PostgreSQL Denial of Service Vulnerability (Linux)

This host is installed with PostgreSQL Server and is prone to denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: secpodpostgresqldosvulnlin.nasl 5122 2017-01-27 12:16:00Z teissa $ PostgreSQL Denial of Service Vulnerability Linux Authors: Sujit Ghosal Copyright: Copyright c 2009...

Pixie CMS Multiple Vulnerabilities (Mar 2009) - Active Check

Pixie CMS is prone to an SQL injection SQLi vulnerability and a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

FFFTP LIST Command Directory Traversal Vulnerability

This host is installed with FFFTP Client and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbffftplistcmddirtraversalvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ FFFTP LIST Command Directory Traversal Vulnerability. Authors: Nikita MR Copyright: Copyright c 2009...

phpCommunity2 Multiple Vulnerabilities (Mar 2009) - Active Check

phpCommunity2 is prone to multiple input validation vulnerabilities, including multiple directory traversal issues and SQL-injection issues, and a cross-site scripting issue. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

[ISecAuditors Security Advisories] WordPress MU HTTP Header XSS Vulnerability

============================================= INTERNET SECURITY AUDITORS ALERT 2009-004 - Original release date: December 3rd, 2008 - Last revised: March 10th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.3/10 CVSS scored ============================================= I. VULNERABILITY...

Replay Attack Vulnerability in Tor (Linux)

This host is installed with Tor Anonymity Proxy and is prone to replay attack vulnerability. OpenVAS Vulnerability Test $Id: secpodtorreplayattackvulnlin.nasl 5148 2017-01-31 13:16:55Z teissa $ Tor Replay Attack Vulnerability Linux Authors: Sharath S Copyright: Copyright c 2009 SecPod,...

TitanFTP Server Denial of Service Vulnerability

This host is running TitanFTP Server and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbtitanftpserverdosvuln.nasl 4892 2016-12-30 15:39:07Z teissa $ TitanFTP Server Denial of Service Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Network...

GLSA-200812-10 : Archive::Tar: Directory traversal vulnerability

The remote host is affected by the vulnerability described in GLSA-200812-10 Archive::Tar: Directory traversal vulnerability Jonathan Smith of rPath reported that Archive::Tar does not check for '..' in file names. Impact : A remote attacker could entice a user or automated system to extract a...

Gentoo Security Advisory GLSA 200809-03 (realplayer)

The remote host is missing updates announced in advisory GLSA 200809-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Novell eDirectory eMBox Utility Unauthorized Access (uncredentialed check)

The remote host is running eDirectory, a popular directory service software from Novell. A vulnerability in the eMBox utility included with the software allows an unauthenticated attacker to access local files or cause a denial of service condition. Nessus was able to query the list of available...

SA-2008-008 - Meta tags - Arbitrary code execution

The Meta tags module, also known as Nodewords, adds HTML META tags to node, panel and view pages. If the site is configured to allow images in the body of any node type, any user that can create this node type is able to execute arbitrary code on the server. Versions affected Meta tags for Drupal...

Mozilla denial of service vulnerability

Overview Certain Mozilla products contain a denial-of-service vulnerability. Description Certain Mozilla products contain a denial-of-service vulnerability that occurs because of an infinite loop in the jsdtoa function. Mozilla Firefox versions prior to 2.0.0.1, Thunderbird prior to 1.5.0.9, and...

mozThunDoS.txt

Mozilla Thunderbird : Remote Code Execution & Denial of Service //----- Advisory Program : Mozilla Thunderbird Homepage : http://www.mozilla.com/thunderbird/ Tested version : Denial of service application crash : iframe src="javascript:parent.document.write'Found by www.s...

MonkeyWeb POST with too much data

Your web server crashes when it receives a POST command with too much data. It may even be possible to make this web server execute arbitrary code with this attack. OpenVAS Vulnerability Test $Id: monkeywebtoobigpost.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: MonkeyWeb POST with too muc...

PuTTY window title escape character arbitrary command execution

PuTTY is a free SSH client. This version contains a flaw that may allow a malicious user to insert arbitrary commands and execute them. The issue is triggered when an attacker sends commands, preceded by terminal emulator escape sequences. It is possible that the flaw may allow arbitrary code...

Boozt index.cgi overflow

It seems that index.cgi from Boozt AdBanner is installed and is vulnerable to a buffer overflow: it doesn't check the length of user supplied variables before copying them to internal arrays. A cracker may exploit this vulnerability to make your web server crash continually or even execute...

vBulletin <= 2.2.9 XSS Vulnerability - Active Check

vBulletin is vulnerable to a cross-site scripting XSS issue, due to a failure of the application to properly sanitize user-supplied URI input. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

Cherokee directory traversal flaw

The remote version of Cherokee is vulnerable to directory traversal flaw when appending a SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CMSimple index.php search Function XSS

The remote host is running CMSimple, a CMS written in PHP. The version of CMSimple installed on the remote host is prone to cross-site scripting attacks due to its failure to sanitize user-supplied input to the search field. %NASLMINLEVEL 70300 Josh Zlatin-Amishav josh at ramat dot cc GPLv2 Chang...

IBM Lotus Domino Server time/date Fields Remote Overflow

According to its banner, the remote host is running a version of Lotus Domino Server that is prone to a buffer overflow attack triggered by submitting a POST request with large amounts of data for certain date / time fields. A remote attacker can reportedly exploit this issue to crash the web...