CVE-2012-2898

CVE-2012-2898 affects Google Chrome for iOS prior to 21.0.1180.82 on iPad devices. The vulnerability enables remote attackers to spoof the Omnibox URL by exploiting SSL error message handling, a URL-bar spoofing issue related to CVE-2012-0674. The Chrome update 21.0.1180.82 (Chrome for iOS) addre...

Oracle Linux 5 : Moderate: / perl-Net-DNS (ELSA-2007-0674)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2007-0674 advisory. 0.31-4.el3 - Resolves: rhbz245616 - Backport patch to fix dnexpand looping issue - Backport patch to randomize ID field - Also allow disabling of onlin...

Siemens SIMATIC WinCC RegReader ActiveX Control Buffer Overflow (CVE-2013-0674)

A stack-based buffer overflow vulnerability has been reported in Siemens SIMATIC WinCC...

CVE-2013-0674

Siemens WinCC RegReader ActiveX Control vulnerability (CVE-2013-0674) affects WinCC prior to 7.2 and SIMATIC PCS7 prior to 8.0 SP1. A stack-based buffer overflow in RegReader can be triggered via a long parameter in the ActiveX control, potentially allowing remote code execution in the user’s bro...

AIX 5.2 TL 9 / 5.2 TL 8 : bos.net.tcp.client (U477911)

The remote host is missing AIX PTF U477911, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U477911. The text itself is copyright C...

AIX 5.3 TL 5 / 5.3 TL 4 : bos.net.tcp.client (U497412)

The remote host is missing AIX PTF U497412, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U497412. The text itself is copyright C...

CVE-2012-0674

Safari in Apple iOS before 5.1.1 allows remote attackers to spoof the location bar's URL via a crafted web site...

CVE-2012-0674

The CVE-2012-0674 entry concerns Safari in Apple iOS prior to 5.1.1, where a crafted website could spoof the URL in the location bar. Connected documents confirm the issue is a UI/URL spoof vulnerability in Safari (iOS) with the remediation being the iOS 5.1.1 update that fixes URL handling to pr...

CVE-2011-0674

CVE-2011-0674 is a use-after-free in the Windows kernel-mode driver win32k.sys that allows local privilege escalation. Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2, Windows Server 2008 SP2/R2, and Windows 7 SP1. Root cause: incorrect management of k...

Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2506223)

This host is missing a critical security update according to Microsoft Bulletin MS11-034. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-0674) Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel due to a use-after-free condition. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete...

Mac OS X Security Update 2008-005

The remote host is missing Security Update 2008-005. One or more of the following components are affected: Open Scripting Architecture BIND CarbonCore CoreGraphics Data Detectors Engine Disk Utility OpenLDAP OpenSSL PHP QuickLook rsync OpenVAS Vulnerability Test Mac OS X Security Update 2008-005...

Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003

The remote host is missing Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2010-0674

CVE-2010-0674 affects StatCounteX 3.1. The issue is improper access control: sensitive data is stored under the web root and can be downloaded via a direct request to path/stats.mdb, leading to partial confidentiality loss. Public references in the record indicate remote access exposure and provi...

CVE-2010-0674

creationtimestamp| type| source ---|---|--- 2010-02-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11434...

Mac OS X 10.5.x < 10.5.8 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.8. Mac OS X 10.5.8 contains security fixes for the following products : - bzip2 - CFNetwork - ColorSync - CoreTypes - Dock - Image RAW - ImageIO - Kernel - launchd - Login Window - MobileMe - Networking - XQuery C Tenab...

CVE-2009-0674

CVE-2009-0674 affects RavenNuke 2.30 (Raven Web Services). The vulnerability arises when register_globals and display_errors are enabled, allowing remote attackers to probe local file existence by sending requests with full paths in the aFonts array parameter and observing differing error message...

CVE-2009-0674

creationtimestamp| type| source ---|---|--- 2009-02-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8068...

Gentoo Security Advisory GLSA 200811-05 (php)

The remote host is missing updates announced in advisory GLSA 200811-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200811-05 (php)

The remote host is missing updates announced in advisory GLSA 200811-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...