Secunia Security Advisory - A vulnerability has been reported in Greenbone Security Assistant, which can be exploited by malicious people to conduct cross-site request forgery attacks.
37debd1bf626f98acb9eaa4b32dc87269e19047125e5ab113b32be9e2de94075Secunia Security Advisory - Red Hat has issued an update for java-1.6.0-openjdk. This fixes a security issue and a vulnerability, which can be exploited by malicious people to disclose system information and compromise a user's system.
b2a8be57f288bcdf56f818bc0c2295298a2177d274df74fc9554d0282abecc92Secunia Security Advisory - A vulnerability has been discovered in PivotX, which can be exploited by malicious people to conduct cross-site scripting attacks.
002e8bcf313984811f3a20a9752f64695d39fcf4a7b6ac9c9e95143a6d641111Secunia Security Advisory - Multiple vulnerabilities have been reported in Cisco Content Services Gateway (CSG2), which can be exploited by malicious people to bypass certain security restrictions and cause a DoS (Denial of Service).
c0fbc6b716c1b64c6b47836554320dd113c2665bf7ff70450ae6185fd1643f2dSecunia Security Advisory - Red Hat has acknowledged a vulnerability in JBoss Web Framework Kit, which can be exploited by malicious people to compromise a vulnerable system.
3af3122a7f371e4c003a504c6623e53f580f52097e087ddd32a67ce27798335eSecunia Security Advisory - A vulnerability has been reported in the Mail gem for Ruby, which can be exploited by malicious people to compromise a vulnerable system.
53c160d0fdf671e260bb245c7453489a7d3b2622a1619cb3663f009fddd8ff93Secunia Security Advisory - Salvatore Fresta has discovered a vulnerability in the B2 Portfolio component for Joomla!, which can be exploited by malicious people to conduct SQL injection attacks.
9f322af32f454f130acdfbcafeea683eb1132505d9ea6d60e91ac9dd944d7c3dSecunia Security Advisory - A vulnerability has been reported in Novell GroupWise, which can be exploited by malicious people to compromise a vulnerable system.
9efbb6cb3b6b419ddab5bf83ee6f5feb57db965cb988d61cdfc2b5d922f3d499Secunia Security Advisory - A vulnerability has been reported in Novell ZENworks Handheld Management, which can be exploited by malicious people to compromise a vulnerable system.
4ac3fa15c58bd7f18afc1a4f0f90353dd026765bc8aa663f929cd2f2e903f4abZero Day Initiative Advisory 11-027 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the gwwww1.dll module responsible for parsing VCALENDAR data within e-mail messages. When the code encounters a TZID variable it allocates up to 0xFFFF bytes for the variable's value. It then proceeds to copy the value into the fixed-length buffer without checking if it will fit. By specifying a large enough string in the e-mail, an attacker can overflow the buffer and execute arbitrary code under the context of the SYSTEM user.
bfadedf31fca2f8d915a1dbc199f76796203e866613a9de193c5458c5eaff791VSR identified multiple memory corruption vulnerabilities in OpenOffice.org. By convincing a victim to open a maliciously crafted RTF or Word document, arbitrary code may be executed on the victim's machine. Versions prior to 3.3 are affected.
76148fa5fbd6a847442ba5146f5992a028c81ea3ce77f8550dd19a9ce932f325phpMyAdmin versions 3.4.x and 3.4.0 beta 2 suffer from a stored cross site scripting vulnerability.
6c62a516dcba43d0e52fddd8b8bbc0b20bf6c067e550603506999902959ff3d8Mandriva Linux Security Advisory 2011-019 - libuser before 0.57 uses a cleartext password value of x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values.
546b0c47a9e46333710256def46e0756a918cb78d7a25da5f645e1e6d5f04326THC-Hydra is a high quality parallelized login hacker for Samba, Smbnt, Cisco AAA, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support, parallel scans, and is part of Nessus.
c0d473c29d57fe44c5dd301b3161fdf853b3bbac57c099acf47cffb4d2707e64Cisco Security Advisory - A service policy bypass vulnerability exists in the Cisco Content Services Gateway - Second Generation (CSG2), which runs on the Cisco Service and Application Module for IP (SAMI). Under certain configurations this vulnerability could allow customers to access sites that would normally match a billing policy to be accessed without being charged to the end customer and customers to access sites that would normally be denied based on configured restriction policies.
4432edcfbea1f8eeb942bb6574f8e889322ed7246b94aadebd2bf3cf6b21eb50SimpGB versions 1.49.02 and below suffer from cross site scripting, brute force, insufficient anti-automation, and abuse of functionality vulnerabilities.
9cb4976c249efe8db919a1b089f43b558fc4fcc89e16276cf184713fa3db6958NinkoBB version 1.3RC5 suffers from a stored cross site scripting vulnerability.
fdd928f2d4a74862bfd438ea010c17bdf53d51bdf3ec9be94e314271f040f726MultiPowUpload version 2.1 suffers from a shell upload vulnerability.
fcaaf2e9ceb9240d800edc7ec101f02ad1b4341d7acb5721fc1c07effbbe1251Froxlor version 0.9.15 suffers from a remote file inclusion vulnerability.
8ebcce5b4c99d57ff95d79211a92b229bf99bb5d0ed9f349262716d627c8d152Class.Upload version 0.30 from Verot.net suffers from a shell upload vulnerability.
57e81ecfabfd4c15edb4d0048181da354a8f1ed7f0c0d1146f653dfc78dd81bbDebian Linux Security Advisory 2151-1 - Several security related problems have been discovered in the OpenOffice.org package that allows malformed documents to trick the system into crashes or even the execution of arbitrary code.
17dc16e850b0b68b6eb12c09418a09d62b2bc4ec50d33f8afa018d58fd095e77PRTG version 8.1.2.1809 suffers from reflective cross site scripting vulnerabilities.
5b1f334716c043cde5774b156ffe1d0c1f35148ba2ba81383f236d22db6d6bb9Zero Day Initiative Advisory 11-026 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Zenworks Handheld Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Access Point process (ZfHIPCnd.exe) which listens by default on TCP port 2400. The problem occurs due to the application copying arbitrary sized data from a packet into a statically sized buffer. Due to the application not accommodating for the variable sized data during initialization of this buffer a buffer overflow will occur. This can lead to code execution under the context of the application.
646c3c9ee7e6a2694f8a45540159142ec7e8ea2d273c445e829eb3daf2f0ac07Google suffers from an open redirect vulnerability.
7cee06e79e16c8193e238d5d12c089fe8d6c5c0c20c538bf2fe35d8204122008AWCM version 2.2 Final suffers from a local file inclusion vulnerability.
c75039683c3cdf0da5418da94bb4cd658ef218c384534c202800a90748494476
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed