100 matches found
Debian Security Advisory DSA 2878-1 (virtualbox - security update)
Matthew Daley discovered multiple vulnerabilities in VirtualBox, a x86 virtualisation solution, resulting in denial of service, privilege escalation and an information leak. OpenVAS Vulnerability Test $Id: deb2878.nasl 6735 2017-07-17 09:56:49Z teissa $ Auto-generated from advisory DSA 2878-1 usi...
Oracle VirtualBox Multiple Unspecified Vulnerabilities-01 (Jan 2014) - Mac OS X
Oracle VirtualBox is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle VirtualBox Multiple Unspecified Vulnerabilities-01 (Jan 2014) - Linux
Oracle VirtualBox is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-0404
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0406...
CVE-2014-0404
Oracle VirtualBox contains multiple vulnerabilities including CVE-2014-0404 affecting VirtualBox versions prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4. The issues are described as affecting Core with local access and impacts to integrity and availability via unspecified vectors. A known rem...
CVE-2013-0404
CVE-2013-0404 affects Oracle/Sun Solaris 10, with a vulnerability in the Kernel/Boot component that allows local users to impact confidentiality, integrity and availability via unknown vectors. The impact is described as partial for confidentiality, integrity and availability; exploitation requir...
ESA-2012-012: EMC Documentum eRoom Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-012: EMC Documentum eRoom multiple vulnerabilities EMC Identifier: ESA-2012-012 CVE Identifiers: CVE-2012-0398, CVE-2012-0404 Severity Rating: CVE-2012-0398 : CVSS Base Score is 5.8 AV:A/AC:L/Au:N/C:P/I:P/A:P CVE-2012-0404 : CVSS Base Score i...
CVE-2012-0404
EMC Documentum eRoom is affected by CVE-2012-0404, a DOM-based cross-site scripting vulnerability in versions prior to 7.4.4. The issue enables an attacker to inject arbitrary web script or HTML via unspecified vectors. EMC’s advisory ESA-2012-012 confirms upgrade to eRoom 7.4.4 as a remedy. No e...
NetSupport Manager Agent Remote Buffer Overflow
$Id: netsupportmanageragent.rb 11868 2011-03-03 01:04:47Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
NetSupport Manager Agent Remote Buffer Overflow
This module exploits a buffer overflow in NetSupport Manager Agent. It uses a similar ROP to the proftpdiac exploit in order to avoid non executable stack. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...
NetSupport Manager Agent - Remote Buffer Overflow (Metasploit) (2)
$Id: netsupportmanageragent.rb 11868 2011-03-03 01:04:47Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2011-0404
Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers to execute arbitrary code via a long control hostname to TCP port 5405, probably a different vulnerability than CVE-2007-5252...
CVE-2011-0404
CVE-2011-0404 is a confirmed NetSupport Manager vulnerability involving a stack-based buffer overflow in the NetSupport Manager Agent. The issue affects Linux 11.00, Solaris 9.50, and Mac OS X 11.00, and arises when processing a long control hostname sent to TCP port 5405. The described impact is...
CVE-2011-0404
Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers to execute arbitrary code via a long control hostname to TCP port 5405, probably a different vulnerability than CVE-2007-5252...
CVE-2011-0404
creationtimestamp| type| source ---|---|--- 2011-01-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15937 2011-03-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16838 2018-05-29 15:50:33+00:00| seen|...
PHPGroupWare <= 0.9.16.016 phpgwapi/inc/多个SQL注入漏洞
BUGTRAQ ID: 40168 CVE ID: CVE-2010-0404 phpGroupWare是一个用PHP编写的多用户的网络组件，为开发其他程序提供了一个API。 phpGroupWare phpgwapi/inc/目录下的多个脚本没有正确的过滤用户所提交参数，远程攻击者可以通过提交恶意查询请求执行SQL注入攻击。 1 没有正确地过滤提交给多个脚本的sessionid参数便在phpgwapi/inc/class.sessionsdb.inc.php的SQL查询中使用。 2...
CVE-2010-0404
CVE-2010-0404 refers to multiple SQL injection vulnerabilities in phpGroupWare (phpgw) up to version 0.9.16.015, exploitable via unsafely handled input to phpgwapi/inc/class.sessions_db.inc.php, class.translation_sql.inc.php, and class.auth_sql.inc.php. The issues allow remote attackers to inject...
phpGroupWare Multiple Vulnerabilities
phpGroupWare is prone to multiple SQL-injection vulnerabilities and to a Local File Include Vulnerability because it fails to sufficiently sanitize user-supplied data before using it. Exploiting these issues could allow an attacker to compromise the application, access or modify data, exploit...
[SECURITY] [DSA-2046-1] New phpgroupware packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-2046-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano May 13, 2010 http://www.debian.org/security/faq -...
