348 matches found
Kate's Video Toolkit Version 7.0 (.wav) - Crash POC
Kate's Video Toolkit version 7.0 crash proof of concept denial of service exploit that creates a malicious WAV file. Exploit Title: Kate's Video Toolkit Version 7.0 .wav - Crash POC Date: 14-07-2013 Exploit Author: ariarat Vendor Homepage: http://fakewebcam.com/Free-Video-Toolkit.asp Software Lin...
IBM GSKit 7.x < 7.0.4.45 / 8.0.14.x < 8.0.14.27 TLS Side-Channel Timing Information Disclosure
The version of IBM Global Security Kit GSKit installed on the remote host is 7.0.x prior to 7.0.4.45 or 8.0.14.x prior to 8.0.14.27. It is, therefore, affected by an information disclosure vulnerability. The Transport Layer Security TLS protocol does not properly consider timing side-channel...
Nuance PDF Reader Multiple Memory Corruption Vulnerabilities
Nuance PDF Reader is prone to multiple memory-corruption vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IShang CMS 5.0 / 7.0 SQL Injection
Exploit Title : IShang CMS Login Page Bypass Vulnerability Exploit Author : Adrian Vendor Homepage : http://www.ishang.net/ Google Dork : Use Your Brain Date: 2013/12/28 Tested On : Win8 Software Link : http://www.ishang.net/ Version : 7.0 / 5.0 1 http://site.com/path/admin/ 2...
Buffer overflow
IBM WebSphere Message Broker 6.1 before 6.1.0.11, 7.0 before 7.0.0.5, and 8.0 before 8.0.0.2 has incorrect ownership of certain uninstaller Java Runtime Environment JRE files, which might allow local users to gain privileges by leveraging access to uid 501 or gid 300...
Design/Logic Flaw
IBM WebSphere Application Server WAS 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.5, and 8.5.x Full Profile before 8.5.0.1, when the PM44303 fix is installed, does not properly validate credentials, which allows remote authenticated users to obtain administrative access via...
Oracle iPlanet Web Server 7.0.x < 7.0.15 Multiple Vulnerabilities
According to its self-reported version, the Oracle iPlanet Web Server formerly Sun Java System Web Server running on the remote host is 7.0.x prior to 7.0.15. It is, therefore, affected by the following vulnerabilities : - Multiple cross-site scripting vulnerabilities exist due to parameter...
PHP Address Book 7.0 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53598/info PHP Address Book is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...
PHP Address Book 7.0 - Multiple Cross-Site Scripting Vulnerabilities
PHP Address Book 7.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/53598/info PHP Address Book is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
HP System Management Homepage (SMH) Multiple Unspecified Vulnerabilities
HP System Management Homepage SMH is prone to multiple unspecified vulnerabilities. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Apache Tomcat 7.0.x < 7.0.23 Hash Collision DoS
Binary data 6334.pasl...
IBM WebSphere Application Server Hash Collisions DOS Vulnerability
The host is running IBM WebSphere Application Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbibmwashashcollisionsdosvuln.nasl 5940 2017-04-12 09:02:05Z teissa $ IBM WebSphere Application Server Hash Collisions DOS Vulnerability Authors: Antu Sanadi...
IBM WebSphere Application Server Hash Collisions DoS Vulnerability (Jan 2012)
IBM WebSphere Application Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
tomcat: Multiple weaknesses in HTTP DIGEST authentication
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check realm values, which might allow remote attackers to bypass intended access restrictions by leveraging the availability of a protection space with weak...
IBM Web Experience Factory Multiple XSS Vulnerabilities
IBM Web Experience Factory is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
InduSoft Web Studio Multiple Remote Code Execution Vulnerabilitites
Indusoft Web Studio is prone to multiple remote code execution vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Products Browser Engine Multiple Unspecified Vulnerabilities - Mac OS X
Mozilla Firefox/Thunderbird/Seamonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AWStats 'awredir.pl' Multiple Cross-Site Scripting Vulnerabilities
This host is running AWStats and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbawstatsawredirmultxssvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ AWStats 'awredir.pl' Multiple Cross-Site Scripting Vulnerabilities Authors: Sooraj KS Copyright: Copyrigh...
Fedora 15 : firefox-7.0-1.fc15 / gnome-python2-extras-2.25.3-35.fc15 / mozvoikko-1.9.0-8.fc15 / etc (2011-13465)
Update to new upstream Firefox version 7.0, fixing multiple security issues detailed in the upstream advisories : - http://www.mozilla.org/security/known-vulnerabilities/fi refox.htmlfirefox7 This update also includes all packages depending on gecko-libs rebuilt against the new version of Firefox...
Mozilla Thunderbird < 7.0 Multiple Vulnerabilities
The installed version of Thunderbird is earlier than 7.0 and thus, is potentially affected by the following security issues : - If an attacker could trick a user into holding down the 'Enter' key, via a malicious game, for example, a malicious application or extension could be downloaded and...