102 matches found
UBUNTU-CVE-2016-0763
The setGlobalContext method in org/apache/naming/factory/ResourceLinkFactory.java in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M3 does not consider whether ResourceLinkFactory.setGlobalContext callers are authorized, which allows remote authenticated users to bypass...
Fixed in Apache Tomcat 9.0.0.M3
Moderate: Security Manager bypass CVE-2016-0763 This issue only affects users running untrusted web applications under a security manager. ResourceLinkFactory.setGlobalContext is a public method and was accessible to web applications even when running under a security manager. This allowed a...
Synology Video Station Arbitrary Command Execution Vulnerability
Synology Video Station is a video manager from Synology. A security vulnerability exists in Synology Video Station versions prior to 1.5-0763, which can be exploited by remote attackers to execute arbitrary shell commands...
Synology Video Station SQL Injection Vulnerability (CNVD-2015-06009)
Synology Video Station is a video manager from Synology. A SQL injection vulnerability exists in Synology Video Station versions prior to 1.5-0763, which can be exploited by remote attackers to execute arbitrary SQL commands...
Advantech WebAccess < 7.2-2013.11.14 Multiple Vulnerabilities
Binary data scadaadvantechwebaccess7220131114.nbin...
CVE-2015-0763
CVE-2015-0763 affects Cisco Unified MeetingPlace 8.6(1.2). The vulnerability arises because the product does not properly validate session IDs in HTTP URLs, enabling a remote attacker to obtain sensitive session information via a crafted URL. The issue is an information-disclosure flaw (not a den...
Adobe Shockwave Player <= 11.6.3.633 Multiple Code Execution Vulnerabilities (APSB12-02) (Mac OS X)
The remote Mac OS X host contains a version of Adobe Shockwave Player that is 11.6.3.633 or earlier. It is, therefore, affected by multiple code execution vulnerabilities. - Multiple memory corruption issues exist related to the Shockwave 3D Asset that allow code execution. CVE-2012-0757,...
Critical: Red Hat Security Advisory: rubygem-openshift-origin-node security update
An updated rubygem-openshift-origin-node package that fixes one security issue is now available for Red Hat OpenShift Enterprise 2.0.6. The Red Hat Security Response Team has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...
Advantech WebAccess SQL Injection Information Disclosure (CVE-2014-0763)
Multiple vulnerabilities have been reported in Advantech WebAccess. A remote attacker can exploit these vulnerabilities by sending a specially crafted request to the affected server...
CVE-2014-0763
Summary of CVE-2014-0763 (Advantech WebAccess) : The vulnerability affects Advantech WebAccess (7.1 and earlier) in the DBVisitor.dll component exposed via SOAP interfaces, where SOAP injection enables SQL injection through the ChartThemeConfig/service vectors. This may allow an attacker to perfo...
openSUSE: Security Advisory for Mozilla (openSUSE-SU-2013:0149-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2013-0763
CVE-2013-0763 is a use-after-free vulnerability in Mozilla Firefox (pre-18.0) and Firefox ESR 17.x (pre-17.0.1), Thunderbird (pre-17.0.2/ESR 17.x pre-17.0.1), and SeaMonkey (pre-2.15). It is triggered via Mesa driver interactions and a resized WebGL canvas, potentially allowing remote attackers t...
Ubuntu Update for thunderbird USN-1681-2
Check for the Version of thunderbird OpenVAS Vulnerability Test $Id: gbubuntuUSN16812.nasl 8456 2018-01-18 06:58:40Z teissa $ Ubuntu Update for thunderbird USN-1681-2 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...
Security update available for Adobe Shockwave Player
Security update available for Adobe Shockwave Player Release date: February 14, 2012 Vulnerability identifier: APSB12-02 CVE number: CVE-2012-0757, CVE-2012-0758, CVE-2012-0759, CVE-2012-0760, CVE-2012-0761, CVE-2012-0762, CVE-2012-0763, CVE-2012-0764, CVE-2012-0766 Platform: Windows and Macintos...
CVE-2012-0763
CVE-2012-0763 affects Adobe Shockwave Player, specifically the Shockwave 3D Asset component. The vulnerability allows arbitrary code execution or a denial of service via memory corruption in affected Shockwave Player versions prior to 11.6.4.634, with vectors unspecified in the provided documents...
Shockwave Player <= 11.6.3.633 Multiple Code Execution Vulnerabilities (APSB12-02)
The remote Windows host contains a version of Adobe's Shockwave Player that is 11.6.3.633 or earlier. As such, it is potentially affected by multiple code execution vulnerabilities. - Multiple memory corruption issues exist related to the Shockwave 3D Asset that could lead to code execution...
CVE-2010-0763
SQL injection vulnerability in index.php in CommodityRentals Vacation Rental Software allows remote attackers to execute arbitrary SQL commands via the rentalid parameter in a CalendarView action...
CVE-2010-0763
The CVE-2010-0763 issue is a SQL injection in CommodityRentals Vacation Rental Software, specifically in index.php’s CalendarView action via the rental_id parameter. Affected component/function: CalendarView (rental_id). Root cause: unsanitized input leading to arbitrary SQL execution. Impact per...
CVE-2010-0763
SQL injection vulnerability in index.php in CommodityRentals Vacation Rental Software allows remote attackers to execute arbitrary SQL commands via the rentalid parameter in a CalendarView action...
