
OpenJDK: MediaTracker created Component instances with unnecessary privileges (Swing, 7020198)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availabili...
Support Incident Tracker (SiT!) 3.63 p1 - billable_incidents.php?sites[] SQL Injection
Support Incident Tracker SiT! 3.63 p1 - billableincidents.php?sites SQL Injection source: https://www.securityfocus.com/bid/48896/info Support Incident Tracker is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it...
Support Incident Tracker (SiT!) 3.63 p1 - 'search.php?search_string' SQL Injection
source: https://www.securityfocus.com/bid/48896/info Support Incident Tracker is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
Support Incident Tracker (SiT!) 3.63 p1 - 'billable_incidents.php?sites[]' SQL Injection
source: https://www.securityfocus.com/bid/48896/info Support Incident Tracker is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
Support Incident Tracker (SiT!) 3.63 p1 - search.php?search_string SQL Injection
Support Incident Tracker SiT! 3.63 p1 - search.php?searchstring SQL Injection source: https://www.securityfocus.com/bid/48896/info Support Incident Tracker is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in ...
Support Incident Tracker (SiT!) 3.63 p1 - tasks.php?selected[] SQL Injection
Support Incident Tracker SiT! 3.63 p1 - tasks.php?selected SQL Injection source: https://www.securityfocus.com/bid/48896/info Support Incident Tracker is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQ...
Support Incident Tracker (SiT!) 3.63 p1 - 'tasks.php?selected[]' SQL Injection
source: https://www.securityfocus.com/bid/48896/info Support Incident Tracker is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
OpenJDK: MediaTracker created Component instances with unnecessary privileges (Swing, 7020198)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availabili...
Sybase Adaptive Server Enterprise Backup Server Format String Vulnerability
Sybase Adaptive Server is prone to format string vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2011-25: SQL injection vulnerabilities in Support Incident Tracker
Positive Research Center has discovered multiply SQL injection vulnerabilities in Support Incident Tracker. Application incorrectly validates input data, which allows attackers to conduct an SQL injection attack. "SQL Injection" is a way to bypass network protection and attack the database...
Debian Security Advisory DSA 2226-1 (libmodplug)
The remote host is missing an update to libmodplug announced via advisory DSA 2226-1. OpenVAS Vulnerability Test $Id: deb22261.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2226-1 libmodplug Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
Debian: Security Advisory (DSA-2226-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RT (Request Tracker) Unspecified Security Bypass Vulnerability
This host is installed with Request Tracker and is prone to unspecified security bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodrtunspecifiedsecbypassvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ RT Request Tracker Unspecified Security Bypass Vulnerability Authors: Sooraj KS Copyright...
RT (Request Tracker) Unspecified Directory Traversal Vulnerability
This host is installed with Request Tracker and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: secpodrtunspecifieddirtraversalvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ RT Request Tracker Unspecified Directory Traversal Vulnerability Authors: Sooraj KS Copyright:...
RT (Request Tracker) Unspecified Multiple Vulnerabilities
This host is installed with Request Tracker and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodrtunspecifiedmultvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ RT Request Tracker Unspecified Multiple Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...
Request Tracker (RT) 3.6.x < 3.6.11, 3.8.x < 3.8.10 Security Bypass Vulnerability
Request Tracker RT is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
RT (Request Tracker) Cross Site Request Forgery Vulnerability
This host is installed with Request Tracker and is prone to cross site request forgery vulnerability. OpenVAS Vulnerability Test $Id: secpodrtcsrfvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ RT Request Tracker Cross Site Request Forgery Vulnerability Authors: Sooraj KS Copyright: Copyright c 2011...
RT (Request Tracker) Search Interface Information Disclosure Vulnerability
This host is installed with Request Tracker and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodrtsearchinfodisclosurevuln.nasl 7015 2017-08-28 11:51:24Z teissa $ RT Request Tracker Search Interface Information Disclosure Vulnerability Authors: Sooraj KS...
Request Tracker (RT) < 3.8.10, 4.x < 4.0.0rc8 CSRF Vulnerability
Request Tracker RT is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Request Tracker (RT) 2.x < 3.6.11, 3.8.x < 3.8.10, 4.x < 4.0.0rc8 Multiple Vulnerabilities
Request Tracker RT is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...