CVE-2015-0670

Cisco Small Business SPA300 and SPA500 IP phones running firmware version 7.5.5 are affected by CVE-2015-0670 due to improper authentication in the default configuration. A crafted XML request can allow an unauthenticated remote attacker to read audio-stream data or originate telephone calls. The...

CVE-2014-0670

Cisco MediaSense is affected by a Cross-Site Scripting (XSS) vulnerability in the Search and Play interface (CVE-2014-0670). The root cause is insufficient input validation of a parameter, enabling an unauthenticated, remote attacker to inject arbitrary web script or HTML by luring a user to a ma...

CVE-2014-0670

Cross-site scripting XSS vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum16686...

CVE-2013-0670

Siemens WinCC (TIA Portal) 11 HMI Web application is affected by CVE-2013-0670 (CRLF injection). A crafted URL can lead to HTTP header injection and HTTP response splitting via the HMI Web server. Public sources (NVD, Red Hat cve page, ICS-CERT advisory) confirm the vulnerability in WinCC V11 and...

Mac OS X v10.6.8 Multiple Vulnerabilities (2012-004)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-004. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mac OS X Multiple Vulnerabilities (Security Update 2012-004) (BEAST)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-004 applied. This update contains multiple security-related fixes for the following components : - Apache - Data Security - DirectoryService - ImageIO - International Components for Unicode - Mail - PHP ...

Mac OS X 10.7.x < 10.7.5 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.5. The newer version contains multiple security-related fixes for the following components : - Apache - BIND - CoreText - Data Security - ImageIO - Installer - International Components for Unicode - Kernel - Mail - PHP ...

ZDI-12-153 : Apple QuickTime sean Atom Size Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-153 : Apple QuickTime sean Atom Size Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-153 August 22, 2012 - -- CVE ID: CVE-2012-0670 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors:...

QuickTime < 7.7.2 Multiple Vulnerabilities

Binary data 6489.prm...

Apple QuickTime 7.7.2之前版本多个远程任意代码执行漏洞

BUGTRAQ ID: 53547 CVE ID: CVE-2012-0663,CVE-2012-0664,CVE-2012-0665,CVE-2012-0666,CVE-2012-0667,CVE-2012-0668,CVE-2012-0669,CVE-2012-0670,CVE-2012-0671,CVE-2012-0265 OS X Lion Server 内含一组应用软件，可将任意一台Mac 变成功能强大的服务器。Mac OS是一套运行于苹果的Macintosh系列电脑上的操作系统。 Windows 7、Vista、XP上的Apple QuickTime...

CVE-2012-0670

Apple QuickTime is affected by CVE-2012-0670 due to an integer overflow in the handling of the 'sean' atom in movie files, affecting QuickTime prior to 7.7.2. The vulnerability allows remote code execution or a crash when a crafted file is opened. According to ZDI, Apple issued an update (HT5261)...

CVE-2011-0670

CVE-2011-0670 describes a use-after-free vulnerability in win32k.sys within Windows kernel-mode drivers that enables local privilege escalation. Affected are Windows XP (SP2/SP3), Windows Server 2003 (SP2), Windows Vista (SP1/SP2), Windows Server 2008 (Gold, SP2, R2, R2 SP1), and Windows 7 (Gold,...

Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2506223)

This host is missing a critical security update according to Microsoft Bulletin MS11-034. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-0670

Unspecified vulnerability in the IP-Tech JQuarks comjquarks Component before 0.2.4 for Joomla! allows attackers to obtain the installation path for Joomla! via unknown vectors...

CVE-2010-0670

CVE-2010-0670 affects the IP-Tech JQuarks (com_jquarks) component for Joomla! up to version 0.2.4. The vulnerability is described as an unspecified issue that allows attackers to obtain the Joomla! installation path via unknown vectors. The connected sources confirm the affected product/version a...

CVE-2008-0670

The CVE-2008-0670 entry concerns the Joomla! Noticias (com_noticias) 1.0 component. A SQL injection flaw exists in index.php, exploitable via the id parameter in the detalhe action, allowing remote attackers to execute arbitrary SQL commands. This is documented across multiple sources (NVD and re...

CVE-2007-0670

CVE-2007-0670 affects IBM AIX 5.2 and 5.3, where a buffer overflow in bos.rte.libc can be triggered by the r-commands (rdist, rsh, rcp, rsync, rlogin) to allow local users to execute arbitrary code. Root cause: insufficient bounds checking in bos.rte.libc. Impact: local code execution with partia...

[SECURITY] [DSA 990-1] New bluez-hcidump packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 990-1 [email protected] http://www.debian.org/security/ Martin Schulze March 10th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 990-1] New bluez-hcidump packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 990-1 [email protected] http://www.debian.org/security/ Martin Schulze March 10th, 2006 http://www.debian.org/security/faq -...

CVE-2005-0670

The provided threat data centers on phpCOIN versions 1.2.0 through 1.2.1b, which are reported to contain multiple input-validation flaws. The CVE-2005-0670 entry describes cross-site scripting (XSS) vulnerabilities allowing arbitrary script/HTML injection via specific parameters to mod.php and lo...