PYSEC-2012-7

The django.http.HttpRequest.gethost function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host header values...

Wireshark 1.4.x < 1.4.15 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.4.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.15 advisory. - Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6...

Wireshark 1.4.x < 1.4.14 Multiple Denial of Service Vulnerabilities

The installed version of Wireshark is 1.4.x before 1.4.14. This version is affected by the following vulnerabilities : - An error exists in the 'PPP' dissector that can cause the application to crash when reading a malformed packet from either the wire or from a capture file. CVE-2012-4048 - An...

Wireshark ANSI A MAP Files Denial of Service Vulnerability (Mac OS X)

This host is installed with Wireshark and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkansimapdosvulnmacosx.nasl 5988 2017-04-20 09:02:29Z teissa $ Wireshark ANSI A MAP Files Denial of Service Vulnerability Mac OS X Authors: Madhuri D Copyright: Copyrigh...

CVE-2012-1596

CVE-2012-1596 is a Wireshark vulnerability in the mp2t_process_fragmented_payload function of the MP2T dissector (epan/dissectors/packet-mp2t.c). A packet with an invalid pointer value may trigger an incorrect memory-allocation attempt, causing an application crash (DoS). Public details across co...

Wireshark 1.4.x < 1.4.12 Multiple Denial of Service Vulnerabilities

The installed version of Wireshark is 1.4.x before 1.4.12. This version is affected by the following vulnerabilities : - An error exists in the pcap and pcap-ng parsers that can allow them to crash when reading 'ERF' data. Issue 6804 - An error exists in the 'ANSI A' dissector that can allow it t...

NeoAxis Web Player Zip File Directory Traversal Vulnerability

This host is installed with NeoAxis Web Player and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbneoaxiswebplayerzipfiledirtravvuln.nasl 5999 2017-04-21 09:02:32Z teissa $ NeoAxis Web Player Zip File Directory Traversal Vulnerability Authors: Sooraj KS Copyright...

NeoAxis Web Player Zip File Directory Traversal Vulnerability

NeoAxis Web Player is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Wireshark 1.4.x < 1.4.11 Multiple Vulnerabilities

The installed version of Wireshark is 1.4.x before 1.4.11. This version is affected by the following vulnerabilities : - Errors exist in the parsers for '5views', 'i4b', 'iptrace', 'netmon2' and 'novell' packets that can lead to application crashes. Issues 6663, 6666, 6667, 6668, 6669, 6670 - An...

OpenTFTP Server Read Request Buffer Overflow Vulnerability

OpenTFTP Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Advanced File Management 1.4 - users.php Cross-Site Scripting

Advanced File Management 1.4 - users.php Cross-Site Scripting source: https://www.securityfocus.com/bid/51339/info Advanced File Management is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

WordPress Theme Web Minimalist 1.1 - index.php Cross-Site Scripting

WordPress Theme Web Minimalist 1.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/49874/info The Web Minimalist theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

WordPress Theme Web Minimalist 1.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49874/info The Web Minimalist theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Wireshark 1.4.x < 1.4.9 Multiple Vulnerabilities

The installed version of Wireshark is 1.4.x before 1.4.9. This version is affected by the following vulnerabilities : - An error exists in IKE dissector that can allow denial of service attacks when processing certain malformed packets. CVE-2011-3266 - A buffer exception handling vulnerability...

Synergy Protocol Information Disclosure Vulnerability (Windows)

This host is installed with Synergy and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbsynergyprotocolinfodiscvulnwin.nasl 8189 2017-12-20 09:10:19Z cfischer $ Synergy Protocol Information Disclosure Vulnerability Windows Authors: Sooraj KS Copyright: Copyrigh...

Synergy Protocol Information Disclosure Vulnerability - Windows

Synergy is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:synergy-foss:synergy...

CVE-2010-1323

MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...

GeN3 1.4 SQL Injection

Exploit autor : u.f. Scripts : GeN3 Version 1.4 site : http://www.ptcpay.com/shop/browseproducts.php dork : mainforum.php?cat= Powered by GeN3 Version 1.4 ex : www.site.com/patch/mainforum.php?cat=-8+union+all+select+1,concataUsername,char58,aPassword,3,4,5,6,7+from+admins--...

DEBIAN-CVE-2009-4055

rtp.c in Asterisk Open Source 1.2.x before 1.2.37, 1.4.x before 1.4.27.1, 1.6.0.x before 1.6.0.19, and 1.6.1.x before 1.6.1.11; Business Edition B.x.x before B.2.5.13, C.2.x.x before C.2.4.6, and C.3.x.x before C.3.2.3; and s800i 1.3.x before 1.3.0.6 allows remote attackers to cause a denial of...

SquidGuard Multiple Buffer Overflow Vulnerabilities

SquidGuard is prone to multiple Buffer Overflow vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...