Scientific Linux Security Update : icedtea-web on SL6.x i386/x86_64 (20121107)

This erratum also upgrades IcedTea-Web to version 1.2.2. Web browsers using the IcedTea-Web browser plug-in must be restarted for this update to take effect. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'deprecatednasllevel.inc';...

JVN#46088915: Yahoo! Browser vulnerable in the WebView class

Yahoo! Browser is a web browser for Android devices. Yahoo! Browser contains a vulnerability in the WebView class. Impact If a user of the affected product uses other malicious Android application, information managed by the affected product may be disclosed. Solution Update the software Update t...

Wordpress Plugins - SocialFit XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

PT-2012-2895 · Phpldapadmin · Phpldapadmin

Name of the Vulnerable Software and Affected Versions: phpLDAPadmin versions 1.2.2 and earlier Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the base parameter in a query engine...

phpLDAPadmin 'base' Parameter Cross Site Scripting Vulnerability

This host is running phpLDAPadmin and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbphpldapadminbaseparamxssvuln.nasl 5792 2017-03-30 13:18:14Z cfi $ phpLDAPadmin 'base' Parameter Cross Site Scripting Vulnerability Authors: Sooraj KS Copyright: Copyright c 2012...

PT-2011-4839 · Phpldapadmin · Phpldapadmin

Name of the Vulnerable Software and Affected Versions: phpLDAPadmin versions 1.2.x before 1.2.2 Description: The issue allows remote attackers to execute arbitrary PHP code via the orderby parameter also known as the sortby variable in a query engine action to "cmd.php". This has been exploited i...

PT-2011-4838 · Php · Phpldapadmin

Name of the Vulnerable Software and Affected Versions: phpLDAPadmin versions 1.2.x through 1.2.1 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an debug command in the cmd.php fil...

Cfingerd 'search' Command Information Disclosure Vulnerability

This host is running Cfingerd service and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbcfingerdsearchcmdinfodiscvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ Cfingerd 'search' Command Information Disclosure Vulnerability Authors: Rachana Shetty Copyright:...

Joomla Component 'com_jresearch' Local File Inclusion Vulnerability

This host is running Joomla and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: secpodjoomlacomjresearchlfivuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Joomla Component 'comjresearch' Local File Inclusion Vulnerability Authors: Madhuri D Copyright: Copyright c 20...

NetVault: SmartDisk 1.2 - 'libnvbasics.dll' Remote Denial of Service

source: https://www.securityfocus.com/bid/48029/info NetVault: SmartDisk is prone to a remote denial-of-service vulnerability. A successful exploit will cause the application to crash, effectively denying service. NOTE: Remote code execution may be possible; however, this has not been confirmed...

NetVault: SmartDisk 1.2 - libnvbasics.dll Remote Denial of Service

NetVault: SmartDisk 1.2 - libnvbasics.dll Remote Denial of Service source: https://www.securityfocus.com/bid/48029/info NetVault: SmartDisk is prone to a remote denial-of-service vulnerability. A successful exploit will cause the application to crash, effectively denying service. NOTE: Remote cod...

[SECURITY] [DSA 2223-1] doctrine security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2223-1 [email protected] http://www.debian.org/security/ Florian Weimer April 20, 2011 http://www.debian.org/security/faq -...

QuickShare File Share FTP Server Directory Traversal Vulnerability

The host is running QuickShare File Share FTP Server and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbquicksharehqftpserverdirtravvuln.nasl 7019 2017-08-29 11:51:27Z teissa $ QuickShare File Share FTP Server Directory Traversal Vulnerability Authors: Veerendra ...

Nasim Guest Book - 'page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42503/info Nasim Guest Book is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

osCSS 1.2.2 - page Cross-Site Scripting

osCSS 1.2.2 - page Cross-Site Scripting source: https://www.securityfocus.com/bid/41510/info osCSS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Zikula Application Framework 1.2.2 - index.php?func Cross-Site Scripting

Zikula Application Framework 1.2.2 - index.php?func Cross-Site Scripting source: https://www.securityfocus.com/bid/39717/info Zikula Application Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this...

Secunia Research: Pulse CMS login.php Arbitrary File Writing Vulnerability

====================================================================== Secunia Research 24/03/2010 - Pulse CMS login.php Arbitrary File Writing Vulnerability - ====================================================================== Table of Contents Affected...

Pulse cms XSS Vulnerabilities

Exploit for unknown platform in category web applications ============================= Pulse cms XSS Vulnerabilities ============================= Exploit Title: Pulse cms XSS Vulnerabilities Date: 19-02-2010 Author: Th3 RDX Software Link: No Download Link Version: 1.2.2 Tested on: Demo Site...

Wireshark 'wiretap/erf.c' Unsigned Integer Wrap Vulnerability (Nov 2009) - Windows

Wireshark is prone to unsigned integer wrap vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...

Wireshark 'wiretap/erf.c' Unsigned Integer Wrap Vulnerability - Nov09 (Windows)

This host is installed with Wireshark and is prone to unsigned integer wrap vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkwiretapdosvulnnov09win.nasl 4970 2017-01-09 15:00:59Z teissa $ Wireshark 'wiretap/erf.c' Unsigned Integer Wrap Vulnerability - Nov09 Windows Authors: Antu Sanadi...