CVE-2015-0279

JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language EL expressions and execute arbitrary Java code via the do parameter...

CVE-2015-0279

CVE-2015-0279 affects JBoss RichFaces prior to 4.5.4. A flaw in parsing the HTTP request parameter named the do parameter allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code on the server. This is described as a reverse-engineered EL injection th...

Important: Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.7.0 security update

An update for the RichFaces component of Red Hat JBoss Web Framework Kit 2.7.0 that fixes one security issue is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score...

CVE-2014-0279

Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-0277 and CVE-2014-0278...

CVE-2014-0279

CVE-2014-0279 affects Microsoft Internet Explorer 8 (and IE6–IE11 per Microsoft guidance) via memory corruption triggered by a crafted web site. The vulnerability is described as a memory corruption/overflow issue that enables remote code execution or a denial of service. Public details in connec...

Microsoft Internet Explorer Multiple Vulnerabilities (2909921)

This host is missing a critical security update according to Microsoft Bulletin MS14-010. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Internet Explorer Memory Corruption (MS14-010; CVE-2014-0279)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a user t...

RHEL 4 : redhat-release (EOL Notice) (RHSA-2011:0279)

This is the 6-month notification of the End Of Life plans for Red Hat Enterprise Linux Extended Update Support Add-On EUS 4.7. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the Extended Update Support for Red Hat Enterprise Linux 4 Update 7 will end on August 31, 2011...

CVE-2012-0279

CVE-2012-0279 affects Quest Toad for Data Analysts 3.0.1. The vulnerability arises from weak permissions (Everyone: Full Control) on the %COMMONPROGRAMFILES%\Quest Shared directory, enabling local users to place a Trojan horse file and gain privileges. Root cause: overly permissive directory perm...

CVE-2012-0279

Quest Toad for Data Analysts 3.0.1 uses weak permissions Everyone: Full Control for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file...

[security bulletin] HPSBPI02640 SSRT100410 rev.1 - HP MFP Digital Sending Software Running on Windows, Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02738104 Version: 1 HPSBPI02640 SSRT100410 rev.1 - HP MFP Digital Sending Software Running on Windows, Authentication Bypass NOTICE: The information in this Security Bulletin should be acted upon...

CVE-2011-0279

CVE-2011-0279 affects HP MFP Digital Sending Software (DSS) 4.91.00. The vulnerability arises from improper configuration of authentication settings in device templates, enabling a local attacker to access managed devices without authentication for actions that normally require it. The HP Securit...

CVE-2010-0279

CVE-2010-0279 describes an unrestricted file upload vulnerability in upload.php of BTS-GI Read excel 1.1 that enables remote code execution by uploading a file with an executable extension and accessing it directly in an unspecified directory. The root cause is improper handling of uploaded files...

CVE-2010-0279

creationtimestamp| type| source ---|---|--- 2010-01-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11057...

CVE-2009-0279

CVE-2009-0279 describes a SQL injection in Pardal CMS 0.2.0 and earlier, exploitable through comentar.php via the id parameter. Remote attackers can execute arbitrary SQL commands. The available documents identify the vulnerable component and impact but do not provide a remediation or patch detai...

FreeBSD Ports: phpnuke

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-0279

The CVE-2008-0279 entry describes an SQL injection vulnerability in liretopic.php of Xforum 1.4 (and possibly other versions) that allows remote attackers to execute arbitrary SQL commands via the topic parameter (with the categorie parameter potentially affected). Root cause is improper input ha...

CVE-2007-0279

Technical details about CVE-2007-0279 are not publicly available in the provided connected documents; the materials reference Oracle HTTP Server and related components with unspecified vulnerabilities. Monitor for updates for further specifics.

CVE-2006-0279

Technical details about CVE-2006-0279 (affected product, vulnerable components, impact, or remediation) are not publicly available in the provided documents; please monitor for updates.

CVE-2005-0279

Soldner Secret Wars 30830 and earlier does not properly handle the "message too long" socket error, which allows remote attackers to cause a denial of service socket termination via a long UDP packet...