Microsoft Active Directory LDAP Server - Username Enumeration

Microsoft Active Directory LDAP Server - Username Enumeration source: https://www.securityfocus.com/bid/32305/info Microsoft Active Directory is prone to a username-enumeration weakness because of a design error in the application when verifying user-supplied input. Attackers may exploit this...

Sun Java Web Start Remote Command Execution Vulnerability (Linux)

This host is running Sun Java Web Start and is prone to Remote Command Execution Vulnerability. OpenVAS Vulnerability Test $Id: gbsunjavawscodeexecvulnlin.nasl 7174 2017-09-18 11:48:08Z asteins $ Sun Java Web Start Remote Command Execution Vulnerability Linux Authors: Veerendra GG Copyright:...

Sun Java Web Start Remote Command Execution Vulnerability - Windows

Sun Java Web Start is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sun Java Web Start Remote Command Execution Vulnerability (Windows)

This host is running Sun Java Web Start and is prone to Remote Command Execution Vulnerability. OpenVAS Vulnerability Test $Id: gbsunjavawscodeexecvulnwin.nasl 7174 2017-09-18 11:48:08Z asteins $ Sun Java Web Start Remote Command Execution Vulnerability Windows Authors: Veerendra GG Copyright:...

Mantis < 1.1.4 HTTPS Session Cookie Secure Flag Weakness

Binary data 4694.prm...

CVE-2008-4731: Undefined Security Weakness

Multiple unspecified vulnerabilities in YaCy before 0.61 have unknown impact and attack vectors...

NetScaler web management cookie cipher weakness

The remote web server is prone to an information disclosure attack. Description : The version of the Citrix NetScaler web management interface on the remote host uses weak encryption for protecting the HTTP cookie content by XORing sensitive values, including the username and password, with a fix...

CVE-2008-4692: Undefined Security Weakness

The Native Managed Provider for .NET component in IBM DB2 8 before FP17, 9.1 before FP6, and 9.5 before FP2, when a definer cannot maintain objects, preserves views and triggers without marking them inoperative or dropping them, which has unknown impact and attack vectors...

Mozilla Firefox 3 - ftp:// URL Multiple File Format Handling XSS

Mozilla Firefox 3 ftp:// URL Multiple File Format Handling XSS. CVE-2008-4723. Remote exploit for windows platform source: http://www.securityfocus.com/bid/31855/info Mozilla Firefox 3 is prone to a cross-site scripting weakness that arises because the software fails to handle specially crafted...

CVE-2008-4630: Undefined Security Weakness

Multiple unspecified vulnerabilities in Midgard Components MidCOM Framework before 8.09.1 have unknown impact and attack vectors...

CVE-2008-4615: Undefined Security Weakness

Unspecified vulnerability in iutils.asp in PortalApp before 4.01a has unknown impact and attack vectors...

CVE-2008-4595: Undefined Security Weakness

Multiple unspecified vulnerabilities in Slaytanic Scripts Content Plus 2.1.1 have unknown impact and remote attack vectors...

CVE-2008-4598: Undefined Security Weakness

Unspecified vulnerability in Shindig-Integrator 5.x, a module for Drupal, has unspecified impact and remote attack vectors related to "numerous flaws" that are not related to XSS or access control, a different vulnerability than CVE-2008-4596 and CVE-2008-4597...

CVE-2008-3986: Undefined Security Weakness

Unspecified vulnerability in the Oracle Discoverer Administrator component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows local users to affect confidentiality via unknown vectors...

CVE-2008-3545: Undefined Security Weakness

Unspecified vulnerability in ovtopmd in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3536, CVE-2008-3537, and CVE-2008-3544. NOTE: due to insufficient details from the...

drupal -- multiple vulnerabilities

The Drupal Project reports: A logic error in the core upload module validation allowed unprivileged users to attach files to content. Users can view files attached to content which they do not otherwise have access to. If the core upload module is not enabled, your site will not be affected. A...

CVE-2008-4292: Undefined Security Weakness

Opera before 9.52 does not check the CRL override upon encountering a certificate that lacks a CRL, which has unknown impact and attack vectors. NOTE: it is not clear whether this is a vulnerability, but the vendor included it in a security section of the advisory...

PHP 5.2.6 - create_function() Code Injection (2)

PHP 5.2.6 - createfunction Code Injection 2 source: https://www.securityfocus.com/bid/31398/info PHP is prone to a code-injection weakness because it fails to sufficiently sanitize input to 'createfunction'. Note that the anonymous function returned need not be called for the supplied code to be...

PHP 5.2.6 - create_function() Code Injection (1)

PHP 5.2.6 - createfunction Code Injection 1 source: https://www.securityfocus.com/bid/31398/info PHP is prone to a code-injection weakness because it fails to sufficiently sanitize input to 'createfunction'. Note that the anonymous function returned need not be called for the supplied code to be...

WordPress <= 2.6.1 Multiple Vulnerabilities

WordPress is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescripti...