CVE-2010-0078

CVE-2010-0078 affects BEA WebLogic Server in the BEA Product Suite (versions 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.1). The vulnerability is described as unspecified and could allow a remote attacker to affect availability via unknown vectors. The connected CPU/patch context indicates Oracle’s January...

ASPX Spy (CVE-2008-1436; CVE-2009-0078; CVE-2009-0079; CVE-2009-0080)

ASPX Spy, is an ASPX program that allows easy control over a compromised web server. Using this program, an attacker can upload files through the web browser and execute them. A remote attacker may exploit web application vulnerabilities that will allow him to upload the ASPX Spy tool to a target...

CVE-2009-0078

The Windows Management Instrumentation WMI provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly implement isolation among a set of distinct processes that 1 all run under the NetworkService account or 2 all run under the...

CVE-2009-0078

CVE-2009-0078 pertains to the Windows WMI Service Isolation Vulnerability in Windows XP SP2/SP3, Server 2003 SP1/SP2, Vista, and Server 2008. The local privilege escalation arises from failure to properly isolate multiple processes running under NetworkService/LocalService accounts, enabling a lo...

Vulnerabilities in Windows Could Allow Elevation of Privilege (959454)

This host is missing a critical security update according to Microsoft Bulletin MS09-012. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VulnCheck KEV: CVE-2009-0078

The Windows Management Instrumentation WMI provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly implement isolation among a set of distinct processes that 1 all run under the NetworkService account or 2 all run under...

CVE-2009-0078

creationtimestamp| type| source ---|---|--- 2009-04-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32891...

FreeBSD Ports: mutt, ja-mutt

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: mutt, ja-mutt

The remote host is missing an update to the system as announced in the referenced advisory. VID 67c05283-5d62-11d8-80e3-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-0078

CVE-2008-0078 describes a remote-code-execution vulnerability in Internet Explorer caused by an Argument Handling Memory Corruption in the ActiveX control dxtmsft.dll (IE 5.01, 6 SP1/SP2, 7). A crafted image on a malicious webpage could allow an attacker to execute arbitrary code with the privile...

Internet Explorer Image Processing Memory Corruption (MS08-010; CVE-2008-0078)

Microsoft Internet Explorer is the most widely used Internet browser. The vulnerability is due to a memory corruption error in Microsoft Internet Explorer when handling argument validation, under certain circumstances, in image processing. A remote attacker could exploit this issue by convincing ...

CVE-2007-0078

Technical details about CVE-2007-0078 are not provided in the connected documents. The initial description notes a web-root access issue enabling a database download, but there are no vendor/product/version specifics or remediation steps in the supplied materials.

CVE-2006-0078

CVE-2006-0078 affects B-net Software 1.0. The described vulnerability is multiple cross-site scripting (XSS) where an attacker can inject arbitrary script/HTML via (1) name and (2) shout to shout.php, or (3) title and (4) message to guestbook.php. The description specifies the affected 1.0 versio...

HP-UX PHSS_28686 : s700_800 11.04 Virtualvault 4.6 OWS update

s700800 11.04 Virtualvault 4.6 OWS update : The remote HP-UX host is affected by multiple vulnerabilities : - A remotely exploitable potential vulnerability has been reported in CAN-2003-0078. - 1 A defect in the JavaTM Virtual Machine may allow illegal access to protected fields or methods of an...

CVE-2005-0078

CVE-2005-0078 affects KDE screensaver (kscreensaver) prior to KDE 3.0.5. The issue stems from not properly checking the return value of a function call, enabling a local attacker with physical access to cause a crash and potentially take over a locked desktop session. Public sources note upstream...

Debian DSA-253-1 : openssl - information leak

A vulnerability has been discovered in OpenSSL, a Secure Socket Layer SSL implementation. In an upcoming paper, Brice Canvel EPFL, Alain Hiltgen UBS, Serge Vaudenay EPFL, and Martin Vuagnoux EPFL, Ilion describe and demonstrate a timing-based attack on CBC cipher suites used in SSL and TLS. OpenS...

CVE-2004-0078

Buffer overflow in the index menu code menupadstring of menu.c for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via certain mail messages...

CVE-2004-0078

Buffer overflow in the index menu code menupadstring of menu.c for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via certain mail messages...

CVE-2004-0078

Affected software: Mutt up to version 1.4.1 and earlier. Root cause: buffer overflow in the index menu code (menu_pad_string in menu.c). Impact: remote denial of service (crash) and possible arbitrary code execution via certain mail messages. Evidence: CVE-2004-0078 references across multiple adv...

CVE-2003-0078

CVE-2003-0078 affects OpenSSL: ssl3_get_record in s3_pkt.c does not perform a MAC when padding is incorrect, causing a timing side channel that could aid padding/MAC verification discrimination and potentially lead to plaintext recovery. The vulnerability applies to OpenSSL versions before 0.9.7a...