Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-0284. Reason: This candidate is a reservation duplicate of CVE-2015-0284. Notes: All CVE users should reference CVE-2015-0284 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-2144

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-0284. Reason: This candidate is a reservation duplicate of CVE-2015-0284. Notes: All CVE users should reference CVE-2015-0284 instead of this candidate. All references and descriptions in this candidate have been removed to...

Oracle Solaris Third-Party Patch Update : kerberos (cve_2010_1322_improper_input)

The remote Solaris system is missing necessary patches to address security updates : - The mergeauthdata function in kdcauthdata.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8.x before 1.8.4 does not properly manage an index into an authorization-data list, which allows remot...

Cisco Linksys PlayerPT ActiveX Control SetSource sURL argument Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

openSUSE Security Update : krb5 (krb5-4163)

A double-free issue in kdc when PKINIT is enabled allowed remote attackers to crash the daemon or potentially execute arbitrary code CVE-2011-0284. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : krb5 (krb5-4163)

A double-free issue in kdc when PKINIT is enabled allowed remote attackers to crash the daemon or potentially execute arbitrary code CVE-2011-0284. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

CVE-2014-0284

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2014-0284

CVE-2014-0284 affects Microsoft Internet Explorer 9 and 10, where memory corruption can be triggered by visiting a crafted web site, potentially allowing remote code execution or a denial of service. The root cause is memory object handling that can be corrupted under attack. Public exploits exis...

CVE-2014-0284

Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

Microsoft Internet Explorer Multiple Vulnerabilities (2909921)

This host is missing a critical security update according to Microsoft Bulletin MS14-010. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Internet Explorer CVE-2014-0284 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya CallPilot 4.0 Avaya...

Microsoft Internet Explorer Memory Corruption (MS14-010; CVE-2014-0284)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...

Oracle Linux 6 : krb5 (ELSA-2011-0356)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0356 advisory. - add revised upstream patch to fix double-free in KDC while returning typed-data with errors CVE-2011-0284, 681564 Tenable has extracted the preceding...

CVE-2013-0284

CVE-2013-0284 affects the Ruby agent (Ruby agent 3.2.0 through 3.5.2, with variants noting up to 3.5.3.23) by serializing sensitive data when communicating with New Relic servers. This exposure can let an attacker obtain database credentials and SQL statements via network sniffing and deserializa...

CVE-2013-0284

Ruby agent 3.2.0 through 3.5.2 serializes sensitive data when communicating with servers operated by New Relic, which allows remote attackers to obtain sensitive information database credentials and SQL statements by sniffing the network and deserializing the data...

Cisco Linksys PlayerPT ActiveX Control Buffer overflow (CVE-2012-0284)

A remote code execution vulnerability has been reported in Cisco Linksys PlayerPT...

Cisco Linksys PlayerPT ActiveX Control SetSource sURL argument Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 HttpClients::IE, :uaminver = "6.0",...

Cisco Linksys PlayerPT ActiveX Control SetSource sURL argument Buffer Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Cisco Linksys PlayerPT ActiveX Control SetSource() Multiple Overflows

The Cisco Linksys PlayerPT ActiveX Control is installed on the remote Windows host. The installed version of the control is affected by the following buffer overflow vulnerabilities in the SetSource method : - The 'base64string' argument is not properly sanitized. EBD-ID 18641 - The 'sURL' argume...

CVE-2012-0284

Cisco Linksys PlayerPT ActiveX Control SetSource sURL argument Buffer Overflow (CVE-2012-0284) affects Cisco WVC200’s PlayerPT.ocx 1.0.0.15. The stack-based overflow is triggered by a long URL in the sURL parameter, enabling remote code execution when a user visits a malicious page. Exploit/publi...