9838 matches found
CVE-2008-7300
CVE-2008-7300 describes a vulnerability in the labeled networking implementation of Solaris Trusted Extensions on Sun Solaris 10 and OpenSolaris (snv_39 through snv_67). When a labeled zone is in the installed state, remote authenticated users can bypass Mandatory Access Control (MAC) and gain ac...
PcVue 10.0 SV.UIGrdCtrl.1 'LoadObject()/SaveObject()' Trusted DWORD Vulnerability
This module exploits a function pointer control within SVUIGrd.ocx of PcVue 10.0. By setting a dword value for the SaveObject or LoadObject, an attacker can overwrite a function pointer and execute arbitrary code. Module Options msf use exploit/windows/browser/pcvue/func msf undefinedfunc show...
OpenSSH < 4.7 Trusted X11 Cookie Connection Policy Bypass
According to the banner, OpenSSH earlier than 4.7 is running on the remote host. Such versions contain an authentication bypass vulnerability. In the event that OpenSSH cannot create an untrusted cookie for X, for example due to the temporary partition being full, it will use a trusted cookie...
Opera Extended Validation Information Disclosure Vulnerabilities (Mac OS X)
The host is installed with Opera and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gboperaextentedvalidationinfodiscvulnmacosx.nasl 7044 2017-09-01 11:50:59Z teissa $ Opera Extended Validation Information Disclosure Vulnerabilities Mac OS X Authors: Rachana...
Opera Extended Validation Information Disclosure Vulnerabilities - Windows
Opera is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-3388
Opera before 11.51 allows remote attackers to cause an insecure site to appear secure or trusted via unspecified actions related to Extended Validation and loading content from trusted sources in an unspecified sequence that causes the address field and page information dialog to contain security...
How to secure SSL connections and remove DigiNotar certificates from the Trusted CAs list
...
New Versions of Chrome and Firefox Disable DigiNotar Root
Mozilla has released version 6.01 of its Firefox browser, which now removes the compromised DigiNotar root certificate from the list of trusted roots. The move comes just two days after security researchers discovered that the Dutch company had issued a valid wildcard certificate for Google to an...
JIRA FishEye plugin not working - Error handling trusted applications authentication attempt: BAD_SIGNATURE
This bug effects you if: you are running JIRA 4.4+ and FishEye 2.6.0-2.6.3 you have Trusted Applications authenticating the link between your JIRA and FishEye servers If you attempt to configure or use the JIRA FishEye plugin, you may see errors in the UI and log messages like this in JIRA:...
MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflow
$Id: ms10026avinsamplespersec.rb 13555 2011-08-13 02:15:05Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CentOS Update for krb5-devel CESA-2009:0408 centos5 i386
Check for the Version of krb5-devel OpenVAS Vulnerability Test CentOS Update for krb5-devel CESA-2009:0408 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
CentOS Update for postgresql CESA-2010:0429 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS Update for firefox CESA-2009:1095 centos5 i386
Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2009:1095 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CVE-2011-2291
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality via unknown vectors related to Trusted Extensions...
Design/Logic Flaw
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality via unknown vectors related to Trusted Extensions...
CVE-2011-2291
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality via unknown vectors related to Trusted Extensions...
CVE-2011-2291
CVE-2011-2291 affects Oracle Solaris 10 (Trusted Extensions): a local confidentiality issue with unspecified vectors. Nessus patches 147182-01 (sparc) and 147183-01 (x86) address labeling patches for SunOS 5.10. Installing these patches is the remediation mentioned in connected Nessus plugins. CV...
When you open the nworks Web UI in a browser, you see a blank screen.
When you open the nworks Web UI in a browser, you see a blank screen instead of the logon screen/management screen. You may also see a Java exception stating that you need to add the site to the Trusted Sites zone...
Brocade BigIron RX switch ACL bypass vulnerability
Overview Brocade BigIron RX switch devices are susceptible to an access control list ACL bypass vulnerability by sending packets with the source port 179. Description Brocade BigIron RX switch devices do not properly restricted packets sent with a source port of 179. Port 179 is commonly used for...
Microsoft Hyper-V VMBus 'vmswitch.sys' Denial of Service Vulnerability
Description Microsoft Hyper-V is prone to a local denial-of-service vulnerability. Using a guest system, a local attacker can exploit this issue to force the Hyper-V server to become unresponsive, denying service to legitimate users. The denial-of-service conditions would also affect other guest...