UBUNTU-CVE-2015-7654

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary...

Oracle Linux 6 / 7 : lxc (ELSA-2015-3065)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-3065 advisory. - Orabug 21533491 CVE-2015-1334: Don't use the container's /proc during attach Tenable has extracted the preceding description block directly from...

RHEL 7 : docker (RHSA-2015:0623)

Updated docker packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having Low security impact. Common Vulnerability Scoring System CVSS base scores, which give...

PT-2015-3608

Name of the Vulnerable Software and Affected Versions ManageEngine SupportCenter Plus versions 7.9 through 7917 Description A directory traversal issue allows remote attackers to read arbitrary files by using a ..%2f dot dot encoded slash in the attach parameter to "WorkOrder.do" in the file...

CVE-2014-100002: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ManageEngine SupportCenter Plus 7.9 before 7917 allows remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the attach parameter to WorkOrder.do in the file attachment for a new ticket...

openSUSE Security Update : xen (openSUSE-SU-2014:1279-1)

XEN was updated to fix various bugs and security issues. Security issues fixed : - bnc897657 - CVE-2014-7188: XSA-108 Improper MSR range used for x2APIC emulation - bnc895802 - CVE-2014-7156: XSA-106: Missing privilege level checks in x86 emulation of software interrupts - bnc895799 -...

UBUNTU-CVE-2014-3172

The Debugger extension API in browser/extensions/api/debugger/debuggerapi.cc in Google Chrome before 37.0.2062.94 does not validate a tab's URL before an attach operation, which allows remote attackers to bypass intended access limitations via an extension that uses a restricted URL, as...

Borland InterBase PWD_db_aliased() Buffer Overflow

No description provided by source. $Id: ibpwddbaliased.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

CVE-2012-3154

Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.0 allows remote authenticated users to affect confidentiality, related to ATTACH...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.0 allows remote authenticated users to affect confidentiality, related to ATTACH...

CVE-2012-3154

CVE-2012-3154 affects Oracle Agile PLM Framework within Oracle Supply Chain Products Suite 9.3.1.0. The vulnerability is described as unspecified and related to ATTACH, allowing remote authenticated users to affect confidentiality. The CVE entry cites partial confidentiality impact with network a...

CVE-2012-3154

Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.0 allows remote authenticated users to affect confidentiality, related to ATTACH...

CVE-2012-3154: Undefined Security Weakness

Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1.0 allows remote authenticated users to affect confidentiality, related to ATTACH...

PT-2012-4521

Name of the Vulnerable Software and Affected Versions Oracle Supply Chain Products Suite version 9.3.1.0 Description The issue affects confidentiality and is related to the ATTACH component in the Oracle Agile PLM Framework. It can be exploited by remote authenticated users. Recommendations For...

PT-2012-1460 · Unknown · Pthreads-Win32

Name of the Vulnerable Software and Affected Versions: Pthreads-win32 version 2.8.0 Description: The issue is related to an untrusted search path vulnerability in the pthread win32 process attach np function in pthreadGC2.dll. This allows local users to gain privileges via a Trojan horse...

ActFax 4.31 Local Privilege Escalation Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Title: ActFax 4.31 Local Privilege Escalation Exploit Author: Craig Freyman @cd1zz Discovered: July 10, 2012 Vendor Notified: June 12, 2012 Description: http://www.pwnag3.com/2012/08/actfax-local-privilege-escalation.html...

SuSE 11.1 Security Update : Xen and libvirt (SAT Patch Number 5796)

This collective update 2012/02 for Xen provides fixes for the following reports : Xen : - 740165: Fix heap overflow in e1000 device emulation applicable to Xen qemu - CVE-2012-0029 - 739585: Xen block-attach fails after repeated attach/detach - 727515: Fragmented packets hang network boot of HVM...

SuSE 11.1 Security Update : Xen and libvirt (SAT Patch Number 5796)

This collective update 2012/02 for Xen provides fixes for the following reports : Xen : - 740165: Fix heap overflow in e1000 device emulation applicable to Xen qemu - CVE-2012-0029 - 739585: Xen block-attach fails after repeated attach/detach - 727515: Fragmented packets hang network boot of HVM...

Borland Interbase - 'SVC_attach()' Remote Buffer Overflow (Metasploit)

$Id: ibsvcattach.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Joomla Job Line Cross Site Scripting

=================================================== Joomla comjobline Xss Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...