CVE-2013-6338

The dissectsipcommon function in epan/dissectors/packet-sip.c in the SIP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 does not properly initialize a data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

UBUNTU-CVE-2013-4930

The dissectdvbcitpduhdr function in epan/dissectors/packet-dvbci.c in the DVB-CI dissector in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not validate a certain length value before decrementing it, which allows remote attackers to cause a denial of service assertion failure and...

UBUNTU-CVE-2013-3559

epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.8.x before 1.8.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service integer overflow, and heap memory corruption or NULL pointer dereference, and application crash via a malformed...

DEBIAN-CVE-2013-2686

main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict Content-Length values, which...

DEBIAN-CVE-2013-2477

The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service application crash via a malformed packet...

CVE-2013-2488

The CVE-2013-2488 issue affects the DTLS dissector in Wireshark, with versions 1.6.x before 1.6.14 and 1.8.x before 1.8.6 lacking validation of the fragment offset prior to the reassembly state machine. This can cause a denial of service (application crash) due to writes to invalid memory when a ...

CVE-2013-1583

The dissectversion4primaryheader function in epan/dissectors/packet-dtn.c in the DTN dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 accesses an inappropriate pointer, which allows remote attackers to cause a denial of service application crash via a malformed packet...

Wireshark 1.8.x < 1.8.1 Multiple Denial of Service Vulnerabilities

The installed version of Wireshark is 1.8.x before 1.8.1. This version is affected by the following vulnerabilities : - An error exists in the 'PPP' dissector that can cause the application to crash when reading a malformed packet from either the wire or from a capture file. CVE-2012-4048 - An...

PHPNet <= 1.8 (ler.php) SQL Injection Vulnerability

Exploit for php platform in category web applications SQL Injection This exploit is for a vulnerability in ler.php, but are the same vulnerability on imprimir.php and imagem.php. ler.php?id=SQLi imprimir.php?id=SQLi imagem.php?id=SQLi Usage: php file.php http://server/path/ Login bypass In login...

Wordpress Plugins (wp-easy-gallery v1.8) Arbitrary Shell Upload

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

PT-2012-4386 · Digium · Asterisk

Name of the Vulnerable Software and Affected Versions: Asterisk Open Source versions 1.8.x through 1.8.12.0 Asterisk Open Source versions 10.x through 10.4.0 Certified Asterisk versions 1.8.11-cert through 1.8.11-cert1 Description: The issue allows remote authenticated users to cause a denial of...

Logsurfer: Arbitrary code execution

Background Logsurfer is a real time log monitoring and analysis tool. Description Logsurfer log files may contain substrings used for executing external commands. The prepareexec function in src/exec.c contains a double-free vulnerability. Impact A remote attacker could inject specially-crafted...

CVE-2010-2246

feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2010-2246

feh before 1.8, when the --wget-timestamp option is enabled, might allow remote attackers to execute arbitrary commands via shell metacharacters in a URL...

CVE-2011-0025

IcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify signatures for JAR files that 1 are "partially signed" or 2 signed by multiple entities, which allows remote attackers to trick users into executing code that appears to come from a trusted source...

krb5: null pointer dereference in GSS-API library leads to DoS (MITKRB5-SA-2010-005)

The kgacceptkrb5 function in krb5/acceptseccontext.c in the GSS-API library in MIT Kerberos 5 aka krb5 through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of...

CVE-2010-1323

MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...

MediaWiki 1.8 - 1.15.4 'api.php' Information Disclosure Vulnerability

MediaWiki is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Moodle XSS and CSRF Vulnerabilities

Moodle is prone to cross-site ccripting XSS and cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Moodle Multiple Vulnerabilities

This host is running Moodle and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmoodlemultvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Moodle Multiple Vulnerabilities Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This...