CVE-2015-0136

powervc-iso-import in IBM PowerVC 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2 places an access token on the command line during IVM and PowerKVM management, which allows local users to obtain sensitive information by listing the process...

CVE-2015-0136

CVE-2015-0136 (IBM PowerVC) affects powervc-iso-import in IBM PowerVC 1.2.0.x before 1.2.0.4 and 1.2.1.x before 1.2.2. The root cause is that an access token is placed on the command line during IVM and PowerKVM management, enabling local users to learn sensitive information by listing the proces...

KLA10489 Multiple vulnerabilities in IBM PowerVC

Multiple vulnerabilities have been found in IBM PowerVC. Malicious users can exploit these vulnerabilities to spoof user interface or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improper certificate validation can be exploited remotely via a specially designed...

RHEL 5 / 6 : java-1.5.0-ibm (RHSA-2015:0136)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:0136 advisory. - ICU: font parsing OOB read OpenJDK 2D, 8055489 CVE-2014-6585 - ICU: font parsing OOB read OpenJDK 2D, 8056276 CVE-2014-6591 - OpenJDK:...

CVE-2014-0136

The 1 get and 2 log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine CFME 5.x allow remote attackers to insert arbitrary text into log files via unspecified vectors...

CVE-2014-0136

CVE-2014-0136 affects Red Hat CloudForms 3.0 Management Engine (CFME) 5.x, where the AgentController’s get and log methods allow remote attackers to insert arbitrary text into log files. The root cause is unsanitized user input written to log files from the AgentController, enabling arbitrary con...

Mutiny 5 Arbitrary File Upload

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Oracle Linux 5 : Moderate: / tk (ELSA-2008-0136)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0136 advisory. 8.4.13-5.EL51.1 - CVE-2008-0553 CVE-2007-5378 - GIF overflow and also GIF overflow Resolves: rhbz432514 Tenable has extracted the preceding description...

CVE-2013-0136

Mutiny Mutiny Frontend EditDocument servlet contains directory traversal weaknesses disclosed for the Mutiny 5 appliance. The vulnerability allows authenticated users to perform operations (UPLOAD, DELETE, CUT, COPY) via injected parameters (uploadPath, paths[], newPath) to read arbitrary files, ...

Mutiny FrontEnd Arbitrary File Read and Delete (CVE-2013-0136)

A directory traversal vulnerability has been reported in EditDocument servlet from the frontend on the Mutiny 5 appliance. Commands for UPLOAD, DELETE, CUT and COPY are all vulnerable to directory traversal attacks...

CVE-2013-0136

creationtimestamp| type| source ---|---|--- 2013-05-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25517 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/mutinyfrontendupload.rb 2018-05-29 15:50:33+00:00|...

Mutiny 5 - Arbitrary File Upload (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 /Apache-Coyote/ include...

Mutiny Appliance contains multiple directory traversal vulnerabilities

Overview Mutiny appliance contains multiple directory traversal CWE-22 vulnerabilities. Description The Mutiny appliance commands for UPLOAD, DELETE, CUT and COPY are all vulnerable to directory traversal attacks. Additional details may be found in the Rapid7 blog post entitled, "New 1day Exploit...

Mutiny 5 Arbitrary File Upload

This module exploits a code execution flaw in the Mutiny 5 appliance. The EditDocument servlet provides a file upload function to authenticated users. A directory traversal vulnerability in the same functionality allows for arbitrary file upload, which results in arbitrary code execution with roo...

CentOS Update for libvorbis CESA-2012:0136 centos5

Check for the Version of libvorbis OpenVAS Vulnerability Test CentOS Update for libvorbis CESA-2012:0136 centos5 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for libvorbis CESA-2012:0136 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Microsoft Visio Viewer VSD文件格式处理代码执行漏洞(MS12-015)

BUGTRAQ ID: 51906 CVE ID: CVE-2012-0136 Microsoft Visio是Windows操作系统下运行的流程图软件，它现在是Microsoft Office软件的一个部分。 MMicrosoft Visio在验证Visio文件属性的实现上存在远程代码执行漏洞，攻击者可利用此漏洞执行任意代码 0 Microsoft Visio Viewer 2010 SP1 Microsoft Visio Viewer 2010 0 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS12-015）以及相应补丁:...

Microsoft Office Visio Viewer Remote Code Execution Vulnerabilities (2663510)

This host is missing an important security update according to Microsoft Bulletin MS12-015. OpenVAS Vulnerability Test $Id: secpodms12-015.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office Visio Viewer Remote Code Execution Vulnerabilities 2663510 Authors: Antu Sanadi Copyright: Copyrigh...

Memory corruption

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019...

CVE-2012-0136

CVE-2012-0136 concerns Microsoft Visio Viewer (2010 Gold and SP1). The flaw arises during parsing of Visio files where crafted attributes trigger a memory corruption, enabling remote code execution. Multiple sources concur it affects the Visio Viewer/Visio File Format handling and ties to MS12-01...