375 matches found
Wireshark Lua Script File Arbitrary Code Execution Vulnerability - Windows
Wireshark is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...
CVE-2011-2891
Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty Itemid array parameter to index.php, which reveals the installation path in an error message, a different vulnerability than CVE-2011-2488...
Code injection
BarnOwl before 1.6.2 does not check the return code of calls to the 1 ZPending and 2 ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors...
Asterisk T.38 Negotiation Remote DoS Vulnerability (AST-2010-001)
Asterisk is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk";...
FireStats < 1.6.2 Multiple Vulnerabilities
According to its version number, the install of FireStats running on the remote host is affected by multiple vulnerabilities : - A remote file include vulnerability in the 'fsjavascript' parameter of 'firestats-wordpress.php'. CVE-2009-2143 - An unspecified SQL injection vulnerability...
PYSEC-2009-13
MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when aclhierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937...
Audacity 1.6.2 - .aup Remote Off-by-One Crash
Audacity 1.6.2 - .aup Remote Off-by-One Crash usage: exploit.py print "" print " Audacity 1.6.2 .aup file Remote off by one Crash Exploit\n" print " Author: Mountassif Moad " print " the best: Evil finger & v4 Team " print " Tested on: Windows XP Pro SP2 Fr\n" print " Greetings to: All friends"...
Audacity 1.6.2 (.aup File) Remote off by one Crash Exploit
Exploit for unknown platform in category dos / poc ========================================================== Audacity 1.6.2 .aup File Remote off by one Crash Exploit ========================================================== usage: exploit.py print "" print " Audacity 1.6.2 .aup file Remote off ...
Joomla Component joomlaXplorer <= 1.6.2 Remote Vulnerabilities
No description provided by source. ------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : HouSSaMix = Script : Joomla and Mambo Component joomlaxplorer = versi...
Joomla! Component JoomlaXplorer 1.6.2 - Remote s
Joomla! Component JoomlaXplorer 1.6.2 - Remote s ------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : HouSSaMix = Script : Joomla and Mambo Component...
Sql injection in Moodle
Hi, There is a sql injection in Moodle 1.6.1+ and maybe before versions : The "$blogEntry" parameter passed to "insertrecord" function in /blog/edit.php, is not checked properly . Version 1.6.2 has been released moodle.org. - Omid...
PT-2006-3182 · Mynews · Mynews
Name of the Vulnerable Software and Affected Versions: MyNews version 1.6.2 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the hash and page parameters. Recommendations: For...
MyNews 1.6.2 - Multiple Cross-Site Scripting Vulnerabilities
MyNews 1.6.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17823/info MyNews is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...
Debian DSA-105-1 : enscript - insecure temporary files
The version of enscript a tool to convert ASCII text to different formats in potato has been found to create temporary files insecurely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-105...
[SECURITY] [DSA-105-1] enscript creates temporary files insecurely
Package : enscript Problem type : insecure temporary files Debian-specific: no The version of enscript a tool to convert ASCII text to different formats has been found to create temporary files insecurely. This has been fixed in version 1.6.2-4.1 . wget url will fetch the file for you dpkg -i...