CVE-2017-0679

CVE-2017-0679 is a remote code execution vulnerability in the Android media framework. Affected products/versions: Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. Description in CVE notes a remote code execution vulnerability within the Media framework, with impact described as requiring user interact...

CVE-2016-0679

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect integrity and availability via vectors related to PIA Grids...

CVE-2016-0679

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote authenticated users to affect integrity and availability via vectors related to PIA Grids...

CVE-2016-0679

CVE-2016-0679 affects Oracle PeopleSoft Products, specifically the PeopleTools component (8.53–8.55). The issue resides in the PIA Grids subcomponent and can be exploited by a remote authenticated attacker to impact integrity and availability . CNVD-2016-02554 characterizes it as a Denial of Serv...

Oracle: Security Advisory (ELSA-2014-0679)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2010-0679)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0679

The CVE-2015-0679 vulnerability affects Cisco Wireless LAN Controller (WLC) devices running 7.3(103.8) and 7.4(110.0). The issue arises in the web authentication feature where ill-formed/malformed passwords are mishandled, enabling an unauthenticated, adjacent attacker to trigger a denial-of-serv...

Hyleos ChemView ActiveX Control Stack Buffer Overflow

No description provided by source. $Id: hyleoschemviewxactivex.rb 9935 2010-07-27 02:25:15Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Cisco Prime Infrastructure任意命令执行漏洞(CVE-2014-0679)

BUGTRAQ ID: 65816 CVECAN ID: CVE-2014-0679 Cisco Prime Infrastructure是通过思科技术LMS和NCS进行无线管理的解决方案。 Cisco Prime Infrastructure没有正确验证URL请求，未经身份验证的远程攻击者可以root级别的权限执行任意命令。 0 Cisco Prime Infrastructure 2.0 Cisco Prime Infrastructure 1.4 Cisco Prime Infrastructure 1.3 Cisco Prime Infrastructure 1.2 厂商补丁：...

CVE-2014-0679

Cisco Prime Infrastructure versions 1.2/1.3 before 1.3.0.20-2, 1.4 before 1.4.0.45-2, and 2.0 before 2.0.0.0.294-2 are affected by CVE-2014-0679 due to improper validation of URL requests. An authenticated, remote attacker could exploit an unspecified URL to execute arbitrary commands with root p...

Oracle Linux 5 : rpm (ELSA-2010-0679)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0679 advisory. - fix CVE-2010-2059, fails to drop SUID/SGID bits on package upgrade 626707 Tenable has extracted the preceding description block directly from the Oracle Linux...

CVE-2013-0679

CVE-2013-0679 concerns Siemens WinCC Web Server: a Relative Path Traversal vulnerability that allows remote authenticated users to read arbitrary files by crafting a URL pathname. Affected products include WinCC prior to 7.2 (and SIMATIC PCS7 prior to 8.0 SP1); the issue arises in the Web server ...

CVE-2012-0679

The CVE-2012-0679 issue affects Apple Safari prior to version 6.0, where a feed:// URL can be used to read arbitrary local files. This is documented in the NVD entry and corroborated by Red Hat and other vendors' advisories referencing Safari

CVE-2011-0679

Vulnerability (CVE-2011-0679) affects IBM WebSphere Portal 6.0.1.1 through 7.0.0.0, as deployed with IBM Lotus Web Content Management (WCM) and IBM Lotus Quickr for WebSphere Portal. The issue allows remote attackers to obtain sensitive information via a “modified message.” The NVD entry confirms...

Hyleos ChemView ActiveX Control Stack Buffer Overflow

This module exploits a stack-based buffer overflow within version 1.9.5.1 of Hyleos ChemView HyleosChemView.ocx. By calling the 'SaveAsMolFile' or 'ReadMolFile' methods with an overly long first argument, an attacker can overrun a buffer and execute arbitrary code. This module requires Metasploit...

CVE-2010-0679

creationtimestamp| type| source ---|---|--- 2010-07-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16500 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/hyleoschemviewxactivex.rb 2025-02-06...

CVE-2010-0679

Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control HyleosChemView.ocx in Hyleos ChemView 1.9.5.1 allow remote attackers to execute arbitrary code via a large number of white space characters in the filename argument to the 1 SaveasMolFile and 2 ReadMolFile...

CVE-2010-0679

CVE-2010-0679 concerns multiple stack-based buffer overflows in Hyleos ChemView ActiveX (HyleosChemView.ocx, version 1.9.5.1). The issue arises when calling SaveAsMolFile or ReadMolFile with a very long filename argument containing whitespace, allowing remote code execution. Public references doc...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter in a sendmessage action and the 2 username parameter when registering a new user, different vectors than CVE-2008-0679...

CVE-2008-6631

Multiple cross-site scripting XSS vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter in a sendmessage action and the 2 username parameter when registering a new user, different vectors than CVE-2008-0679...