6476 matches found
MD5 vulnerable to collision attacks
Overview Weaknesses in the MD5 algorithm allow for collisions in output. As a result, attackers can generate cryptographic tokens or other data that illegitimately appear to be authentic. Description A secure cryptographic hash algorithm is one that generates a unique identifier of a fixed size...
[SECURITY] Fedora 10 Update: phpPgAdmin-4.2.2-1.fc10
phpPgAdmin is a fully functional web-based administration utility for a PostgreSQL database server. It handles all the basic functionality as well as some advanced features such as triggers, views and functions stored procedures. It also has Slony-I support...
Apple iPhone Configuration Web Utility Directory Traversal Vulnerability
This host has Apple iPhone Configuration Web Utility installed and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbappleiphoneconfwebutltydirtrvslvuln.nasl 5370 2017-02-20 15:24:26Z cfi $ Apple iPhone Configuration Web Utility Directory Traversal Vulnerability...
Apple iPhone Configuration Web Utility Directory Traversal Vulnerability
Apple iPhone Configuration Web Utility is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Integer overflow
Integer overflow in the JAR unpacking utility unpack200 in the unpack library unpack.dll in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via a Pack200 compressed JA...
Default credentials
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain 1 user and 2 database passwords by using a password revealer utility on a field containing a series of asterisks...
CVE-2008-5326
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain 1 user and 2 database passwords by using a password revealer utility on a field containing a series of asterisks...
Directory traversal
Directory traversal vulnerability in the web interface in Apple iPhone Configuration Web Utility 1.0 on Windows allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2008-5315
Directory traversal vulnerability in the web interface in Apple iPhone Configuration Web Utility 1.0 on Windows allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2008-5315
CVE-2008-5315: Apple iPhone Configuration Web Utility 1.0 for Windows is affected by a directory traversal vulnerability in its web interface that allows remote attackers to read arbitrary files via unspecified vectors. The issue is tied to the web service component and is documented with CVSS v2...
CVE-2008-5315
Directory traversal vulnerability in the web interface in Apple iPhone Configuration Web Utility 1.0 on Windows allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2008-5315: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the web interface in Apple iPhone Configuration Web Utility 1.0 on Windows allows remote attackers to read arbitrary files via unspecified vectors...
Apple iPhone Web Utility Detection
Binary data 4769.prm...
Apple iPhone Configuration Web Utility目录遍历漏洞
BUGTRAQ ID: 32412 iPhone Configuration Web Utility允许用户使用web浏览器创建、签名和发布配置文件。 Windows平台版本的iPhone Configuration Web Utility的Web接口存在目录遍历漏洞,远程攻击者可以通过向该接口提交恶意请求读取web root之外的任意只读文件。 Apple iPhone Configuration Web Utility 1.0 for Windows Apple ----- 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本:...
Apple iPhone Configuration Web Utility directory traversal
ACcess outside web root is possible...
DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal
Title ----- DDIVRT-DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal Severity -------- High Date Discovered --------------- October 2, 2008 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Corey LeBleu and r@b13$ Vulnerability...
Modify the Exploit to experience a local elevation of Privilege fun-vulnerability warning-the black bar safety net
Vulnerability is like 8 months of rain like a short month, it cropped up several! Each of the security sites are constantly in the headlines reported in the latest vulnerability message, the heat as much as the Olympics. But these loopholes, really can for newbies service is few and far between!...
Symantec Veritas Storage Foundation unauthorized access
qioadmin utility allows local files read access. qiomkfile allows memory content reading...
[SECURITY] Fedora 8 Update: rubygem-activesupport-2.1.1-1.fc8
Utility library which carries commonly used classes and goodies from the Rails framework...
ASG-Sentry File Check Utility /snmx-cgi/fcheck.exe Arbitrary File Overwrite
The File Check Utility fcheck.exe included with the version of ASG-Sentry installed on the remote host fails to sanitize input before creating index files with filenames and checksums. An unauthenticated remote attacker can leverage this issue to overwrite existing files with either no data or a...