Fedora Update for kf5-kpimtextedit FEDORA-2016-1b042a79bd

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for perl-Image-Info FEDORA-2016-f8fd3891f8

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Common Log File System Driver Elevation of Privilege Vulnerability (3193706)

This host is missing an important security update according to Microsoft Bulletin MS16-134. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeFloat FTP Server 'SITE ZONE' Command Buffer Overflow Vulnerability

Freefloat FTP Server is a free software package for uploading files and managing wired and wireless devices from the Swedish company Freefloat. A stack buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0. A remote attacker can exploit this vulnerability to execute arbitrary...

PCMan FTP Server 2.0.7 SITE CHMOD Buffer Overflow

!/usr/bin/env python -- coding: utf-8 -- Exploit Title: PCMan FTP Server 2.0 BoF SITE CHMOD Command Date: 04/11/2016 Exploit Author: Luis Noriega Tested on: Windows XP Profesional V. 5.1 Service Pack 3 CVE : n/a import socket shellcode with metasploit: msfvenom -p windows/exec CMD=calc.exe...

PT-2016-7630 · Tarantool · Tarantool

Name of the Vulnerable Software and Affected Versions: Tarantool version 1.7.2.0-g8e92715 Description: The issue is related to an out-of-bounds array access in the xrow header decode function. A specially crafted packet can cause the function to access an element outside the bounds of a global...

PT-2016-6573 · Mysql Server · Mysql Connectors

Name of the Vulnerable Software and Affected Versions: MySQL Connector versions 2.1.3 and earlier MySQL Connector versions 2.0.4 and earlier Description: The issue affects confidentiality, integrity, and availability. It can be exploited by remote attackers via vectors related to Connector/Python...

Oracle Database Server Unspecified Vulnerability (Oct 2016)

Oracle Database Server is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft SharePoint Server and Foundation Multiple Vulnerabilities (3134226)

This host is missing a critical security update according to Microsoft Bulletin MS16-015. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SOL95432245 - PHP vulnerability CVE-2016-5768

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

Microsoft Internet Messaging API Information Disclosure Vulnerability (3196067)

This host is missing a moderate security update according to Microsoft Bulletin MS16-126. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Simple PHP Blog 0.8.4 Cross Site Request Forgery

that will add a new user as administrator. Once exploited, the attacker can login to the admin panel http://localhost/simple/login.php using the username and the password he posted in the form. CSRF PoC Code ============= -- inp...

Aura Video Converter 1.6.3 - DLL Hijacking Exploit

Document Title: =============== Aura Video Converter 1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1965 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ==================================== 1965...

Sophos UTM 9.405-5 / 9.404-5 Information Disclosure

Product: Sophos UTM Vendor: Sophos ltd. Internal reference: ? Bug ID Vulnerability type: Information Disclosure Vulnerable version: 9.405-5, 9.404-5 and possible other versions affected not tested Vulnerable component: Frontend Report confidence: yes Solution status: Not fixed by Vendor, no furth...

CentOS Update for kmod-kvm CESA-2016:1943 centos5

Check the version of kmod-kvm SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882562";...

Cisco IOS Software H.323 Message Validation Denial of Service Vulnerability (cisco-sa-20160928-h323)

A vulnerability in the H.323 subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to create a denial of service DoS condition on an affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

MyBB < 1.8.7 Multiple Vulnerabilities

MyBB is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb"; ifdescription...

DEBIAN-CVE-2016-4809

The archivereadformatcpioreadheader function in archivereadsupportformatcpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a CPIO archive with a large symlink...

H2O HTTP Server < 2.0.4, 2.1.x < 2.1.0-beta3 Format String Vulnerability

H2O HTTP Server is prone to a format string vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:h2oproject:h2o"; if...

Open-Xchange App Suite 7.8.2 - Cross-Site Scripting

Product: OX App Suite Vendor: OX Software GmbH Internal reference: 46484 Bug ID Vulnerability type: Cross Site Scripting CWE-80 Vulnerable version: 7.8.2 and earlier Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.6.2-rev46, 7.6.3-rev1...