KLA10276 DoS vulnerability in Nokia PC Suite

A buffer overflow was found in the Nokia PC Suite. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed MP4 file. Original advisories - Exploitation Public exploits exist for this vulnerability. Related...

PT-2013-25: Information Disclosure in Siemens Simatic WinCC and PCS 7

The specialists of the Positive Research center have detected "Information Disclosure" vulnerability in Siemens Simatic WinCC and PCS 7. WebNavigator passwords stored in the SQL database are only obfuscated. How to fix Update your software up to the latest version Advisory status 11.07.2012 -...

PT-2012-4693 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.4.5 Description: The issue is related to a heap-based buffer overflow in the udf load logicalvol function, which can be triggered by a crafted UDF filesystem. This can cause a denial of service, resulting in a...

Cross-Site Scripting Vulnerability in TYPO3 Core

It has been discovered that TYPO3 Core is vulnerable to Cross-Site Scripting. Component Type: TYPO3 Core Affected Versions: 4.5.0 up to 4.5.16, 4.6.0 up to 4.6.9, 4.7.0 up to 4.7.1 and development releases of the 6.0 branch. Bulletin history: July 4, 2012 - corrected Secunia Advisory ID Vulnerabl...

KLA10232 ACE vulnerability in KMPlayer

An untrusted path vulnerability was found in KMPlayer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally via dll hijacking. Original advisories - Related products KMPlayer CVE list CVE-2012-3841 critical Solution Update to...

Fedora Update for quagga FEDORA-2012-9117

Check for the Version of quagga OpenVAS Vulnerability Test Fedora Update for quagga FEDORA-2012-9117 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Adobe Flash Player Multiple Vulnerabilities (Jun 2012) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

PT-2012-3752 · Adobe +2 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 10.3.183.20 and 11.x prior to 11.3.300.257 on Windows and Mac OS X Adobe Flash Player versions prior to 10.3.183.20 and 11.x prior to 11.2.202.236 on Linux Adobe Flash Player versions prior to 11.1.111.10 ...

Ubuntu Update for libxml2 USN-1447-1

Ubuntu Update for Linux kernel vulnerabilities USN-1447-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14471.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for libxml2 USN-1447-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

ownCloud 3.0.0 Cross Site Scripting

TC-SA-2012-01: Multiple web-vulnerabilities in ownCloud 3.0.0 Published: 2012/04/18 Version 1.0 Affected products: ownCloud version 3.0.0 others not tested http://owncloud.org References: TC-SA-2012-01 www.tele-consulting.com/advisories/TC-SA-2012-01.txt used for updates CVE-2012-2269 - XSS in...

PT-2012-3447 · Mysql Server +3 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.1.61 and earlier MySQL Server versions 5.5.21 and earlier Description: The issue affects the availability of the system, related to the Server Optimizer component. It is a different issue than the one previously...

Fedora Update for kernel FEDORA-2012-3715

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2012-3715 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

PT-2013-1211 · Gnu +3 · Glibc +3

Name of the Vulnerable Software and Affected Versions: glibc versions prior to 2.15-r3 Description: The issue concerns multiple vulnerabilities in the glibc package, which can lead to breaches of confidentiality, integrity, and availability of protected information. Exploitation can occur locally...

KLA10206 ACE vulnerability in IBM Personal Communications

A buffer overflow was found in IBM Personal Communications. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed .ws file. Original advisories - Exploitation Public exploits exist for this vulnerability...

PT-2012-2841 · Adobe +2 · Flash Player +2

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 10.3.183.15 Adobe Flash Player versions 11.x prior to 11.1.102.62 Adobe Flash Player versions prior to 11.1.111.6 on Android 2.x and 3.x Adobe Flash Player versions prior to 11.1.115.6 on Android 4.x...

FreeBSD Ports: FreeBSD

The remote host is missing an update to the system as announced in the referenced advisory. VID e51d5b1a-4638-11e1-9f47-00e0815b8da8 OpenVAS Vulnerability Test $ Description: Auto generated from VID e51d5b1a-4638-11e1-9f47-00e0815b8da8 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: php5

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Apache Struts < 2.3.3 Showcase Multiple Persistent XSS Vulnerabilities

Apache Struts Showcase is prone to multiple persistent cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

sudo 1.8.0 < 1.8.3p1 - Format String

Phenoelit Advisory Authors joernchen Phenoelit Group http://www.phenoelit.de Affected Products sudo 1.8.0 - 1.8.3p1 http://sudo.ws Vendor communication 2012-01-24 Send vulnerability details to sudo maintainer 2012-01-24 Maintainer is embarrased 2012-01-27 Asking maintainer how the fixing goes...

KLA10406 ACe vulnerability in Yahoo! Messenger

An integer overflow was found in Yahoo! Messenger. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed JPG image. Original advisories - Related products Yahoo!-Messenger CVE list CVE-2012-0268 high...