Linux kernel 2.6.x 'net/bridge/br_multicast.c'本地拒绝服务漏洞(CVE-2011-0716)

BUGTRAQ ID: 46433 CVE ID: CVE-2011-0716 Linux Kernel是Linux操作系统的内核。 Linux Kernel在实现上存在本地拒绝服务漏洞，攻击者可利用此漏洞造成内核崩溃、拒绝服务合法用户 0 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

Microsoft SharePoint Cross Site Scripting Vulnerability

This host is running Microsoft SharePoint Server and is prone to Cross Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbmssharepointxssvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Microsoft SharePoint Cross Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 20...

CVE-2010-0716

layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files aka attachments, which allows remote authenticated users to leverage same-origin relationships and...

CVE-2010-0716

Affected software : Microsoft SharePoint (Documents module). Vulnerability : Cross-site scripting via _layouts/Upload.aspx when uploading files (same-hostname/port used for primary files and attachments). Root cause : same-origin relationship leveraged to inject script in uploaded TXT files; requ...

[security bulletin] HPSBMA02422 SSRT080146 rev.1 - HP StorageWorks Storage Mirroring, Remote Execution of Arbitrary Code, Denial of Service (DoS), Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01707538 Version: 1 HPSBMA02422 SSRT080146 rev.1 - HP StorageWorks Storage Mirroring, Remote Execution of Arbitrary Code, Denial of Service DoS, Unauthorized Access NOTICE: The information in thi...

CVE-2009-0716

HP StorageWorks Storage Mirroring (software) v5.x is affected by CVE-2009-0716 for versions prior to 5.1.1.1090.15. The vulnerability permitted remote attackers to cause a denial of service or obtain unauthorized access via unspecified vectors; a separate HP security bulletin notes remote code ex...

CVE-2008-0716

The CVE-2008-0716 entry affects the Symantec Altiris Notification Server agent (AeXNSAgent) prior to version 6.0 SP3 R7. The vulnerability enables local privilege escalation via a "Shatter"-style attack, with an impact on confidentiality, integrity, and availability. NVD lists a base score of 6.8...

QuickTime < 7.1.5 Multiple Vulnerabilities (Windows)

According to its version, the installation of QuickTime on the remote Windows host is affected by multiple buffer overflows. An attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the remote host by sending a specially crafted file to a...

CVE-2007-0716

CVE-2007-0716 : Apple QuickTime before 7.1.5 contains a stack-based buffer overflow in QTIF file handling. A remote, user-assisted attacker can crash the application or potentially execute arbitrary code by presenting a crafted QTIF file. Corrective action identified in the connected sources is t...

CVE-2006-0716

CVE-2006-0716: A SQL injection vulnerability in sNews 1.3—specifically in index.php—allows remote attackers to inject arbitrary SQL via the category and id parameters. The connected documents confirm the affected software (sNews 1.3) and the vulnerable component (index.php) with the underlying is...

CVE-2005-0716

CVE-2005-0716 affects Mac OS X 10.3.5/10.3.6 (and possibly earlier) where a stack-based buffer overflow in the Core Foundation Library is triggered by a long CF_CHARSET_PATH environment variable. This local vulnerability could allow an attacker to execute arbitrary code on the affected system; iD...

CVE-2004-0716

Buffer overflow in the DCE daemon DCED for the DCE endpoint mapper epmap on HP-UX 11 allows remote attackers to execute arbitrary code via a request with a small fragment length and a large amount of data...

CVE-2004-0716

CVE-2004-0716 is a buffer overflow in HP’s DCE endpoint mapper (epmap) within the DCED daemon on HP-UX 11, allowing remote code execution via a small fragment length and large stub data. Patches exist: HP-UX patches B.11.00 PHSS_29963, B.11.11 PHSS_29964, B.11.23 PHSS_29966; HP Tru64 and HP OpenV...

CVE-2002-0716

Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name argument...

CVE-2001-0716

CVE-2001-0716 affects Citrix MetaFrame 1.8 Server with Service Pack 3 and Citrix MetaFrame XP/XP SP1. The vulnerability stems from improper handling of multiple sessions during authentication, allowing a remote attacker to cause a crash/DoS by initiating a large number of incomplete sessions. The...

CVE-2000-0716

CVE-2000-0716 affects WorldClient email client in MDaemon 2.8. The session ID is included in the referer header of an HTTP request when the user clicks a URL, allowing the visited site to hijack the session ID and read the user’s email. Exploitation details are not provided in the documents, and ...

CVE-2000-0716

WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email...

CVE-2000-0716

WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email...

CVE-1999-0716

CVE-1999-0716 is a historical vulnerability described across multiple sources as a buffer overflow in Windows NT 4.0’s help file utility triggered by a malformed help file. The Red Hat advisory and CVE entries confirm the issue but do not provide concrete exploit details beyond the basic descript...