Mageia: Security Advisory (MGASA-2016-0029)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Solaris Third-Party Patch Update : flash (multiple_vulnerabilities_in_adobe_flashplayer6)

The remote Solaris system is missing necessary patches to address security updates : - Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors, a...

XOOPS Module WF Section SQL Injection (CVE-2005-0725)

An SQL injection vulnerability has been reported in Wf-sections. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2014-0725

CVE-2014-0725 affects Cisco Unified Communications Manager (UCM). A vulnerability due to missing authentication allows an unauthenticated, remote attacker to access WAR files stored in a file storage location, potentially exposing sensitive information contained in those files. Cisco’s advisory n...

FreeBSD Ports: linux-f10-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. VID 20923a0d-82ba-11e1-8d7b-003067b2972c OpenVAS Vulnerability Test $ Description: Auto generated from VID 20923a0d-82ba-11e1-8d7b-003067b2972c Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: linux-f10-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Google Chrome < 18.0.1025.151 Multiple Vulnerabilities (Apr 2012) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome < 18.0.1025.151 Multiple Vulnerabilities (Apr 2012) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Flash Player 远程内存破坏漏洞(CVE-2012-0725)

Bugtraq ID: 52914 CVE ID：CVE-2012-0725 Google Chrome是一款流行的WEB浏览器。Adobe Flash Player是一款Flash文件处理程序 Windows, Macintosh, Linux和Solaris平台下的Adobe Flash Player 11.1.102.63和之前版本，Android 3.x和2.x下的Adobe Flash Player 11.1.111.7及之前存在多个严重漏洞。这些漏洞可导致应用程序崩溃或可能允许攻击者完全控制受影响系统 Chrome interface中的Flash...

CVE-2012-0725

Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2012-0724...

CVE-2012-0725

CVE-2012-0725 affects Adobe Flash Player prior to 11.2.202.229 in Google Chrome up to 18.0.1025.151. The description notes memory corruption that could lead to a denial of service or possibly other impact via unknown vectors; no concrete exploit details or remediation are provided in the document...

CVE-2011-0725

The CVE-2011-0725 entry concerns Aptdaemon 0.40 on Ubuntu 10.10/11.04. Affected component: org.debian.apt.UpdateCachePartially (worker.py). Root cause: improper filtering of certain D‑Bus arguments via the Aptdaemon interface, enabling an absolute path traversal. Impact: local users can read arbi...

CVE-2010-0725

CVE-2010-0725 describes a Cross-site scripting (XSS) vulnerability in Arab Cart 1.0.2.0. The flaw is in showimg.php and allows an attacker to inject arbitrary web script or HTML by manipulating the id parameter. The cited NVD entry shows a base score of 4.3 (Medium) under CVSS v2, with no confide...

CVE-2008-0725

CVE-2008-0725 refers to multiple heap-based buffer overflows in Titan FTP Server 6.0.5.549 affecting the FTP service and the administration service. An attacker could trigger a daemon hang (DoS) and possibly execute arbitrary code by sending overly long commands. The CVE notes that USER and PASS ...

CVE-2007-0725

CVE-2007-0725 describes a buffer overflow in the AirPortDriver module of AirPort on Mac OS X 10.3.9–10.4.9 when run on hardware with the original AirPort wireless card. The vulnerability allows local users to execute arbitrary code by sending malformed control commands. The descriptions confirm t...

Remote file inclusion

PHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows remote attackers to execute arbitrary code via a URL in the PXconfigmanagerpath parameter. NOTE: this is a different executable and affected version than CVE-2006-0725...

CVE-2006-0725

CVE-2006-0725 describes a PHP remote file inclusion in Plume CMS via the _PX_config[manager_path] parameter to prepend.php. The vulnerability is triggered when register_globals is enabled, allowing an attacker to cause arbitrary file inclusion by supplying a URL, potentially executing code on the...

Helix RealServer Buffer Overrun

RealServer 8.0 and earlier and Helix Server 9.0 is vulnerable to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2003 Montgomery County Maryland Government Security Team Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2005-0725

SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections wfsections 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php...

CVE-2005-0725

CVE-2005-0725 describes an SQL injection in the WF-Sections (wfsections) 1.07 module. The vulnerability exists in the getAllbyArticle function of wfsfiles.php and allows remote attackers to inject arbitrary SQL through the articleid parameter to article.php. Multiple connected records corroborate...