Lucene search
+L

9662 matches found

UbuntuCve
UbuntuCve
•added 2009/12/23 12:00 a.m.•42 views

CVE-2009-4145

nm-connection-editor in NetworkManager NM 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network...

2.1CVSS5.9AI score0.00383EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2009/12/15 12:00 a.m.•21 views

PT-2009-4833 · Red Hat · Red Hat Jboss Enterprise Application Platform

Name of the Vulnerable Software and Affected Versions: Red Hat JBoss Enterprise Application Platform versions 4.2.0 through 4.2.0.CP07, 4.2.2GA and earlier, 4.3 versions prior to 4.3.0.CP07, 5.1.0GA and earlier Description: The issue affects the Web Console in the Application Server, allowing...

4.3CVSS6.2AI score0.0253EPSS
SaveExploits1References17
RedHat Linux
RedHat Linux
•added 2009/12/09 11:51 p.m.•18 views

JBoss Application Server Web Console XSS

Multiple cross-site scripting XSS vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML...

4.3CVSS5.8AI score0.0253EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2009/12/09 11:32 p.m.•16 views

JBoss Application Server Web Console XSS

Multiple cross-site scripting XSS vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML...

4.3CVSS5.8AI score0.0253EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2009/12/09 11:14 p.m.•15 views

JBoss Application Server Web Console XSS

Multiple cross-site scripting XSS vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML...

4.3CVSS5.8AI score0.0253EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2009/11/20 12:00 a.m.•48 views

Adobe Photoshop Elements Active File Monitor Service Privilege Escalation (APSB09-17)

Binary data adobeactivefilemonitorsvcprivescalation.nbin...

7.8CVSS7.3AI score0.01953EPSS
SaveExploits3References3
zdt
zdt
•added 2009/11/11 12:00 a.m.•23 views

Adobe Photoshop Elements Active File Monitor Service Local Privilege

Exploit for unknown platform in category local exploits ============================================================================================= Adobe Photoshop Elements Active File Monitor Service Local Privilege Escalation Vulnerability...

6.8AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/11/11 12:00 a.m.•26 views

Adobe Photoshop Elements Active File Monitor Service Local Privilege Escalation Vulnerability

No description provided by source. To exploit this issue, attackers require local, interactive access to an affected computer. The following example commands are available: sc stop "AdobeActiveFileMonitor8.0" sc config "AdobeActiveFileMonitor8.0" binPath= "cmd /c net user adobe kills /add net...

7.1AI score
SaveExploits0
NVD
NVD
•added 2009/11/10 7:30 p.m.•24 views

CVE-2009-2829

Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via vectors involving processing of XML log documents by other services, related to a "log injection" issue...

5CVSS6.3AI score0.0234EPSS
SaveExploits1References4
Prion
Prion
•added 2009/11/10 7:30 p.m.•26 views

Sql injection

Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via vectors involving processing of XML log documents by other services, related to a "log injection" issue...

5CVSS6.9AI score0.0234EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2009/11/10 7:00 p.m.•67 views

CVE-2009-2829

The CVE-2009-2829 issue affects Apple Mac OS X 10.5.8, where Event Monitor mishandles crafted authentication data sent to the SSH daemon, enabling log-injection that can lead to denial of service when logs are processed by other services. This is tied to a vulnerability in processing XML log docu...

5CVSS7AI score0.0234EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2009/11/10 7:00 p.m.•32 views

CVE-2009-2829

Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via vectors involving processing of XML log documents by other services, related to a "log injection" issue...

7AI score0.0234EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/11/10 12:00 a.m.•6 views

CVE-2009-2829: Undefined Security Weakness

Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via vectors involving processing of XML log documents by other services, related to a "log injection" issue...

5CVSS5.9AI score0.0234EPSS
SaveExploits1References2
zdt
zdt
•added 2009/10/29 12:00 a.m.•36 views

Adobe Photoshop Elements Active File Monitor Service Local Privilege

Exploit for unknown platform in category local exploits =============================================================================== Adobe Photoshop Elements Active File Monitor Service Local Privilege Escalation ===============================================================================...

6.8AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/10/29 12:00 a.m.•26 views

Adobe Photoshop Elements Active File Monitor Service Local Privilege Escalation

No description provided by source. To exploit this issue, attackers require local, interactive access to an affected computer. The following example commands are available: sc stop "AdobeActiveFileMonitor8.0" sc config "AdobeActiveFileMonitor8.0" binPath= "cmd /c net user adobe kills /add net...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/10/29 12:00 a.m.•19 views

Adobe Photoshop Elements - Active File Monitor Service Privilege Escalation

Adobe Photoshop Elements - Active File Monitor Service Privilege Escalation To exploit this issue, attackers require local, interactive access to an affected computer. The following example commands are available: sc stop "AdobeActiveFileMonitor8.0" sc config "AdobeActiveFileMonitor8.0" binPath=...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/10/29 12:00 a.m.•47 views

Adobe Photoshop Elements - Active File Monitor Service Privilege Escalation

To exploit this issue, attackers require local, interactive access to an affected computer. The following example commands are available: sc stop "AdobeActiveFileMonitor8.0" sc config "AdobeActiveFileMonitor8.0" binPath= "cmd /c net user adobe kills /add && net localgroup Administrators adobe /ad...

7.8CVSS7.1AI score0.01953EPSS
SaveExploits3
OpenVAS
OpenVAS
•added 2009/10/10 12:00 a.m.•55 views

SLES9: Security update for OpenLDAP 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2-back-meta openldap2-back-monitor openldap2-back-ldap openldap2 openldap2-devel openldap2-back-perl openldap2-client For more information, please...

4CVSS7.5AI score0.03053EPSS
SaveExploits2References1
NVD
NVD
•added 2009/09/30 3:30 p.m.•33 views

CVE-2009-3489

Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to 1 stop the service via the stop command, 2 execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or 3 restart...

7.8CVSS8AI score0.01953EPSS
SaveExploits3References7
Prion
Prion
•added 2009/09/30 3:30 p.m.•29 views

Command injection

Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to 1 stop the service via the stop command, 2 execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or 3 restart...

6.9CVSS7.8AI score0.01953EPSS
SaveExploits3References7Affected Software1
Rows per page
Query Builder