130 matches found
Oracle Java SE Multiple Vulnerabilities (March 2010 CPU)
The version of Oracle formerly Sun Java Runtime Environment JRE installed on the remote host is earlier than 6 Update 19 / 5.0 Update 24 / 1.4.226. Such versions are potentially affected by security issues in the following components : - ImageIO - Java 2D - JRE - Java Web Start, Java Plug-in -...
Mandriva Update for x11-driver-video-ati MDVA-2010:084 (x11-driver-video-ati)
Check for the Version of x11-driver-video-ati OpenVAS Vulnerability Test Mandriva Update for x11-driver-video-ati MDVA-2010:084 x11-driver-video-ati Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
Microsoft .NET Framework Type Verification Error (MS09-061; CVE-2009-0090; CVE-2009-0091)
The Microsoft .NET Framework is a software framework that includes a large library of coded solutions to common programming problems and a virtual machine that manages the execution of programs written specifically for the framework. A remote code execution vulnerability exists in the Microsoft...
MS09-061: Vulnerabilities in the Microsoft .NET Framework 2.0 Common Language Runtime Could Allow Remote Code Execution (974378)
Binary data 5221.prm...
MS09-061: Vulnerabilities in the Microsoft .NET Framework 3.5.1 Common Language Runtime Could Allow Remote Code Execution (974378)
Binary data 5224.prm...
MS09-061: Vulnerabilities in the Microsoft .NET Framework 2.0 SP1 Common Language Runtime Could Allow Remote Code Execution (974378)
Binary data 5222.prm...
MS09-061: Vulnerabilities in the Microsoft .NET Framework 2.0 SP2 Common Language Runtime Could Allow Remote Code Execution (974378)
Binary data 5223.prm...
Microsoft .NET Common Language Runtime Code Execution Vulnerability (974378)
This host is missing a critical security update according to Microsoft Bulletin MS09-061. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Immunity Canvas: MS09_061_CAS
Name| ms09061cas ---|--- CVE| CVE-2009-0091 Exploit Pack| CANVAS Description| MS09-061 Microsoft .NET CAS Type Verification Vulnerability Notes| URL: http://www.microsoft.com/technet/security/Bulletin/MS09-061.mspx CVE Name: CVE-2009-0091 VENDOR: Microsoft CVE Url:...
CVE-2009-0091
CVE-2009-0091 is a Microsoft .NET Framework Type Verification Vulnerability. The issue involves .NET Framework 2.0, 2.0 SP1, and 3.5 where a type-equality check in verifiable code could be bypassed, allowing remote code execution via crafted XBAP, ASP.NET, or .NET Framework applications. Public d...
Microsoft .NET Framework类型校验远程代码执行漏洞(MS09-059)
Bugraq ID: 36617 CVE ID:CVE-2009-0091 Microsoft .NET Framework是一个流行的软件开发工具包。 Microsoft .NET Framework存在一个远程代码执行漏洞,允许恶意Microsoft .NET应用程序绕过类型等式检查,恶意Microsoft .NET应用程序通过指派某个对象类型为其他类型,导致任意未管理代码执行。 目前没有详细漏洞细节提供。 Microsoft .NET Framework 1.x Microsoft .NET Framework 2.x Microsoft .NET Framework 3.x...
MS09-061: Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution (974378)
The remote Windows host is running a version of the Microsoft .NET Framework that is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Microsoft .NET Framework that could allow a malicious Microsoft .NET application to obtain a managed pointer to stack...
CVE-2008-0091
CVE-2008-0091 concerns a directory traversal in download2.php of AGENCY4NET WEBFTP 1 . The flaw allows remote attackers to read and delete arbitrary files by supplying a ".." in the file parameter. According to NVD, the vulnerability has a CVSS v2 base score of 6.4 (MEDIUM) with network access, l...
CVE-2007-0091
CVE-2007-0091 affects newsCMSlite and is caused by insufficient access control that allows remote attackers to download the web root database (newsCMS.mdb), exposing passwords. The connected records confirm this vulnerability type and impact but do not provide affected versions, vendor patches, o...
CVE-2006-0091
CVE-2006-0091 affects Open-Xchange Webmail prior to/including 0.8.1-6 with Inline HTML enabled. The vulnerability is a Cross-Site Scripting (XSS) flaw that lets an attacker inject arbitrary web script or HTML via e-mail attachments, which are rendered inline by the webmail interface. The referenc...
CVE-2005-0091
CVE-2005-0091 is described across connected records as a vulnerability in the Red Hat Enterprise Linux 4 kernel with the hugemem patch. The issue allows a local attacker to read and write arbitrary kernel memory and gain privileges via certain syscalls on systems using the hugemem configuration (...
CVE-2005-0091
Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using the hugemem kernel, allows local users to read and write to arbitrary kernel memory and gain privileges via certain syscalls...
CVE-2004-0091
NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in register.php for unknown versions of vBulletin allows remote attackers to inject arbitrary HTML or web script via the regsite or possibly regsite parameter. NOTE: the vendor has disputed this issue, saying...
CVE-2004-0091
CVE-2004-0091 is an XSS issue in vBulletin’s register.php (unknown versions) exploitable via the reg_site parameter. The vendor disputes the existence of reg_site/reg_site variable in vBulletin 2/3 sources; no concrete exploitation or fix/version details are provided in the connected documents. R...
CVE-2004-0091
NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in register.php for unknown versions of vBulletin allows remote attackers to inject arbitrary HTML or web script via the regsite or possibly regsite parameter. NOTE: the vendor has disputed this issue, saying...