CVE-2012-0145

CVE-2012-0145 is an XSS vulnerability in wizardlist.aspx affecting Microsoft SharePoint Server 2010 Gold/SP1 and SharePoint Foundation 2010 Gold/SP1. The issue allows remote attackers to inject arbitrary script/HTML via JavaScript sequences in a URL, per the description of the vulnerability. Publ...

Microsoft SharePoint wizardlist.aspx Cross-Site Scripting (MS12-011; CVE-2012-0145)

A cross-site scripting vulnerability has been reported in Microsoft SharePoint...

Apple Safari Multiple Vulnerabilities (Mar 2011) - Mac OS X

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

Safari < 5.0.4 Multiple Vulnerabilities

The version of Safari installed on the remote Windows host is earlier than 5.0.4. It therefore is potentially affected by several issues in the following components : - ImageIO - libxml - WebKit C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52613; scriptversion"1.18...

CVE-2011-0145

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0145

CVE-2011-0145 affects WebKit as used by Apple iTunes before 10.2 on Windows. It allows a man-in-the-middle to cause memory corruption and application crash or execute arbitrary code via iTunes Store browsing. Root cause and specific exploit vectors are described as tied to WebKit memory handling ...

Apple iTunes < 10.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 10.2. As such, it is affected by numerous issues in the following components : - ImageIO - libxml - WebKit C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52534; scriptversion"1.21";...

CVE-2010-0145

Cisco IronPort Encryption Appliance versions 6.2.x before 6.2.9.1, 6.5.x before 6.5.2, and IronPort PostX MAP before 6.2.9.1 are affected by CVE-2010-0145. The vulnerability is a remote code execution flaw in the embedded HTTPS server (IronPort Bug 65923) that allows an unauthenticated, remote at...

CVE-2009-0145

CVE-2009-0145 affects CoreGraphics in Apple Mac OS X 10.4.11 and 10.5 up to before 10.5.7, iPhone OS 1.0–2.2.1, and iPhone OS for iPod touch 1.1–2.2.1. A crafted PDF file can trigger memory corruption, allowing remote arbitrary code execution or an application crash (denial of service). The issue...

CentOS Update for ImageMagick CESA-2008:0145 centos4 i386

Check for the Version of ImageMagick OpenVAS Vulnerability Test CentOS Update for ImageMagick CESA-2008:0145 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CentOS Update for ImageMagick CESA-2008:0145 centos3 i386

Check for the Version of ImageMagick OpenVAS Vulnerability Test CentOS Update for ImageMagick CESA-2008:0145 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CVE-2008-0145

Unspecified vulnerability in glob in PHP before 4.4.8, when openbasedir is enabled, has unknown impact and attack vectors. NOTE: this issue reportedly exists because of a regression related to CVE-2007-4663...

CVE-2008-0145

Unspecified vulnerability in glob in PHP before 4.4.8, when openbasedir is enabled, has unknown impact and attack vectors. NOTE: this issue reportedly exists because of a regression related to CVE-2007-4663...

CVE-2008-0145

CVE-2008-0145 involves PHP before 4.4.8 with open_basedir enabled. The description notes an unspecified vulnerability in glob and cites a regression related to CVE-2007-4663, but the exact impact and attack vectors are not disclosed in the provided documents.

CVE-2007-0145

CVE-2007-0145 concerns a PHP remote file inclusion in BinGo News (BP News) 3.01 and earlier. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL in the bnrep parameter, with the vulnerable entry point documented as bn_smrep1.php in the Initial description, and re...

CVE-2006-0145

The CVE-2006-0145 entry concerns the kernfs_xread function in kernfs for NetBSD (versions 1.6–2.1) and OpenBSD 3.8. The issue is improper validation of file offsets against negative 32-bit values that occur due to truncation, enabling local users to read arbitrary kernel memory and potentially ga...

Sendmail WIZ Command Enabled

The remote Sendmail service accepts the WIZ command. SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:sendmail:sendmail";...

CVE-2005-0145

CVE-2005-0145 affects Firefox up to version prior to 1.0. The vulnerability arises because Firefox does not properly distinguish between user-generated and synthetic click events, allowing a malicious page to use JavaScript to bypass the file download prompt via the Alt-click feature. Impact is t...

CVE-2005-0145

Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature...

CVE-2005-0145

Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature...