85 matches found
Novell GroupWise Client ActiveX SetEngine Pointer Manipulation
Added: 02/18/2013 CVE: CVE-2012-0439 BID: 57658 OSVDB: 89700 Background Novell GroupWise is an e-mail and collaboration product suite. Problem Several methods in the GroupWise ActiveX plugin do not validate user-supplied pointers that are passed as function arguments. This may allow an attacker t...
Novell GroupWise Client ActiveX SetEngine Pointer Manipulation
Added: 02/18/2013 CVE: CVE-2012-0439 BID: 57658 OSVDB: 89700 Background Novell GroupWise is an e-mail and collaboration product suite. Problem Several methods in the GroupWise ActiveX plugin do not validate user-supplied pointers that are passed as function arguments. This may allow an attacker t...
Novell GroupWise Client ActiveX SetEngine Pointer Manipulation
Added: 02/18/2013 CVE: CVE-2012-0439 BID: 57658 OSVDB: 89700 Background Novell GroupWise is an e-mail and collaboration product suite. Problem Several methods in the GroupWise ActiveX plugin do not validate user-supplied pointers that are passed as function arguments. This may allow an attacker t...
Novell Groupwise Client - 'gwcls1.dll' ActiveX Remote Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...
CVE-2012-0439
creationtimestamp| type| source ---|---|--- 2013-02-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24490 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/novellgroupwisegwcls1actvx.rb 2025-02-06...
Novell GroupWise Client gwcls1.dll ActiveX Remote Code Execution
This module exploits a vulnerability in the Novell GroupWise Client gwcls1.dll ActiveX. Several methods in the GWCalServer control use user provided data as a pointer, which allows to read arbitrary memory and execute arbitrary code. This module has been tested successfully with GroupWise Client...
Novell GroupWise Client 8.x < 8.0.3 Hot Patch 2 / 2012.x < 2012 SP1 Hot Patch 1 Multiple Vulnerabilities
The version of Novell GroupWise Client installed on the remote Windows host is 8.x prior to 8.0.3 Hot Patch 2 8.0.3.26516 or 2012.x prior to 2012 SP1 Hot Patch 1 12.0.1.16521. It is, therefore, reportedly affected by the following vulnerabilities : - An unspecified error exists related to an...
CVE-2013-0439
Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU...
CVE-2013-0439
CVE-2013-0439: An unspecified vulnerability in the Oracle Java SE JavaFX component (2.2.4 and earlier) could allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors. The description and connected records confirm the affected component as JavaFX within Jav...
[SECURITY] [DSA 2206-1] New mahara packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 2206-1 [email protected] http://www.debian.org/security/ Martin Schulze March 29th, 2011 http://www.debian.org/security/faq -...
Mahara跨站脚本和跨站请求伪造漏洞
Bugtraq ID: 47033 CVE ID：CVE-2011-0439 Mahara是一款开源的电子文件夹，网络日志，履历表生成器和社会化网络系统。 Mahara存在多个输入验证错误，攻击者可以利用漏洞获得敏感信息或劫持目标用户会话。 -应用程序存在跨站请求伪造漏洞，攻击者可以构建恶意链接，诱使管理员访问，删除博客日志。 -通过Pieform选择框选项传递的输入在显示给用户之前缺少正确过滤，可被利用注入任意HTML和脚本代码，导致恶意数据查看时在目标用户浏览器上执行恶意代码。 Mahara Mahara 1.3.3 Mahara Mahara 1.2.5 Mahara Mahara...
CVE-2011-0439
CVE-2011-0439 affects Mahara; OpenVAS entries corroborate two issues: (1) XSS via unsanitized input in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4, (2) CVRF-equivalent risk (CVE-2011-0440) where session key checks may fail, enabling blog deletions. CVE-2011-0439’s impact is reflected as part...
CVE-2010-0439
Chip Salzenberg Deliver allows local users to cause a denial of service, obtain sensitive information, and possibly change the ownership of arbitrary files via a symlink attack on an unspecified file...
CVE-2010-0439
CVE-2010-0439 affects Deliver, a setuid root mail delivery program. The vulnerability arises from race conditions that allow a local attacker to exploit symlinks to perform denial of service, read sensitive data, and possibly take ownership of arbitrary files (e.g., via critical system files on N...
CVE-2008-0439
Summary of CVE-2008-0439 : A cross-site scripting (XSS) vulnerability exists in DeluxeBB 1.1, specifically in templates/default/admincp/attachments_header.php, exploitable via the lang_listofmatches parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The entry sou...
CVE-2006-0439
Text Rider 2.4 stores sensitive data in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing data/userlist.txt...
CVE-2006-0439
Text Rider 2.4 is vulnerable due to insufficient access control in the data directory under the web document root, enabling remote attackers to directly access data/userlist.txt and obtain usernames and password hashes. The connected records confirm the affected software (Text Rider 2.4) and the ...
CVE-2005-0439
ELOG Web Logbook (
CVE-2002-0439
Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field...
