Apple Safari Webkit Multiple Vulnerabilities (Mar 2012) - Windows

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

CVE-2012-0615

CVE-2012-0615 affects WebKit as used in Apple iOS before 5.1 and iTunes before 10.6. The vulnerability allows a remote attacker to execute arbitrary code or cause a denial of service via a crafted web site, via memory corruption leading to an application crash. The description does not specify af...

CentOS Update for libvirt CESA-2010:0615 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-0615

Multiple buffer overflows in Adobe Audition 3.0.1 and earlier allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via crafted data in unspecified fields in the TRKM chunk in an Audition Session aka .ses file, related to inconsisten...

Adobe Audition vulnerability processing malformed session file

Adobe Audition vulnerability processing malformed session file 1. Advisory Information Title: Adobe Audition vulnerability processing malformed session file Advisory ID: CORE-2011-0204 Advisory URL: Date published: 2011-05-12 Date of last update: 2011-05-12 Vendors contacted: Adobe Release mode:...

libvirt security update

CentOS Errata and Security Advisory CESA-2010:0615 Updated libvirt packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVS...

CVE-2010-0615

EvalSMSI 2.1.03 contains a Cross‑Site Scripting (XSS) vulnerability in assess.php, exploitable via the reports comment box in the continue_assess action. The issue allows injection of arbitrary web script/HTML. Details indicate a client-side impact with potential partial integrity impact, and the...

SLES9: Security update for IBMJava2-JRE and IBMJava2-SDK

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: IBMJava2-SDK IBMJava2-JRE For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

CVE-2009-0615

CVE-2009-0615 concerns directory traversal in Cisco ANM before 2.0 and ACE Device Manager before A3(2.1). Exploitation by an authenticated remote user could read/modify arbitrary files, potentially exposing host OS data due to invalid directory permissions. Related CVEs cover additional ANM flaws...

Cisco应用联网管理器和应用控制引擎多个安全漏洞

BUGTRAQ ID: 33903 CVECAN ID: CVE-2009-0615,CVE-2009-0616,CVE-2009-0617,CVE-2009-0618 Cisco应用联网管理器（ANM）是用于管理Cisco应用控制引擎（ACE）模块或设备的网络管理应用，安装在Red Hat Enterprise Linux操作系统的客户服务器上；ACE设备管理器位于ACE设备的闪存中，提供了用于配置和管理单个ACE设备的基于浏览器的接口。 ANM中存在多个漏洞，ACE设备管理器产品中存在一个漏洞，以下是本文所述每个漏洞的详细信息。 无效目录权限...

FreeBSD Ports: postnuke

The remote host is missing an update to the system as announced in the referenced advisory. VID f3eec2b5-8cd8-11d9-8066-000a95bc6fae OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-0615

Directory traversal vulnerability in wp-admin/admin.php in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allows remote authenticated users to read arbitrary files via a .. dot dot in the 1 folder and 2 file parameters...

CVE-2008-0615

CVE-2008-0615 concerns the DMSGuestbook WordPress plugin, specifically versions 1.7.0 and 1.8.0. A directory traversal flaw in wp-admin/admin.php lets remote authenticated users read arbitrary files by supplying path traversal sequences in the folder and file parameters. The security impact is co...

CVE-2007-0615

Technical details (affected product version, root cause, and remediation) are not publicly available in the provided connected documents. Monitor for updates from official advisories to obtain concrete exploit methods, impacted configurations, and fixes.

CentOS 3 / 4 : gnupg (CESA-2006:0615)

Updated GnuPG packages that fix a security issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GnuPG is a utility for encrypting data and creating digital signatures. An integer overflow flaw was found in GnuPG. An attacker...

RHEL 4 : gnupg (RHSA-2006:0615)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2006:0615 advisory. - GnuPG ParseComment Remote Buffer Overflow CVE-2006-3746 Note that Nessus has not tested for this issue but has instead relied only on the...

CVE-2006-0615

CVE-2006-0615 concerns multiple unspecified vulnerabilities in Sun Java JDK/JRE 5.0 Update 4 and earlier (and 1.4.x through 1.4.2_09) that allow remote attackers to bypass the Java sandbox and obtain privileges via reflection APIs. Affected components include the Java applet/JRE sandbox and Web S...

CVE-2004-0615

Cross-site scripting XSS vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request...

CVE-2002-0615

CVE-2002-0615 affects Windows Media Player 7.1 (and related Media Player versions) where the Windows Media Active Playlist stores data in a well-known local file path, enabling HTML script execution in the Local Computer zone. Connected documentation also references MS02-032 (patch 320920) that f...

CVE-2004-0615

Cross-site scripting XSS vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request...