CVE-2014-0317

The Security Account Manager Remote SAMR protocol implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2 does not properly determine the user-lockout state, which makes it easier for...

CVE-2014-0317

CVE-2014-0317 is the SAMR Security Feature Bypass vulnerability in Microsoft Windows, affecting Windows XP SP2-SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows Server 2012 (Gold/R2). The issue stems from the Security Account Manager Remote (SAMR) protoc...

MS14-016: Vulnerability in Security Account Manager Remote (SAMR) Protocol Could Allow Security Feature Bypass (2934418)

A security feature bypass vulnerability exists in Windows due to the Security Account Manager Remote SAMR protocol incorrectly validating the user lockout state. Remote, authenticated attackers can exploit this issue to conduct brute force attacks against user passwords. Note that the host must...

CVE-2013-0317

Cross-site scripting XSS vulnerability in the Manager Change for Organic Groups ogmanagerchange module 7.x-2.x before 7.x-2.1 for Drupal might allow remote attackers to inject arbitrary web script or HTML via the username in the new manager autocomplete field...

CVE-2013-0317

Cross-site scripting XSS vulnerability in the Manager Change for Organic Groups ogmanagerchange module 7.x-2.x before 7.x-2.1 for Drupal might allow remote attackers to inject arbitrary web script or HTML via the username in the new manager autocomplete field...

CVE-2013-0317

CVE-2013-0317 is a cross-site scripting (XSS) vulnerability in the Drupal contributed module Manager Change for Organic Groups (og_manager_change) for 7.x-2.x, fixed in 7.x-2.1. The issue arises because the autocomplete field used to select a new manager did not properly filter usernames, allowin...

SA-CONTRIB-2013-015 - Manager Change for Organic Groups - Cross site scripting (XSS)

This module extends Organic Groups to allow the manager of a group to select a new manager for their group ie if they want to leave the group. The autocomplete field for selecting a new manager didn't properly filter usernames. The vulnerability is mitigated by the fact that Drupal's default...

CentOS Update for libpng10 CESA-2012:0317 centos4

Check for the Version of libpng10 OpenVAS Vulnerability Test CentOS Update for libpng10 CESA-2012:0317 centos4 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CentOS Update for libpng CESA-2012:0317 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-0317

Movable Type platforms are affected by CSRF vulnerabilities in versions before 4.38 (and 5.0x before 5.07, 5.1x before 5.13) that allow remote attackers to hijack user authentication for data-modifying requests via commenting or the community script. The issue originates from insufficient CSRF pr...

CVE-2011-0317

Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0318, CVE-2011-0319, CVE-2011-0320, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122...

CVE-2011-0317

Adobe Shockwave Player contains a vulnerability in Dirapi.dll (CVE-2011-0317) that allows arbitrary code execution or memory corruption. Affected products are Shockwave Player versions before 11.6.0.626 for Mac OS X (and related lines in the CVE list), with exploitation described as via unspecifi...

CVE-2011-0317

Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0318, CVE-2011-0319, CVE-2011-0320, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122...

CVE-2010-0317

The CVE-2010-0317 issue affects Novell Netware 6.5 SP8. It describes a remote denial-of-service via a flood of malformed AFP/CIFS requests that are not properly handled by CIFS.nlm Semantic Agent (Build 163 MP) 3.27 or AFPTCP.nlm Build 163 SP 3.27. The underlying fault is a NULL pointer dereferen...

CVE-2009-0317

Untrusted search path vulnerability in the Python language bindings for Nautilus nautilus-python allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function CVE-2008-5983...

CVE-2009-0317

CVE-2009-0317 involves the Python bindings for Nautilus (nautilus-python), where an Untrusted search path vulnerability in PySys_SetArgv (CVE-2008-5983) could allow local users to execute arbitrary code via a Trojan horse Python file in the current working directory. The connected documents refer...

CVE-2007-0317

Format string vulnerability in the LogMessage function in FileZilla before 3.0.0-beta5 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted arguments. NOTE: some of these details are obtained from third party information...

CVE-2007-0317

Format string vulnerability in the LogMessage function in FileZilla before 3.0.0-beta5 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via crafted arguments. NOTE: some of these details are obtained from third party information...

CVE-2007-0317

The provided data describes a format string vulnerability in the FileZilla project (before version 3.0.0-beta5) affecting the LogMessage function. The issue allows a remote attacker to trigger a denial of service (application crash) and potentially execute arbitrary code through crafted arguments...

CVE-2006-0317

The CVE-2006-0317 entry describes a Cross-site scripting (XSS) vulnerability in RedKernel Referrer Tracker 1.1.0-3, specifically in rkrt_stats.php. The issue arises when a query string value supplied via GET is stored in the $QUERY_STRING variable, allowing remote attackers to inject arbitrary we...