Oracle: Security Advisory (ELSA-2010-0109)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HTTP Methods (CAN-2003-0109; CVE-2007-1560; CVE-2015-1499)

...

NVIDIA Display Driver 174.x < 307.78 / 310.x < 311.00 Multiple Vulnerabilities

The version of the NVIDIA Display Driver service on the remote Windows host is later than 174.00 but prior to 307.78, or later than 310.00 but prior to 311.00. It is therefore affected by the following vulnerabilities : - An privilege escalation vulnerability exists due to not properly handling...

CVE-2015-0109

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 and 7.2 for Tivoli IT Asset Management for IT and certain other products, allows remote authenticated users to inject arbitrary web script or HTML via...

CVE-2015-0109

CVE-2015-0109 is a Cross-site Scripting (XSS) vulnerability affecting IBM Tivoli/TAM products (Maximo Asset Management, Tivoli IT Asset Management for IT, Tivoli Service Request Manager, etc.) across multiple versions (7.1–7.6, including various 7.1.1.x and 7.2 lines). The flaw allows remote auth...

RHEL 6 : rhev-hypervisor6 (RHSA-2012:0109)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0109 advisory. The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization...

RHEL 5 : Red Hat JBoss Enterprise Application Platform 6.2.4 update (Moderate) (RHSA-2014:0798)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0798 advisory. Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. Apache CXF is an op...

CVE-2014-0109

CVE-2014-0109 (Apache CXF) affects CXF before 2.6.14 and 2.7.x before 2.7.11. The vulnerability allows a remote attacker to trigger a denial of service (memory exhaustion) by sending a large request with Content-Type: text/html to a SOAP endpoint, which triggers an error. The provided connected s...

CVE-2013-0109

creationtimestamp| type| source ---|---|--- 2013-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30393 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/nvidianvsvc.rb 2025-02-06 03:13:41+00:00| seen|...

Oracle Linux 5 : mysql (ELSA-2010-0109)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0109 advisory. - Add fixes for CVE-2009-4019, CVE-2009-4028, CVE-2009-4030 Resolves: 556505 Tenable has extracted the preceding description block directly from the...

CVE-2013-0109

CVE-2013-0109 describes a local privilege escalation/DoS in the NVIDIA Display Driver service on Windows. The vulnerability affects the NVIDIA Display Driver service where the driver version is before 307.78, and Release 310 before 311.00, allowing a crafted application to trigger an exception ha...

Windows平台下的NVIDIA图形驱动程序权限提升漏洞(CVE-2013-0109)

CVE-2013-0109 NVIDIA Graphics Driver是一款流行的图形驱动程序 Windows下的NVIDIA显示驱动服务存在一个未明错误，允许本地攻击者利用漏洞提升权限 0 NVIDIA Graphics Drivers for Windows 300.x NVIDIA Graphics Drivers for Windows 310.x 厂商解决方案 NVIDIA Graphics Drivers for Windows 307.83或311.00已经修复此漏洞，建议用户下载更新： http://www.nvidia.com This module requires...

Nvidia (nvsvc) Display Driver Service Local Privilege Escalation

The named pipe, \pipe\nsvr, has a NULL DACL allowing any authenticated user to interact with the service. It contains a stacked based buffer overflow as a result of a memmove operation. Note the slight spelling differences: the executable is 'nvvsvc.exe', the service name is 'nvsvc', and the name...

CVE-2012-0109

Technical details for CVE-2012-0109 are not publicly available in the provided documents. Monitor for updates.

Oracle Virtual Server Agent - Command Injection

Oracle Virtual Server Agent Command Injection ============================================= 1. Advisory Information Advisory ID: BONSAI-2010-0109 Date published: 2010-10-13 Vendors contacted: Oracle Release mode: Coordinated release 2. Vulnerability Information Class: Injection Remotely...

Microsoft IIS 5.0 - WebDAV 'ntdll.dll' Path Overflow (MS03-007) (Metasploit)

$Id: ms03007ntdllwebdav.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Altiris Deployment Solution Server < 6.9 SP4 DBManager DoS (SYM10-007)

The version of Altiris Deployment Solution installed on the remote host is reportedly affected by a denial of service vulnerability. The DBManager component has a use-after-free error when processing specially crafted 'CreateSession' and 'PXEManagerSignOn' requests. A remote attacker could exploi...

Microsoft IIS WebDAV Remote Buffer Overflow (MS03-007; CVE-2003-0109)

The Internet Information Server IIS is a Web server packaged with several versions of the Windows operating system. The server is capable of serving static, as well as dynamic content. Several Microsoft Windows IIS servers support the World Wide Web Distributed Authoring and Versioning WebDAV...

CVE-2009-0109

The CVE-2009-0109 entry describes a SQL injection in RiotPix 0.61 and earlier, affecting index.php where the username parameter is used in SQL queries. The underlying cause is unsafely constructed queries, enabling remote attackers to execute arbitrary SQL commands. Documented impact includes pot...

CVE-2009-0109

SQL injection vulnerability in index.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information...